Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: YeEKQ/fxPRNMg5gZ7+vO+iaCIzPjy75nhrQoBeKf6w4=
Subject key identifier: 29:A5:D0:55:06:BF:98:93:ED:AD:24:39:C1:84:82:8F:DE:2F:39:E1
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A10D70CCA8BAED878A8EE3DFADAA0BAB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DB8
Signing time: Mon 05 Oct 2026 19:00:58 +0000
Manifest this update: Mon 05 Oct 2026 19:00:58 +0000
Manifest next update: Tue 06 Oct 2026 19:00:58 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: B+YOThSfd9hMLYntmtNZes/EymImYpMeZ2mG9nO+tnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:70:cc:a8:ba:ed:87:8a:8e:e3:df:ad:aa:0b:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 5 19:00:58 2026 GMT
Not After : Oct 6 19:00:58 2026 GMT
Subject: CN=29a5d05506bf9893edad2439c184828fde2f39e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:3a:60:92:02:25:6a:41:40:40:17:cd:eb:
9d:13:87:e5:21:ce:d2:f3:d8:fa:4b:66:e2:29:6d:
a1:8b:84:c2:55:9b:0d:a7:21:30:b3:1a:af:8a:d3:
59:67:dd:6e:c7:1f:1b:f4:ec:34:18:ea:b3:34:75:
03:7b:d3:b9:f2:13:b0:36:5d:29:fb:7d:e4:71:de:
f1:26:a9:33:98:75:00:5f:e5:12:d4:8c:07:e4:44:
50:2a:a8:a3:48:e8:39:a3:c0:25:6c:60:7c:e9:55:
81:6b:6d:20:90:39:65:29:0c:9a:02:d9:23:95:37:
0c:74:2e:8f:0f:5f:e4:c3:0c:ba:0d:91:51:f3:c3:
ef:d8:dd:3d:92:d1:d2:0e:86:94:86:e5:ff:32:8e:
80:6f:dd:71:f8:99:10:a4:1c:86:2e:cf:be:c2:ae:
1d:c4:79:94:8c:6d:ae:87:0e:0d:fb:03:25:b5:8d:
44:41:97:be:36:22:26:e2:a5:97:62:8b:56:78:45:
59:a5:4e:c2:65:ff:06:32:34:03:98:a3:79:be:93:
b3:de:e6:2f:e4:e9:b7:7b:9f:e3:58:21:68:2b:85:
ce:22:3d:bd:ba:b4:c1:f1:07:7b:28:e7:77:14:43:
7f:5c:99:0f:97:3a:44:1b:54:ab:c9:28:f4:ea:d1:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:D0:55:06:BF:98:93:ED:AD:24:39:C1:84:82:8F:DE:2F:39:E1
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c1:3a:4a:8f:33:41:94:69:f0:bb:e9:4c:8f:98:a0:52:f6:
3c:a8:17:c0:48:b7:85:d1:cc:06:81:8c:ba:30:84:1f:5b:57:
2e:63:3f:ff:5d:29:ff:13:6f:da:bc:06:a7:98:4a:a7:c9:c3:
ce:28:ca:ff:57:bd:a3:9a:c4:36:87:87:be:64:08:8f:41:55:
4c:72:32:e4:20:91:0d:68:3f:a3:bb:b9:b4:8f:71:72:ba:8c:
28:c7:82:9e:58:64:dc:67:d3:b3:e3:58:cc:1c:d8:ca:a7:78:
16:ec:ac:db:c9:f2:fe:9a:74:50:d7:2a:e3:18:f6:91:e4:c7:
eb:3f:9c:29:98:60:39:9e:d4:87:3b:fd:e9:5c:87:44:b5:1b:
2c:86:46:6b:17:01:1c:72:ff:bb:79:d7:a7:a9:4c:a1:dd:73:
33:c7:0f:83:ac:d6:7d:bb:c3:7f:0b:73:73:50:9f:70:06:24:
e8:cb:74:9a:85:cb:6d:e9:c4:b6:40:a0:5d:04:f3:dc:a8:0b:
32:02:eb:ae:8a:8c:d0:71:b9:c1:15:ce:84:ae:c6:4f:50:25:
bf:e0:88:8c:b2:86:b3:31:e0:b2:3f:a0:1d:bc:d2:49:c5:ea:
cc:dc:e4:0a:62:4f:9a:61:a8:27:b9:77:12:97:19:85:35:c7:
af:06:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:15:01 2026 by rpki-client