Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: 5bZd6uZeefW5iRkLbRQohCQDVupjQ/0z9ejz1b8MrXs=
Subject key identifier: B5:0A:CC:F6:C4:75:E8:B8:99:7E:08:85:01:0F:36:82:FD:80:5A:93
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 019D38662FEB0E6F293AFD18FB866905BDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 16DA
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: 575klKGoSYyX7Dh8mZS2rpwSZ3U.roa (hash: LxIH7uTCYrgvTpunjA99i3K4sT99K/wrQOy1i1ejkXI=)
2: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: qtUWDOYn24LxsUAWIWsf9lO86bRH2tfK8ua9XBC4fAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:eb:0e:6f:29:3a:fd:18:fb:86:69:05:bd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=b50accf6c475e8b8997e0885010f3682fd805a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:e2:6e:08:c9:94:a0:7f:13:32:76:cb:a5:
cc:5d:93:38:49:30:18:e0:3b:e1:f8:95:f8:b7:61:
20:9f:2e:08:70:fb:ff:de:c6:78:89:42:0c:7c:51:
d3:88:f3:f8:b2:52:6c:db:1e:23:43:ac:21:3d:19:
b3:6c:cf:2e:7b:36:75:d1:12:27:ef:ed:7d:96:48:
a5:21:67:82:61:ec:59:95:9e:e9:27:ba:36:63:11:
35:6e:54:bf:29:1a:e5:ac:a1:eb:25:9c:c4:63:ad:
ba:43:ea:02:ee:73:a6:d3:03:46:53:3a:90:27:7f:
df:0d:2d:7e:ed:3d:a0:ff:3c:70:b0:bb:a5:1c:63:
c1:b0:9e:e9:a0:0d:13:83:31:07:bd:5f:1d:bf:f2:
79:19:8f:30:fa:fb:46:38:73:5f:a2:2d:b8:c3:5d:
41:8c:8b:0c:96:30:f7:6b:95:59:97:d0:7a:70:a5:
40:92:7a:9a:64:95:48:28:90:93:6a:4c:20:37:d9:
b1:49:2b:0a:43:47:4b:a2:bb:2b:7e:0d:be:fc:0a:
c8:cf:26:2d:fa:1b:3b:7a:77:07:5d:ee:61:ca:77:
b4:d7:2a:3a:3e:0a:51:bf:08:fa:79:57:e0:0d:3a:
c7:0a:c1:b1:7d:cb:87:e1:da:d5:d1:fa:fb:4f:0d:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0A:CC:F6:C4:75:E8:B8:99:7E:08:85:01:0F:36:82:FD:80:5A:93
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:c9:2c:b6:36:82:b4:76:83:83:e7:cf:9c:54:88:32:ea:
6d:49:1c:6e:dc:0c:f0:c2:dc:38:fa:6b:2f:82:5b:d2:5f:79:
6a:dd:7c:73:54:89:20:b3:46:57:69:04:de:51:82:6d:ba:a8:
a9:dd:11:32:55:d0:61:44:2d:5a:15:93:a2:52:91:b0:d6:97:
4e:ce:95:e7:1a:ba:30:0b:3d:82:eb:95:ea:b6:56:e7:be:75:
dd:d9:ef:b8:32:5c:95:d2:3c:97:78:5e:a2:1a:76:5c:3f:04:
f7:0f:6d:b6:b3:07:33:54:6f:e0:2b:ec:1f:ce:48:33:ab:08:
42:55:c7:a4:f9:88:87:89:0e:cb:f4:be:8a:64:b0:61:97:00:
13:71:e8:3a:e4:8d:87:b7:fe:93:ac:5b:41:ea:d7:ea:22:4f:
08:97:7e:67:8f:d8:ea:80:0f:68:34:eb:13:60:e8:75:3f:a1:
2b:d1:1f:56:0f:f3:39:ff:7d:78:a8:46:73:5b:49:a4:63:8d:
17:80:17:a1:53:8f:14:dc:1c:72:7d:60:5f:c2:d7:7b:1d:40:
88:59:22:e0:df:c1:97:38:bd:88:07:19:26:92:84:e0:96:73:
82:b6:8e:fa:1a:10:6e:f4:e1:a9:7b:30:77:2c:8b:2a:11:0a:
07:ae:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:16 2026 by rpki-client