Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: Qo1JnIyA7rkti8tXllwdO1MQVtOrhQMy/oqdV7V1EZA=
Subject key identifier: C2:2F:AF:D3:B2:E3:94:F0:32:08:E7:56:F2:4E:3E:61:18:D5:E3:0C
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019ED3BD9628B95A32C48CAC6FF9BCEDDF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0C91
Signing time: Wed 17 Jun 2026 04:01:17 +0000
Manifest this update: Wed 17 Jun 2026 04:01:17 +0000
Manifest next update: Thu 18 Jun 2026 04:01:17 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: xlbuDfUvyVTXRP3+ZKE9UPsA1qJNHQ8qM0V98uzdLPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:96:28:b9:5a:32:c4:8c:ac:6f:f9:bc:ed:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Jun 17 04:01:17 2026 GMT
Not After : Jun 18 04:01:17 2026 GMT
Subject: CN=c22fafd3b2e394f03208e756f24e3e6118d5e30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:66:2b:05:d1:0a:74:77:1e:3d:49:c6:ad:71:
ab:11:2f:7a:b4:fa:35:5d:42:80:ea:68:a6:f1:68:
b0:78:c9:67:58:b3:df:9c:6e:58:e5:4c:fc:56:32:
84:5f:0f:79:3f:1b:ce:dd:01:ff:40:d6:05:03:c2:
16:a8:ac:c4:34:b0:44:c0:de:6c:cc:b1:28:8d:3d:
ae:6e:bb:03:bd:e7:0d:a7:85:8b:e6:22:25:00:2c:
9d:d8:e6:f5:e6:e3:f3:46:d3:87:15:eb:a0:d0:fb:
90:d3:14:aa:39:95:44:5b:bf:47:f8:37:32:e9:12:
1a:67:c5:6e:d2:55:30:82:72:c9:b9:d0:c4:be:f9:
cf:fd:db:98:bc:c8:31:a9:78:63:7d:25:6b:16:e9:
62:94:f7:2d:55:33:93:20:e6:65:25:88:26:2e:1b:
fc:ba:c9:65:1d:33:4e:35:45:19:90:55:3a:b2:6d:
b2:72:67:97:9a:ab:06:7d:17:7a:a0:d8:28:90:44:
9b:f0:a4:a7:9d:4d:3d:f8:ac:31:6c:a3:38:60:71:
5d:a4:c5:e4:22:54:39:f9:2e:c9:b5:14:28:ad:cd:
de:dd:d5:f8:05:35:af:3e:98:26:32:2a:51:63:51:
e0:53:5e:13:4a:19:b4:84:e5:68:15:50:e3:27:86:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:AF:D3:B2:E3:94:F0:32:08:E7:56:F2:4E:3E:61:18:D5:E3:0C
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:a9:e0:e0:38:9e:18:50:e9:71:ff:55:0c:48:41:4e:af:
c4:cd:5a:90:de:21:85:4b:34:3d:c1:62:a5:73:51:24:27:93:
ba:cd:d5:b8:67:8b:bf:98:30:f9:ca:7d:b0:0a:1b:cc:bb:97:
4d:cf:d0:b2:4b:8a:1c:5d:02:b1:98:bc:b9:10:7f:29:96:dc:
3d:34:0c:8e:a4:aa:87:19:ed:74:25:23:52:02:c0:91:0f:60:
1d:36:02:17:a7:58:f8:a5:60:bc:09:41:64:c9:dd:e5:31:eb:
42:87:e4:9b:61:fe:a0:45:52:ea:9d:43:53:89:a1:32:37:6e:
d7:4e:af:f6:49:16:ff:3d:94:df:95:a3:38:69:a1:f8:94:02:
8d:43:1b:0a:c0:50:fc:e3:99:d1:29:e6:5a:b0:0d:4b:53:99:
3f:2e:65:db:1d:f7:63:c0:c2:d3:e1:8d:fe:b9:09:1d:19:68:
b1:2c:80:3e:ef:aa:74:60:ca:09:47:75:22:9a:48:54:e4:b6:
78:e9:23:98:3f:21:eb:34:5f:9c:f3:d1:a4:ef:b6:11:2d:5d:
24:cf:d0:05:c3:b0:e9:b9:bd:dd:88:10:58:7a:d9:d1:c1:c6:
c9:e5:97:40:23:17:f7:3f:b3:ca:e0:26:b3:9e:b4:eb:24:d3:
98:d4:b5:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TvZYouVoyxIysb/m87d+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh
NGUzYTEwHhcNMjYwNjE3MDQwMTE3WhcNMjYwNjE4MDQwMTE3WjAzMTEwLwYDVQQD
EyhjMjJmYWZkM2IyZTM5NGYwMzIwOGU3NTZmMjRlM2U2MTE4ZDVlMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WYrBdEKdHcePUnGrXGrES96tPo1
XUKA6mim8WiweMlnWLPfnG5Y5Uz8VjKEXw95PxvO3QH/QNYFA8IWqKzENLBEwN5s
zLEojT2ubrsDvecNp4WL5iIlACyd2Ob15uPzRtOHFeug0PuQ0xSqOZVEW79H+Dcy
6RIaZ8Vu0lUwgnLJudDEvvnP/duYvMgxqXhjfSVrFulilPctVTOTIOZlJYgmLhv8
usllHTNONUUZkFU6sm2ycmeXmqsGfRd6oNgokESb8KSnnU09+KwxbKM4YHFdpMXk
IlQ5+S7JtRQorc3e3dX4BTWvPpgmMipRY1HgU14TShm0hOVoFVDjJ4at9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIvr9Oy45TwMgjnVvJOPmEY1eMMMB8GA1UdIwQY
MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt
MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0
LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJKp4OA4
nhhQ6XH/VQxIQU6vxM1akN4hhUs0PcFipXNRJCeTus3VuGeLv5gw+cp9sAobzLuX
Tc/QskuKHF0CsZi8uRB/KZbcPTQMjqSqhxntdCUjUgLAkQ9gHTYCF6dY+KVgvAlB
ZMnd5THrQofkm2H+oEVS6p1DU4mhMjdu106v9kkW/z2U35WjOGmh+JQCjUMbCsBQ
/OOZ0SnmWrANS1OZPy5l2x33Y8DC0+GN/rkJHRlosSyAPu+qdGDKCUd1IppIVOS2
eOkjmD8h6zRfnPPRpO+2ES1dJM/QBcOw6bm93YgQWHrZ0cHGyeWXQCMX9z+zyuAm
s5606yTTmNS17w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:42:20 2026 by rpki-client