Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: qSdbukdG/syuXbqlff+49zDAV9DKkIFIc62tKGovouM=
Subject key identifier: 4C:D2:6E:A3:3C:2B:6A:85:28:CC:DE:3F:93:94:E6:4E:F5:96:A1:49
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A10994A3432D99A2A9C1CC8027570739BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DB6
Signing time: Mon 05 Oct 2026 01:01:38 +0000
Manifest this update: Mon 05 Oct 2026 01:01:38 +0000
Manifest next update: Tue 06 Oct 2026 01:01:38 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: Ez/opbFYGKDPt/ngck/mCUgZk6aL7UQ9tuQrXNwc1DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:a3:43:2d:99:a2:a9:c1:cc:80:27:57:07:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 5 01:01:38 2026 GMT
Not After : Oct 6 01:01:38 2026 GMT
Subject: CN=4cd26ea33c2b6a8528ccde3f9394e64ef596a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:da:37:a8:77:df:ea:59:d4:7a:3a:b9:b3:
e8:91:03:62:b4:76:ec:a4:8e:7c:03:db:b3:b6:bc:
47:20:b6:6d:40:99:64:c8:1a:91:4a:6c:5d:12:02:
b5:0f:04:93:35:74:5a:13:f8:f7:34:65:fe:95:cf:
a7:32:da:62:d5:4d:e7:0f:ad:78:4c:15:75:bd:87:
79:f8:d6:e5:8a:86:03:3e:cc:66:6c:15:f3:7f:00:
6b:5e:88:e2:bb:4b:44:a1:be:0d:ed:0c:bf:7f:33:
63:61:ee:c3:3f:ac:60:73:76:67:08:b5:b3:27:df:
ec:c8:d7:bb:7f:7b:8e:f7:fc:e2:05:bb:70:2e:21:
80:aa:8e:3a:8a:5f:af:72:43:a3:06:05:bd:50:fb:
ca:26:5f:f6:2b:12:e7:e1:37:db:70:01:8d:02:13:
f8:4d:ba:7c:b3:e2:2c:ac:21:38:be:2f:c0:07:f7:
66:3c:bd:fb:69:06:28:a2:97:c4:f1:1e:e4:60:a2:
9d:6c:47:c8:69:a1:4d:09:6c:bd:5d:15:2c:cb:e5:
2d:c9:de:27:21:28:d8:a9:89:c0:1e:06:52:a3:9e:
79:74:0d:b0:c3:80:b2:1d:bb:c2:1f:42:45:9a:56:
fa:4d:d1:1a:24:ae:5c:83:6c:0f:a8:b1:d9:d2:5b:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:6E:A3:3C:2B:6A:85:28:CC:DE:3F:93:94:E6:4E:F5:96:A1:49
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e1:b4:28:30:54:81:bd:16:42:b4:6d:ef:0a:9e:39:51:8e:
37:f9:03:d3:6a:77:29:41:6f:c6:80:59:bc:a0:66:3e:6b:fc:
7a:62:98:9e:4f:e6:a5:71:3e:ab:c7:15:f6:ce:20:23:48:11:
75:32:cc:d0:1f:1f:a6:a7:89:ba:8a:04:4a:e7:1d:ed:03:6d:
28:f7:d7:7c:62:44:75:0a:ef:32:ee:35:10:dd:42:28:d3:9c:
90:2a:1f:f6:b1:65:30:7f:15:9c:c0:5d:7d:ca:4c:49:da:8b:
1b:52:cf:bf:ef:80:89:d1:59:dc:3c:b5:e7:ab:06:dd:9d:ff:
c2:0c:24:ae:0d:7b:96:ca:1e:f7:b3:c7:59:d0:cf:4b:98:ef:
54:a1:e3:69:4f:fe:00:81:14:bd:db:b1:b2:c6:b7:4d:7d:fe:
10:91:6e:53:26:a9:a5:03:94:96:0c:15:87:9b:d8:19:81:06:
fa:d3:57:a5:3f:99:ef:a8:2d:37:c0:e4:36:f0:d7:f4:65:0d:
b2:8f:4e:44:67:af:d3:44:4c:53:00:0a:fd:ac:af:f7:37:d9:
1a:bd:6c:70:04:66:36:eb:5a:64:e6:f5:87:20:3c:5d:ec:73:
57:43:bb:8f:d3:88:49:2a:af:1a:a1:48:19:85:e9:f1:d6:0c:
c3:45:2c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJlKNDLZmiqcHMgCdXBzm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh
NGUzYTEwHhcNMjYxMDA1MDEwMTM4WhcNMjYxMDA2MDEwMTM4WjAzMTEwLwYDVQQD
Eyg0Y2QyNmVhMzNjMmI2YTg1MjhjY2RlM2Y5Mzk0ZTY0ZWY1OTZhMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PfaN6h33+pZ1Ho6ubPokQNitHbs
pI58A9uztrxHILZtQJlkyBqRSmxdEgK1DwSTNXRaE/j3NGX+lc+nMtpi1U3nD614
TBV1vYd5+NblioYDPsxmbBXzfwBrXojiu0tEob4N7Qy/fzNjYe7DP6xgc3ZnCLWz
J9/syNe7f3uO9/ziBbtwLiGAqo46il+vckOjBgW9UPvKJl/2KxLn4TfbcAGNAhP4
Tbp8s+IsrCE4vi/AB/dmPL37aQYoopfE8R7kYKKdbEfIaaFNCWy9XRUsy+Utyd4n
ISjYqYnAHgZSo555dA2ww4CyHbvCH0JFmlb6TdEaJK5cg2wPqLHZ0lsmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzSbqM8K2qFKMzeP5OU5k71lqFJMB8GA1UdIwQY
MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt
MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0
LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+G0KDBU
gb0WQrRt7wqeOVGON/kD02p3KUFvxoBZvKBmPmv8emKYnk/mpXE+q8cV9s4gI0gR
dTLM0B8fpqeJuooESucd7QNtKPfXfGJEdQrvMu41EN1CKNOckCof9rFlMH8VnMBd
fcpMSdqLG1LPv++AidFZ3Dy156sG3Z3/wgwkrg17lsoe97PHWdDPS5jvVKHjaU/+
AIEUvduxssa3TX3+EJFuUyappQOUlgwVh5vYGYEG+tNXpT+Z76gtN8DkNvDX9GUN
so9ORGev00RMUwAK/ayv9zfZGr1scARmNutaZOb1hyA8XexzV0O7j9OISSqvGqFI
GYXp8dYMw0UslA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 11:52:22 2026 by rpki-client