Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: 4u5yI4OR5C4pVNZmh1kzr7v0EF2icI7aNzFiMsy2nO4=
Subject key identifier: 00:6E:68:B8:79:23:E0:00:38:12:E7:CE:95:C8:BF:65:AD:6F:0B:38
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A137EDE8614887385815636DF212D29F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DCE
Signing time: Wed 14 Oct 2026 01:01:40 +0000
Manifest this update: Wed 14 Oct 2026 01:01:40 +0000
Manifest next update: Thu 15 Oct 2026 01:01:40 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: igSt80INtzBaHdzEkqUhy73wmPm9jo73kog1J5DKBow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ed:e8:61:48:87:38:58:15:63:6d:f2:12:d2:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 14 01:01:40 2026 GMT
Not After : Oct 15 01:01:40 2026 GMT
Subject: CN=006e68b87923e0003812e7ce95c8bf65ad6f0b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:1b:54:4e:7a:12:d6:c6:71:ef:89:c1:d4:
99:ff:90:4c:d1:41:fe:70:b6:d5:b5:96:25:39:d7:
6d:1b:f4:47:bc:23:f0:ee:7d:77:c9:44:a6:73:e6:
ab:8a:a2:1a:71:93:d6:86:d2:21:15:90:09:8c:1f:
c3:83:cf:31:a5:79:88:cb:11:07:98:25:7d:29:3d:
99:40:26:66:7d:47:0b:c4:67:47:4a:68:9f:ca:1a:
39:20:fa:c6:d4:04:4f:79:2f:d9:7f:c1:82:21:fa:
fe:9f:ad:26:9d:ae:91:e0:77:8e:d9:58:10:95:63:
5e:a6:06:78:90:3f:c5:81:9b:51:a7:29:b9:94:b4:
c8:6b:e0:1c:a4:81:9b:5f:71:24:e1:21:e4:61:e0:
91:47:37:a9:97:0b:f9:62:6b:f9:6c:ac:ac:35:79:
05:8f:43:2a:b0:2b:24:8f:ac:c4:a7:3d:97:c7:f3:
0e:1b:cc:fc:c5:2d:46:96:0b:4b:60:4e:18:70:1a:
26:21:9e:cc:0c:10:27:f3:0b:21:ce:59:07:17:9b:
dc:1b:8b:67:78:88:1a:e8:bf:08:5e:65:55:2e:55:
f5:c6:43:ab:00:da:a9:bd:0d:ff:31:e0:86:1a:a8:
33:26:5a:00:d2:89:e9:98:d1:4d:d1:97:22:5d:5a:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:68:B8:79:23:E0:00:38:12:E7:CE:95:C8:BF:65:AD:6F:0B:38
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5d:6e:0d:8b:62:10:65:4f:70:d3:32:42:a2:cd:da:cd:ab:
ed:fa:8e:c1:1f:ba:bc:dd:18:22:a2:83:d2:50:0f:17:cb:ac:
1a:04:3a:84:88:40:b0:d9:61:a2:a0:53:33:8b:bb:dd:66:4a:
88:3b:01:df:70:6d:3e:3f:05:74:7a:e3:99:77:15:8b:fc:fa:
70:6b:0c:9a:92:e1:ba:90:b2:88:49:17:67:16:3e:46:29:df:
7b:36:b9:f0:f8:a0:d4:b2:98:88:22:b0:18:8b:79:59:80:f7:
56:46:85:b3:0a:b3:4d:97:fb:de:06:4a:16:60:4e:fc:5d:a0:
8a:c8:9d:cd:91:b5:b1:50:f1:66:02:be:65:2c:e2:ab:b0:98:
0e:3c:9c:bf:f2:39:1a:e2:6e:0f:1f:d4:f5:7a:f5:22:a7:71:
2e:fc:80:f5:15:f6:46:7c:d6:14:f8:33:4d:45:5f:49:9a:de:
62:90:7e:4a:64:aa:b4:96:32:9a:4b:ae:15:e2:a9:0e:31:9d:
23:13:a7:13:c8:4e:95:17:88:82:39:a5:39:b1:79:8a:ed:e9:
31:ed:f4:25:82:d6:da:b3:64:e1:4a:23:77:a2:10:2d:b5:9b:
ad:4e:6a:31:c0:7e:ef:0a:5e:7b:45:7f:15:d8:69:22:81:63:
91:dc:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:18 2026 by rpki-client