Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json)
Hash identifier: vq03foxYJYJ+vWRiqd4xNZFN+GKSXGF7k/hpGWo4uAY=
Subject key identifier: BA:39:CF:14:C5:08:37:A5:F5:DF:FA:41:80:2B:7C:E0:8D:91:9B:C9
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial: 01A0DBE02EC010466D0E676037BBE9551662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
Manifest number: 0379
Signing time: Sat 26 Sep 2026 04:01:37 +0000
Manifest this update: Sat 26 Sep 2026 04:01:37 +0000
Manifest next update: Sun 27 Sep 2026 04:01:37 +0000
Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: JfbYto192X6lSg1oL2CEemJiM4mqcfsfztx8W1KME/g=)
2: WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa (hash: PhJyPBri0VSG1gtomnKeMBfQbUvbGb+z4erxQ/DDa9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:2e:c0:10:46:6d:0e:67:60:37:bb:e9:55:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Validity
Not Before: Sep 26 04:01:37 2026 GMT
Not After : Sep 27 04:01:37 2026 GMT
Subject: CN=ba39cf14c50837a5f5dffa41802b7ce08d919bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:31:2b:e6:79:cd:0d:8e:e6:01:ba:7f:94:
11:3b:8d:00:1d:d9:15:02:e5:a0:10:74:e0:5c:22:
02:af:5b:fd:62:2a:0b:8e:eb:e4:68:9a:ad:61:08:
cb:8f:94:16:5d:37:9c:0c:4e:50:3b:62:07:c8:a9:
34:7a:e6:c4:60:16:3a:4b:92:ab:3e:a8:90:06:cf:
b6:03:fc:da:3c:76:cb:c7:52:db:b4:a7:a8:29:a4:
b8:33:5f:bd:fc:80:12:aa:b6:b4:25:7e:17:a0:27:
7b:79:06:f2:a0:2c:6c:36:fa:a2:4b:a7:7b:b7:59:
ae:c5:00:b2:12:b6:7d:12:45:f1:0f:4b:31:e9:c2:
0f:f3:f6:2c:1a:0d:d5:f7:2b:0a:9d:7d:64:63:34:
84:9b:58:b9:ea:53:9c:29:d2:06:e9:e0:b0:f6:06:
9d:12:d1:33:89:18:ee:6d:f2:ae:4e:2b:71:94:29:
6d:64:4e:e2:d9:23:8d:87:4b:09:89:ea:bb:4c:42:
b8:da:31:92:3f:88:30:cd:05:75:a1:b6:41:f1:f1:
ad:cb:01:66:fd:0a:d9:fa:1f:11:be:ac:b9:4e:5b:
5a:69:a3:86:50:af:b2:f3:ab:9e:6b:9e:20:b8:6b:
9c:5d:e3:18:d2:66:94:8a:55:89:ad:2b:a9:4d:99:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:CF:14:C5:08:37:A5:F5:DF:FA:41:80:2B:7C:E0:8D:91:9B:C9
X509v3 Authority Key Identifier:
keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:29:b6:50:ec:3c:1c:e6:58:6a:40:27:2f:64:01:52:23:
79:5c:07:c9:f1:c3:30:79:97:f9:e3:d6:8a:d8:ac:db:10:b7:
b4:16:4a:ad:db:ed:6b:f1:af:84:73:a4:5b:9a:d2:56:b1:ab:
2e:2b:af:85:c4:86:2a:92:fd:1b:73:42:10:85:7d:82:93:ea:
2c:34:18:e0:e5:4c:03:3e:56:54:3a:20:d3:dd:95:08:e2:09:
12:21:b0:2f:a8:ea:6f:70:3b:68:6b:97:d7:af:4c:22:68:11:
ad:27:5f:d2:9e:ca:fa:d4:67:1d:a2:19:75:a6:ea:4f:00:db:
41:6c:19:18:8b:b5:58:c6:8a:9e:60:a7:14:89:5f:5c:39:01:
2d:e7:c3:7a:7e:ea:dc:5b:de:e4:aa:90:0f:20:4c:24:48:15:
65:2d:79:98:ed:9d:c1:62:4c:df:e9:95:61:b2:0c:7c:a2:39:
d3:91:8f:7b:02:a9:01:b4:b6:42:e0:e8:5b:a2:42:60:07:ba:
b2:fe:74:de:16:18:56:9d:b1:e6:30:37:a1:ea:c9:ae:eb:0b:
dd:f3:35:61:9d:0f:5c:01:4f:87:76:e5:b8:e8:a0:e1:23:4c:
18:e9:da:27:5e:35:d6:62:aa:45:b1:5d:e8:7e:4b:2a:d1:8b:
e7:71:f0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4C7AEEZtDmdgN7vpVRZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzM1NjUwNTI2ZDJiYmY1MjUwZDk3OTdlNDlkYjFkOWYx
Y2MyN2YwHhcNMjYwOTI2MDQwMTM3WhcNMjYwOTI3MDQwMTM3WjAzMTEwLwYDVQQD
EyhiYTM5Y2YxNGM1MDgzN2E1ZjVkZmZhNDE4MDJiN2NlMDhkOTE5YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOIxK+Z5zQ2O5gG6f5QRO40AHdkV
AuWgEHTgXCICr1v9YioLjuvkaJqtYQjLj5QWXTecDE5QO2IHyKk0eubEYBY6S5Kr
PqiQBs+2A/zaPHbLx1LbtKeoKaS4M1+9/IASqra0JX4XoCd7eQbyoCxsNvqiS6d7
t1muxQCyErZ9EkXxD0sx6cIP8/YsGg3V9ysKnX1kYzSEm1i56lOcKdIG6eCw9gad
EtEziRjubfKuTitxlCltZE7i2SONh0sJieq7TEK42jGSP4gwzQV1obZB8fGtywFm
/QrZ+h8Rvqy5TltaaaOGUK+y86uea54guGucXeMY0maUilWJrSupTZmCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo5zxTFCDel9d/6QYArfOCNkZvJMB8GA1UdIwQY
MBaAFNBzVlBSbSu/UlDZeX5J2x2fHMJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODIt
MGM4NGZkNzU3OTkwLzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODItMGM4NGZkNzU3OTkw
LzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4AptlDs
PBzmWGpAJy9kAVIjeVwHyfHDMHmX+ePWitis2xC3tBZKrdvta/GvhHOkW5rSVrGr
LiuvhcSGKpL9G3NCEIV9gpPqLDQY4OVMAz5WVDog092VCOIJEiGwL6jqb3A7aGuX
169MImgRrSdf0p7K+tRnHaIZdabqTwDbQWwZGIu1WMaKnmCnFIlfXDkBLefDen7q
3Fve5KqQDyBMJEgVZS15mO2dwWJM3+mVYbIMfKI505GPewKpAbS2QuDoW6JCYAe6
sv503hYYVp2x5jA3oerJrusL3fM1YZ0PXAFPh3bluOig4SNMGOnaJ1411mKqRbFd
6H5LKtGL53HwIQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:38:02 2026 by rpki-client