Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: JRLDEpxBizHm0jdiJR3GsrfpzyyjjeUyGydU2LpN7Ss=
Subject key identifier: 0D:D9:16:C9:09:3B:B7:E5:68:64:81:AF:06:AF:BF:48:C9:5F:61:90
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A14D2B9F558E1B95E998CA046E7E20D69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DD9
Signing time: Sun 18 Oct 2026 04:01:06 +0000
Manifest this update: Sun 18 Oct 2026 04:01:06 +0000
Manifest next update: Mon 19 Oct 2026 04:01:06 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: 5pk8UEijQf6tOZvDGaI2HlhHgbBEqJoh73ZNM3YKilM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:9f:55:8e:1b:95:e9:98:ca:04:6e:7e:20:d6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 18 04:01:06 2026 GMT
Not After : Oct 19 04:01:06 2026 GMT
Subject: CN=0dd916c9093bb7e5686481af06afbf48c95f6190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:35:d2:dd:74:19:4a:c1:51:c8:05:c8:7a:
5e:b6:b2:cd:34:99:1b:a8:dc:3c:1a:b3:2d:c2:92:
82:ff:af:9b:5c:27:fa:bc:a7:2a:19:d4:65:f3:8a:
ff:2b:19:28:8f:cf:d5:c1:20:16:e7:c9:0a:fa:7f:
b4:4d:62:fd:c4:20:ef:63:c3:59:6f:04:80:38:b5:
af:43:a3:25:ea:2e:24:50:39:a8:0a:9a:7e:a5:82:
f9:9e:2a:b4:df:68:40:d8:48:84:8a:b3:48:77:cc:
94:2e:a5:90:5f:b2:e5:1c:48:95:e4:ed:4f:54:af:
19:94:fe:fe:71:95:62:0f:93:32:d5:71:81:5b:cf:
fc:45:f1:43:ad:00:5c:c6:cd:6f:2f:1a:25:17:73:
d1:37:82:9d:df:8d:6b:d9:7c:df:d0:88:05:7e:5c:
19:d0:53:65:6c:b8:61:6a:81:f2:92:ca:6f:ee:2c:
1c:c0:32:69:92:f8:37:d3:2a:71:88:c6:bc:77:b7:
6a:9e:20:c8:10:ac:7f:88:c4:6b:77:d8:1d:0c:2c:
29:f0:c8:2f:f8:cb:0c:1c:ce:3f:c2:21:29:d0:64:
cf:29:0f:fc:d9:82:72:8b:b7:3e:54:a7:34:24:57:
2c:89:1b:ef:7d:e3:88:f7:8d:b9:ca:0a:0f:8d:c0:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:16:C9:09:3B:B7:E5:68:64:81:AF:06:AF:BF:48:C9:5F:61:90
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:db:45:74:ce:42:5f:54:c2:97:cc:aa:0a:1c:81:79:84:
3d:ed:a9:90:ea:9a:54:58:3f:c4:dc:0e:cc:6b:b7:b7:ed:d5:
1b:5c:72:a8:ec:e6:8a:ac:e5:4b:9a:a1:ed:57:72:36:ed:88:
a7:a0:88:2b:b8:a2:70:bf:bd:1c:42:26:3b:bc:11:55:83:6b:
fb:b4:b2:72:1b:de:ca:43:7f:5b:22:6d:64:be:dc:93:9c:aa:
af:07:22:04:1d:1e:4a:59:0f:59:dd:ad:ef:27:c3:d6:81:f3:
7d:ed:77:55:9c:d3:84:42:9d:8a:e0:87:d2:e8:4c:9a:1d:f6:
3b:c5:ff:d8:3a:7b:73:b3:5e:12:2b:5f:e4:b4:44:59:7e:41:
88:d7:e4:24:38:ac:83:34:2e:72:61:66:e1:71:6f:88:e0:2c:
60:1d:95:dd:63:09:10:f2:4a:d5:01:7f:2c:f6:16:76:fc:3c:
2e:f5:97:cc:5c:85:fd:0d:ea:d1:6e:38:42:d7:20:7b:2b:20:
05:38:74:57:90:6f:61:c6:bd:14:a4:1b:93:0e:18:9a:9b:88:
c7:2d:e9:f9:cc:a2:69:93:9a:2d:76:cb:d7:98:93:ab:64:78:
76:56:5a:5a:e4:1c:1a:ee:44:40:0b:7f:c3:69:af:bd:b6:65:
9e:ea:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:40:45 2026 by rpki-client