Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json)
Hash identifier: lROUXrTFQrOHNkp3zzy++mo6qwz8vmlN11gr4SSR1rE=
Subject key identifier: E4:FB:80:97:FA:31:B0:4F:8A:D5:49:0E:2C:9B:57:43:78:47:90:CF
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial: 019D390A1D066E266AB0119CBF958141FE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
Manifest number: 0197
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: 0XIgckhi9vMZKbzW5k3UiUIRRTMBgTuwb5k3J1vtJIw=)
2: WrLNxAyyuRsHIs6t3d8ID4TXQxk.roa (hash: PhJyPBri0VSG1gtomnKeMBfQbUvbGb+z4erxQ/DDa9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1d:06:6e:26:6a:b0:11:9c:bf:95:81:41:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=e4fb8097fa31b04f8ad5490e2c9b5743784790cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:d5:fd:dd:fc:14:f7:9d:53:29:c8:8c:07:
de:12:cc:7e:00:b2:c0:9d:55:d2:6c:42:90:c1:59:
9c:7e:0c:b3:72:51:e7:5f:eb:80:81:9e:8a:4d:bf:
bf:73:32:a5:da:54:4d:29:96:9b:1d:69:96:7d:17:
97:c1:7a:80:8b:32:3e:4c:3b:3d:e8:9a:85:f7:fa:
f0:43:21:08:74:7e:08:2f:83:45:58:c2:cb:b7:70:
cb:7a:46:5b:6d:3a:7c:f3:81:40:f3:35:ad:4f:a1:
76:24:ab:1c:35:41:7b:f6:49:71:9f:85:db:7c:72:
c5:08:3f:41:50:db:80:83:6a:d2:47:70:96:29:70:
65:a5:ee:45:aa:1d:58:7c:9a:74:d5:c3:31:9d:eb:
95:a8:b6:1d:52:e1:05:35:d0:eb:30:76:5a:8c:7d:
00:40:af:a3:89:2d:4a:1f:5b:4f:86:86:fe:88:6d:
76:29:4c:6a:39:02:46:42:a6:57:d7:19:df:de:d8:
c4:6c:72:57:52:60:46:47:4b:e2:f3:1c:90:67:c9:
b8:aa:ac:ec:6e:4d:b1:92:03:36:90:1f:da:a4:10:
83:44:79:fb:94:82:a7:50:1f:e4:54:1d:bf:35:cb:
ed:66:d9:28:6b:83:5a:7c:86:e7:30:6b:cc:71:77:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:80:97:FA:31:B0:4F:8A:D5:49:0E:2C:9B:57:43:78:47:90:CF
X509v3 Authority Key Identifier:
keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:29:76:c9:cb:6a:29:31:d6:62:8c:80:17:7b:51:49:0e:25:
b2:cb:32:eb:0f:e9:2b:81:68:4f:61:09:fe:18:2e:5e:ac:dc:
f2:e4:dc:92:16:af:53:57:2f:a6:9a:e0:7e:81:bb:94:6a:07:
a8:6e:fa:dc:5a:b0:09:2b:64:03:41:ff:2c:0b:ff:a7:53:bd:
ac:af:fe:88:5b:e9:c8:41:55:d9:8c:8d:f6:76:61:f1:24:ff:
22:3d:c3:bf:cc:bd:28:da:e1:ef:ec:b9:92:3c:df:23:b2:c5:
49:30:2f:1b:2a:03:4e:87:e3:8e:83:31:27:7e:e9:86:cc:f2:
40:d6:a6:02:e2:a2:96:6e:ed:de:f5:80:95:49:d4:f4:70:fa:
62:3e:e6:88:f6:e4:58:36:fa:fa:41:dc:f3:0e:72:e4:09:f3:
ba:f5:e0:11:60:76:c9:e7:e5:ec:54:08:4c:d1:d0:11:a6:74:
eb:d3:04:f9:00:97:79:f2:7c:99:f5:d6:35:c0:09:77:8f:99:
ee:d3:fc:69:b3:7b:1f:ea:26:4a:0f:b1:10:07:9c:0c:ad:f0:
d8:9c:5e:f1:28:8c:4e:00:80:70:e9:c8:ab:a7:4d:4d:f2:16:
2f:a3:25:27:38:f2:94:25:dc:42:1a:3d:65:a6:73:73:0d:5b:
ac:e1:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client