Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: nEX02T4HnNFfDiUZdHKRgXarfPaLTiFxaPRIb3ttDqY=
Subject key identifier: 77:77:64:72:A8:DD:02:77:AB:72:35:1E:2F:AE:91:39:34:F9:4F:EC
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A15C9F3D3E1D7A33EBACB750F18B525D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DE1
Signing time: Wed 21 Oct 2026 04:01:42 +0000
Manifest this update: Wed 21 Oct 2026 04:01:42 +0000
Manifest next update: Thu 22 Oct 2026 04:01:42 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: TsKOQz9ToOWKjsax5t1w0Zw2amO6TUw0VT2tDBapSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:9f:3d:3e:1d:7a:33:eb:ac:b7:50:f1:8b:52:5d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 21 04:01:42 2026 GMT
Not After : Oct 22 04:01:42 2026 GMT
Subject: CN=77776472a8dd0277ab72351e2fae913934f94fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:a9:80:ea:da:58:d1:d7:5c:7b:7b:d4:46:
3c:03:be:f1:c4:0e:20:7e:1a:e8:f6:d4:5e:cf:82:
df:bd:fd:82:98:e1:fc:31:65:cf:06:69:6e:b0:61:
62:df:cd:5d:e8:08:35:5a:df:a1:cc:78:44:1f:77:
2e:35:b2:29:35:9f:92:09:6c:88:59:7f:c0:7c:1b:
7a:b6:10:23:4b:21:6b:3f:ff:be:ea:c2:4e:86:7d:
59:3b:48:54:ff:b7:d0:21:b6:b7:a6:4a:73:cd:61:
84:87:7c:d5:21:91:d1:9b:8b:9b:56:82:5d:3d:ad:
f5:49:d2:be:f9:c2:7c:35:53:52:68:34:f7:3e:80:
4f:c3:c4:b1:3b:e1:04:b5:f0:66:aa:5c:04:14:cb:
ff:b0:3f:e3:ce:7a:02:e5:cf:ea:79:57:35:22:2c:
58:32:6e:e4:01:68:bd:fb:7e:49:65:5d:2c:b6:ba:
71:20:5d:3f:9c:fb:c4:c2:0d:b2:7c:5c:05:61:81:
84:4d:92:b6:cd:fc:3a:70:ac:37:e8:99:7b:48:c9:
cb:fb:15:60:59:00:70:51:ff:93:98:fb:70:f5:ba:
80:72:64:46:df:28:54:6a:fc:1f:ab:34:d1:17:27:
60:23:c3:4f:6a:41:a5:67:37:06:ed:92:28:02:8d:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:77:64:72:A8:DD:02:77:AB:72:35:1E:2F:AE:91:39:34:F9:4F:EC
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c2:3c:dd:4d:3c:c8:73:43:94:ff:ec:04:23:9f:10:7d:8f:
ae:29:fa:d1:8b:c6:8a:67:6b:6f:47:92:18:fe:4f:2d:52:55:
01:11:f1:1d:1e:32:bd:0c:67:9b:40:40:d8:bf:a5:dc:e0:05:
fe:99:60:ec:f9:1c:1c:db:93:cb:59:34:90:e6:a5:55:c6:75:
39:1b:9f:c1:27:4b:67:42:5b:a8:f3:ac:14:25:69:82:53:cb:
db:de:77:51:9f:7c:b7:89:65:ed:5a:87:8f:56:9f:23:74:8b:
89:2b:09:07:1b:fa:b8:ab:9f:b8:bf:f4:31:50:38:6b:29:f2:
dd:8e:07:74:28:bf:18:c8:39:6e:43:d5:31:89:7f:62:17:56:
46:11:46:fc:32:b2:56:9a:0e:28:3a:a3:d8:8b:4a:ae:64:b9:
e8:68:a1:07:96:19:73:32:d4:9b:56:bb:53:89:db:ec:2a:84:
f0:73:0d:40:e1:d0:b3:84:cc:41:1e:67:d9:2c:91:66:85:e8:
b0:d0:20:ab:9a:10:73:25:82:8e:32:03:a4:ac:85:88:31:c9:
fc:02:25:18:78:b2:db:9f:73:c5:31:9c:da:89:86:25:eb:b0:
69:c4:83:19:63:91:3a:13:42:9d:13:ca:62:33:a7:39:68:63:
6c:89:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 08:42:37 2026 by rpki-client