Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: s1AkSBQ1ugFyiwP0vkas7s1Bx5WP86KUCxh8nhLayWU=
Subject key identifier: B1:B0:08:27:72:E6:64:11:C6:43:FE:A7:8D:8E:BA:E4:28:28:7C:93
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019CAD59D4470BF7EB6B85A09978B985FED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0B74
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: kNSlojg11fr0O9zjJVyX+zHxZ9A5p0I749CulHuQVTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d4:47:0b:f7:eb:6b:85:a0:99:78:b9:85:fe:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=b1b0082772e66411c643fea78d8ebae428287c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:a4:d1:89:19:ea:98:ec:33:ab:2d:e6:04:
15:80:d6:e6:f0:4f:fc:68:b2:e7:d6:20:a3:45:d4:
74:ba:ac:98:62:4a:a6:36:77:38:c5:3d:a5:2e:d7:
e5:ad:4f:53:7c:71:e0:5c:cb:c5:79:92:38:62:9a:
76:e4:ec:40:56:68:47:61:f9:17:ce:d0:82:de:2d:
19:aa:e8:18:62:b9:12:f0:f8:be:55:bf:1b:bd:03:
f5:a5:4b:38:b4:9d:69:00:24:19:33:6a:92:e8:80:
e9:8f:f8:19:10:3a:0d:d1:58:ca:3d:71:78:8e:f8:
dd:5b:e4:60:ab:0d:1a:e0:d5:dd:2f:d1:25:1a:90:
96:0e:5e:c8:73:96:ff:45:c4:57:04:6a:87:11:e4:
ab:35:53:6e:cc:29:33:b0:70:21:c6:de:ad:76:0e:
07:52:02:3b:69:4c:3f:5a:72:b6:97:bb:9b:c2:33:
d6:c8:8a:11:3b:6c:7e:03:7e:92:6f:5f:21:aa:57:
2e:1c:3b:a9:3d:07:40:67:d8:08:a7:32:67:e4:e5:
e1:db:21:0d:d4:59:75:65:2d:3e:a5:60:af:7b:05:
88:40:e2:f3:13:95:52:11:e4:da:f9:d3:32:fa:16:
e3:a3:ea:12:b9:60:ce:fd:55:97:26:73:bc:97:68:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:08:27:72:E6:64:11:C6:43:FE:A7:8D:8E:BA:E4:28:28:7C:93
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:25:2d:cf:cc:18:72:a6:fc:d4:e6:f5:6c:4b:b6:27:b6:
b0:c5:11:ac:71:bb:e7:a8:a3:2f:db:fc:c9:f9:06:e7:0e:06:
62:d0:82:f2:30:8f:e3:3a:0d:8f:a7:8f:67:e8:9f:69:5f:b8:
1d:af:c6:68:6a:a8:60:e9:97:18:49:eb:1a:6f:ba:37:3c:8a:
84:46:16:99:a0:af:ea:83:96:a1:82:f9:f5:8e:76:aa:3b:98:
fc:6f:a8:42:f8:ea:e6:2c:60:7f:47:37:5d:46:27:fd:4e:04:
88:63:c4:7d:66:ea:1c:a2:d9:c7:6e:7d:71:80:d2:91:58:73:
70:96:f7:26:52:f6:bf:0d:2d:6b:43:95:f2:dc:69:c4:ae:57:
ec:8f:f3:dc:60:36:1c:99:81:af:b7:6f:09:df:69:e5:4e:37:
00:9e:03:a0:9e:c3:42:98:89:00:a3:69:ab:62:6d:34:93:64:
b1:0b:e6:c0:67:ec:0a:54:5f:22:11:2a:aa:39:a1:e3:01:78:
54:55:2d:91:25:4e:8d:49:d4:b2:c1:f9:f9:ce:43:ef:c7:60:
6d:34:e2:0e:01:cc:72:81:39:24:a9:4d:99:ab:18:07:fe:a7:
10:ca:ad:c5:ab:3c:e5:3e:ad:3f:8d:2a:16:20:77:10:9a:1a:
df:24:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:54 2026 by rpki-client