Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json)
Hash identifier: A2HfU9pxH+wddsqM1c/jv2R+j/TdXkEP7O7mznrLYRY=
Subject key identifier: 87:CB:BA:D4:FE:88:56:0B:A3:DC:57:AF:13:B3:25:01:A5:F7:36:F8
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial: 019F8FB502075C42445A71E3E118EF3774CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
Manifest number: 02CD
Signing time: Thu 23 Jul 2026 16:00:32 +0000
Manifest this update: Thu 23 Jul 2026 16:00:32 +0000
Manifest next update: Fri 24 Jul 2026 16:00:32 +0000
Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: QP8xshWGechQatwW1rE9EFUZfo+XgeSokg9DsWW79lE=)
2: WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa (hash: PhJyPBri0VSG1gtomnKeMBfQbUvbGb+z4erxQ/DDa9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:02:07:5c:42:44:5a:71:e3:e1:18:ef:37:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Validity
Not Before: Jul 23 16:00:32 2026 GMT
Not After : Jul 24 16:00:32 2026 GMT
Subject: CN=87cbbad4fe88560ba3dc57af13b32501a5f736f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:02:d6:cd:ac:dc:0b:1e:85:26:d7:9e:5f:
9f:bc:3d:6c:3d:bb:40:ef:fc:e2:6f:05:f0:b1:6f:
f2:03:48:7f:10:b2:2f:1f:59:0d:96:9d:20:2d:2e:
a9:06:cb:8e:f7:cf:32:13:39:53:84:55:cf:69:46:
06:e7:bb:72:c7:de:43:ce:51:b0:71:f8:20:f3:3f:
23:e3:82:2f:d9:bf:9a:fe:d6:53:d8:ff:15:60:59:
4c:fd:59:0d:5c:c6:48:01:62:16:02:ca:54:b8:3a:
9f:71:ea:18:df:f9:96:a1:c7:35:df:81:49:8a:94:
c2:3e:92:ce:f8:d5:5b:a9:46:a0:93:5a:b4:c5:f9:
c6:30:f8:a7:f4:45:5b:13:47:d4:2f:cc:0f:ac:6b:
e0:ef:bf:33:44:0d:60:78:b3:c4:fc:e0:de:a5:59:
35:71:b8:56:9f:a5:fc:a9:c3:d0:fc:41:42:2e:79:
4b:09:36:a7:d1:91:e9:b7:4f:36:b3:b8:b0:3a:dd:
7d:67:03:48:e3:ed:26:1d:ee:73:c5:02:0e:76:7d:
1f:c1:ee:a6:9f:f0:74:b4:64:c9:28:cd:8a:65:4d:
3f:83:d8:81:75:9c:30:8a:e8:53:2a:9c:ec:ff:e1:
68:36:bd:ed:97:bc:23:e3:45:e6:d0:25:e4:70:6b:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:BA:D4:FE:88:56:0B:A3:DC:57:AF:13:B3:25:01:A5:F7:36:F8
X509v3 Authority Key Identifier:
keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1f:da:a9:f3:17:bc:75:84:21:c2:2a:e6:ea:58:a5:37:dc:
6f:24:43:1a:84:8d:27:7e:6f:90:b8:53:3b:7a:05:09:05:1e:
3b:f2:d3:9a:49:96:9b:d8:f5:72:2b:3b:ee:d6:f2:33:c7:93:
c3:ef:53:f4:b5:30:e3:f1:ee:68:ea:fc:ff:f2:5e:71:ec:b4:
23:6f:37:7e:76:85:b7:1c:d8:52:74:66:b5:5f:7c:ba:76:cb:
31:d2:8b:8f:82:ba:23:e9:9b:71:b3:fd:ae:11:cc:5e:3c:8f:
32:e8:03:b9:63:76:2b:c6:32:65:60:65:ef:16:03:97:69:fb:
41:0e:6b:81:6a:62:8e:23:da:a2:32:74:99:4c:d8:78:b0:5a:
48:ac:e7:ff:9f:99:8d:cd:cb:95:e8:fb:83:d1:d3:a1:e2:fc:
5e:1a:78:bf:7b:4e:8e:4f:7d:a5:5e:90:84:42:96:42:83:79:
df:75:cd:cb:ad:b9:7a:74:c4:3b:aa:33:d8:a8:34:8b:d8:9a:
2b:4e:5e:31:a1:95:a6:fd:3c:63:d3:22:63:7b:4c:b0:8b:e5:
9a:68:0c:43:e7:be:bd:e8:ee:f9:af:61:fe:2c:3a:29:d8:77:
c9:62:aa:e9:73:28:9d:92:aa:22:86:4e:68:79:d6:70:9e:73:
21:46:90:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtQIHXEJEWnHj4RjvN3TNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzM1NjUwNTI2ZDJiYmY1MjUwZDk3OTdlNDlkYjFkOWYx
Y2MyN2YwHhcNMjYwNzIzMTYwMDMyWhcNMjYwNzI0MTYwMDMyWjAzMTEwLwYDVQQD
Eyg4N2NiYmFkNGZlODg1NjBiYTNkYzU3YWYxM2IzMjUwMWE1ZjczNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v8C1s2s3AsehSbXnl+fvD1sPbtA
7/zibwXwsW/yA0h/ELIvH1kNlp0gLS6pBsuO988yEzlThFXPaUYG57tyx95DzlGw
cfgg8z8j44Iv2b+a/tZT2P8VYFlM/VkNXMZIAWIWAspUuDqfceoY3/mWocc134FJ
ipTCPpLO+NVbqUagk1q0xfnGMPin9EVbE0fUL8wPrGvg778zRA1geLPE/ODepVk1
cbhWn6X8qcPQ/EFCLnlLCTan0ZHpt082s7iwOt19ZwNI4+0mHe5zxQIOdn0fwe6m
n/B0tGTJKM2KZU0/g9iBdZwwiuhTKpzs/+FoNr3tl7wj40Xm0CXkcGtNyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfLutT+iFYLo9xXrxOzJQGl9zb4MB8GA1UdIwQY
MBaAFNBzVlBSbSu/UlDZeX5J2x2fHMJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODIt
MGM4NGZkNzU3OTkwLzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODItMGM4NGZkNzU3OTkw
LzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABB/aqfMX
vHWEIcIq5upYpTfcbyRDGoSNJ35vkLhTO3oFCQUeO/LTmkmWm9j1cis77tbyM8eT
w+9T9LUw4/HuaOr8//Jecey0I283fnaFtxzYUnRmtV98unbLMdKLj4K6I+mbcbP9
rhHMXjyPMugDuWN2K8YyZWBl7xYDl2n7QQ5rgWpijiPaojJ0mUzYeLBaSKzn/5+Z
jc3Llej7g9HToeL8Xhp4v3tOjk99pV6QhEKWQoN533XNy625enTEO6oz2Kg0i9ia
K05eMaGVpv08Y9MiY3tMsIvlmmgMQ+e+veju+a9h/iw6Kdh3yWKq6XMonZKqIoZO
aHnWcJ5zIUaQbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:31 2026 by rpki-client