Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: abItTrhJFAI/StshyFokpYZTkAdRlRVeN4PJYuBGIAA=
Subject key identifier: 59:5A:FB:A7:CA:99:94:92:45:83:F7:FB:29:DC:1B:00:74:53:38:85
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 019D292900249B5659C634BBF94F783DA286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 0980
Signing time: Thu 26 Mar 2026 08:00:45 +0000
Manifest this update: Thu 26 Mar 2026 08:00:45 +0000
Manifest next update: Fri 27 Mar 2026 08:00:45 +0000
Files and hashes: 1: JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa (hash: RRlU0j5a3qBKVa1zgiaVLc9i2Imk7rlPX9bHpL9EoYc=)
2: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: ATIX+uvqZC8oRPASQ4+0ZcUsX9vZaPW59Mmf+lbU31w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:00:24:9b:56:59:c6:34:bb:f9:4f:78:3d:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Mar 26 08:00:45 2026 GMT
Not After : Mar 27 08:00:45 2026 GMT
Subject: CN=595afba7ca9994924583f7fb29dc1b0074533885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:3c:37:b2:7a:c9:67:cc:da:eb:ae:81:3a:
63:61:fc:ed:43:b2:0a:53:3a:a6:56:5f:ca:a8:40:
9a:ff:79:e9:f2:8c:8e:d9:37:40:99:61:7f:1b:e4:
cf:1c:6d:79:43:8d:ef:96:a0:8e:02:01:a7:89:ad:
7e:61:30:f2:4d:0d:14:1e:ad:cf:2e:55:b8:59:d3:
86:d3:b4:8e:eb:ed:fa:db:b1:36:24:fd:81:56:26:
77:5b:00:e4:4c:b8:a6:7b:f3:89:77:e6:8a:47:74:
23:81:76:86:93:17:4a:11:67:d6:88:ff:56:33:12:
05:0d:40:6c:7e:1b:3b:4a:a7:7f:d1:12:5c:35:c4:
c4:55:17:4d:00:19:aa:db:02:f1:51:43:4c:82:58:
52:2c:bd:1d:c3:d5:d6:62:5d:94:9c:ad:4b:dd:9b:
1a:d3:d7:69:8f:15:f1:6c:e1:e0:c7:42:7e:4c:2a:
bc:d9:5e:2d:60:16:0a:7f:19:e6:8c:3d:e1:32:fd:
5a:73:29:90:98:5e:75:b5:a1:45:8c:e6:ed:75:a6:
e4:20:a9:17:b7:31:d2:36:4b:39:e6:ba:ed:46:56:
80:58:51:a6:80:86:ae:9d:c2:30:91:fb:13:1a:e1:
80:1c:ab:86:03:05:d2:1c:bd:85:da:d2:04:4b:a7:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:FB:A7:CA:99:94:92:45:83:F7:FB:29:DC:1B:00:74:53:38:85
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:36:d0:c0:88:c5:b0:7d:46:2d:4c:83:6b:f9:81:7c:de:
59:9d:89:d4:a6:3d:43:c6:54:42:b8:58:be:2e:35:28:56:f1:
b3:e6:2b:05:37:ca:da:8a:98:ec:01:40:25:bd:00:d5:31:3e:
41:c6:af:3c:63:fc:7f:a5:ef:a4:af:de:66:47:ef:a1:6a:18:
6f:11:8d:0d:94:8e:15:fe:2e:5c:ed:91:a8:fb:50:0c:0e:63:
00:46:45:10:bb:c4:f0:36:62:fc:a2:c6:d5:61:cc:6b:6c:b4:
79:df:3d:ef:fd:9a:6f:59:ba:4c:5e:01:e9:23:da:9c:5a:9c:
e9:64:82:cf:0e:db:57:3a:bc:ff:5d:19:3c:f7:59:ed:31:bb:
5d:cc:73:99:7d:a5:4a:9f:62:3a:d1:df:98:5f:21:f1:06:22:
a9:f5:79:30:00:53:35:57:85:92:eb:6c:20:58:25:a1:30:77:
64:af:f8:b0:9b:26:b3:c2:b2:d1:fd:6b:73:ff:ba:b2:e4:94:
48:8e:fe:2d:91:94:50:bc:36:e4:2a:f2:dd:3e:e1:5e:b6:b5:
93:94:0d:61:d1:6d:a9:e4:8a:ca:19:fa:ce:5e:32:c4:a2:28:
c0:69:4a:88:c6:43:71:c5:95:7e:c0:b8:ad:4d:72:fc:c6:e3:
40:67:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:56 2026 by rpki-client