Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: oCS8vZqVFFyHRI0rywlWElFL4SENT3imEceZW1UWDSQ=
Subject key identifier: A2:A1:00:9B:28:97:F0:E9:9F:5D:20:13:8D:31:40:A8:B7:70:45:2A
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019D270464B6BBE0A3F146BBB402D5775CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0BB3
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: DgKr/+8Fv2LmpZc3UBNfMzke/l+558A7e/mr3W/uMu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:64:b6:bb:e0:a3:f1:46:bb:b4:02:d5:77:5c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=a2a1009b2897f0e99f5d20138d3140a8b770452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:17:74:87:9e:74:42:e3:3e:0a:12:9b:4d:
64:c0:d7:82:22:04:e9:c8:c6:79:67:6c:de:db:06:
34:07:34:4b:bd:52:77:2e:5a:24:1e:42:9f:d9:c0:
c3:4f:5d:51:58:e2:fa:f1:08:d9:c8:de:f2:e1:6b:
af:4d:03:74:85:a6:1a:c4:e6:84:50:a3:28:44:32:
af:8b:f7:a7:65:8a:e9:34:0c:a0:39:3a:5c:51:76:
74:cb:fa:df:0f:73:86:a6:14:6d:78:e2:e3:55:56:
f6:48:93:72:1c:10:a6:f4:14:4a:b8:d9:78:a3:70:
95:51:8d:00:e3:03:e8:91:f8:ef:ad:fc:85:5d:a0:
28:54:82:3e:69:6f:7c:0f:97:67:17:d9:da:b6:31:
94:d2:dc:e6:3e:f0:38:ab:80:e8:b3:6f:37:17:a8:
f1:b5:a7:88:93:30:d9:19:28:4a:ca:89:e0:71:d3:
18:74:d2:ec:90:7b:33:60:3c:44:cb:9e:a2:fb:33:
bc:5c:a7:89:6a:94:06:33:5b:af:23:20:d4:0f:4a:
20:88:00:9c:37:b1:22:7d:49:9d:e5:74:87:d4:0a:
04:14:ce:01:4c:36:b5:6c:11:a8:2d:d8:0b:28:0a:
9d:b9:18:ff:65:df:b9:73:da:87:fc:0b:da:13:75:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:00:9B:28:97:F0:E9:9F:5D:20:13:8D:31:40:A8:B7:70:45:2A
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:ae:52:06:f2:b2:7c:c5:21:c5:f2:cb:2c:62:3f:fe:0d:
d2:fb:66:96:d8:20:12:62:14:98:ab:7c:95:e7:ba:98:5e:b5:
ac:ab:b3:97:c3:81:54:56:62:32:da:20:c4:f3:87:9f:58:10:
7e:ac:b7:ad:6c:c5:07:05:e9:de:58:6e:02:db:d7:9e:e3:3f:
20:e4:e0:76:d7:60:69:d6:fb:17:87:80:b5:ec:b9:f0:6b:c4:
1f:8d:4a:64:75:14:67:16:c6:42:ff:34:3f:00:5c:88:b4:6a:
f5:a7:25:b5:f1:93:69:a5:3c:b1:9d:42:f3:4c:50:70:62:5a:
d6:cf:e8:2a:22:01:22:db:dd:83:dd:15:97:85:c4:13:69:04:
be:d1:3e:fe:86:61:4d:b9:91:ca:e5:ea:96:01:9f:e7:a3:24:
c5:5c:c2:8e:bb:71:17:81:56:09:ec:8c:ef:5c:cd:c1:c7:c9:
51:12:6c:c4:1b:0c:59:01:9a:5f:5a:a9:a3:fb:c0:9c:83:a8:
cb:51:eb:e5:1b:03:6e:37:d8:62:21:ba:93:11:6a:ab:5c:6f:
5d:12:6b:b4:c9:b5:30:49:f6:61:48:b7:83:12:52:9d:36:cc:
0a:d0:e1:1d:cb:3a:9b:ad:02:35:b7:d9:40:60:2b:9c:03:8a:
a2:1a:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:18 2026 by rpki-client