Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: XFHVAMx1VSzjTVxZ2sanyT++Evy5zqtEWMI9zbvxUms=
Subject key identifier: 0B:5A:29:FB:D1:E7:33:16:8F:32:42:BF:03:78:51:38:91:A0:66:05
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01A0010121CB06129970B43BDD4F8C647A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0F23
Signing time: Fri 14 Aug 2026 16:00:46 +0000
Manifest this update: Fri 14 Aug 2026 16:00:46 +0000
Manifest next update: Sat 15 Aug 2026 16:00:46 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: b9w0KmVBRAzknyWmBb0dM2jnhaB+F3hWcsdvAR6+gwg=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:21:cb:06:12:99:70:b4:3b:dd:4f:8c:64:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Aug 14 16:00:46 2026 GMT
Not After : Aug 15 16:00:46 2026 GMT
Subject: CN=0b5a29fbd1e733168f3242bf0378513891a06605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:db:05:3e:39:fb:7a:93:af:15:09:fd:66:00:
02:9f:b3:03:06:37:d0:56:59:d4:d9:4b:27:fc:0d:
f0:b8:7d:6c:26:4b:21:f4:2e:95:92:97:a4:70:ba:
75:5a:bb:02:1e:68:0b:f7:b6:df:6b:6d:53:36:e0:
3e:9a:5e:e3:78:3d:17:b6:2e:b3:41:5c:0a:c5:d7:
1f:7c:ed:9c:a1:c3:f8:b0:be:53:90:c4:95:b6:d7:
7d:6d:aa:0b:a7:00:63:e5:19:da:12:2b:21:2b:33:
1e:af:21:d0:8f:85:44:73:3d:a4:ad:57:7a:06:53:
17:e7:b6:85:24:40:61:ed:15:fc:48:4f:9d:56:75:
58:c0:8b:2b:d0:95:12:a7:09:6b:2c:69:12:09:a9:
79:f3:70:cd:2b:10:fc:db:9e:2f:77:e5:8f:7c:b0:
d9:ce:f8:77:45:f7:4b:e0:c0:0d:fd:34:50:bb:ae:
a0:85:70:50:3e:b5:00:c5:2d:ea:3a:df:b9:c6:f2:
ae:56:95:55:52:13:57:c1:a5:35:95:b8:b3:08:c5:
e4:c2:3b:c6:47:b3:32:f4:a8:4e:21:e5:12:16:23:
92:9e:f0:07:8d:22:02:23:8b:b3:fe:ec:d9:39:ed:
d2:ab:5c:0a:f1:16:9a:69:b4:a8:2b:7b:55:77:db:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:29:FB:D1:E7:33:16:8F:32:42:BF:03:78:51:38:91:A0:66:05
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:6c:c4:8f:d6:0c:fc:d5:ca:d6:0f:63:e6:88:30:8c:03:
e0:a8:c3:86:b0:9a:1f:99:34:f5:c8:fd:a7:4a:ab:51:01:bd:
4d:9c:1f:54:cc:da:0c:f0:97:64:38:58:8a:a4:23:c8:a5:21:
97:ba:35:86:9e:67:b8:4d:bd:ff:34:70:7e:8b:ac:61:ad:eb:
b1:35:b1:10:70:af:22:12:06:d2:1e:31:1e:9f:1c:b5:fe:d4:
e0:ed:0a:39:e6:6f:2e:aa:8a:dd:68:18:f0:1a:ee:7c:3a:77:
2f:6b:8a:03:44:af:fe:3e:d0:8c:7a:04:a6:7f:3c:08:96:d0:
0a:45:f0:72:14:e7:fb:21:20:7f:e8:a1:37:bf:19:91:45:4a:
57:e7:98:5a:f9:45:1f:40:9d:fb:82:00:3a:95:89:cd:26:04:
74:d1:e0:e2:0a:95:ed:a8:bc:23:ea:38:df:21:66:98:eb:4e:
70:25:b9:16:a6:3a:97:96:98:a7:83:1c:2f:62:70:b5:f1:3d:
97:60:92:07:76:a5:c6:33:59:c5:4b:27:fa:43:68:e1:78:ed:
d2:58:ba:38:00:a5:77:10:79:86:64:50:ab:43:2e:24:2e:c0:
85:a2:a5:78:fe:4d:ca:10:09:86:b0:48:c7:bb:cb:06:4f:4c:
66:9d:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:10 2026 by rpki-client