Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: 5gsXHe2Wv4BTEViUfGl+sHeTC7FxB0w/6PtV6FKZ644=
Subject key identifier: B6:A3:6B:09:D8:AC:5C:6F:16:00:24:9E:FE:67:9E:E6:43:4E:52:D9
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019D9AE394BF3D9B20202B5C00103405D0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 10:01:39 +0000
Manifest this update: Fri 17 Apr 2026 10:01:39 +0000
Manifest next update: Sat 18 Apr 2026 10:01:39 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: 8Kk7k5s2KSRM7y8k5GVTSJNQnRaMOO5UfesEGoG5ldY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:94:bf:3d:9b:20:20:2b:5c:00:10:34:05:d0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Apr 17 10:01:39 2026 GMT
Not After : Apr 18 10:01:39 2026 GMT
Subject: CN=b6a36b09d8ac5c6f1600249efe679ee6434e52d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:d5:28:ee:a2:4c:d6:e1:84:c1:08:0a:5d:
92:2a:c0:b9:0f:cc:5d:30:30:f5:26:92:6c:05:9f:
9c:e8:0b:73:a4:11:34:37:5b:9d:06:7d:c1:06:aa:
eb:e1:4f:10:4a:05:0a:77:ca:8b:56:61:3f:22:ae:
0c:2b:de:08:0c:f7:94:b1:73:98:f0:bd:bd:85:c6:
0a:4e:f9:19:37:40:15:6f:6c:85:0f:37:3f:b7:ef:
c8:1f:bd:1b:2b:15:7c:70:82:18:7e:d7:32:fd:8d:
1f:c1:83:9e:e4:35:9e:fe:69:96:4b:cd:7b:95:ec:
a8:b9:c0:bc:87:a9:44:cb:33:bd:7a:2b:3b:e8:1c:
44:f9:90:b4:fa:14:f5:a5:c7:41:c4:54:ce:23:b9:
e3:5a:ca:05:4e:e2:d7:10:7e:64:aa:d7:35:8c:5f:
60:c8:6c:73:43:d6:54:3e:f2:85:02:1f:c2:de:82:
4a:64:f1:bf:84:69:dc:6d:94:56:42:a9:d5:10:2b:
41:97:af:76:c4:ed:36:2d:bf:a2:24:6f:e5:b0:27:
6e:23:3b:b1:fa:98:d3:6a:e9:d5:bc:26:e3:ec:14:
03:54:80:b3:a3:24:0e:c0:a7:bf:a9:ad:fd:7a:e4:
96:70:c9:78:c1:36:17:44:5f:2b:e1:2d:95:80:32:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:6B:09:D8:AC:5C:6F:16:00:24:9E:FE:67:9E:E6:43:4E:52:D9
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:48:b0:02:1e:75:a3:38:26:3f:74:35:87:87:6a:dc:0a:
73:13:2c:98:c3:af:1c:87:4c:ff:5b:0d:04:be:ce:75:98:c8:
8b:77:af:42:98:b8:fc:e3:1c:7c:a5:9a:42:13:b3:c8:c5:f3:
45:2b:d0:1b:88:a0:28:17:12:09:1e:41:c1:3c:ca:20:c2:90:
97:4d:f0:23:8b:da:be:03:5d:41:b1:68:1c:07:d4:c1:5e:a7:
6a:96:15:58:29:09:52:47:dd:ff:64:37:fb:a8:eb:cb:f4:f6:
c2:5a:ff:87:50:10:32:f6:3d:f6:99:fe:82:0e:49:a7:9d:70:
b5:34:b2:e4:f2:54:20:82:26:3c:46:f1:96:b6:f5:2e:14:ab:
72:73:58:1a:3d:78:ab:fd:b3:41:a1:8b:c6:58:c4:73:29:20:
7a:c8:b4:f8:14:59:ed:99:79:17:9f:cc:e7:dc:02:4f:2b:da:
b9:7b:1c:6e:bd:dc:cb:b2:99:76:6c:99:6a:70:50:98:33:99:
4b:41:35:e0:94:6f:d3:d5:1c:5f:df:78:05:85:23:f7:c3:39:
63:97:fe:ba:39:ca:3e:04:1f:c0:ca:2c:03:ed:22:71:b1:bb:
93:d5:54:6f:f3:48:47:7b:44:10:47:ca:64:d9:b1:9e:fc:85:
6d:e0:1f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a45S/PZsgICtcABA0BdCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh
NGUzYTEwHhcNMjYwNDE3MTAwMTM5WhcNMjYwNDE4MTAwMTM5WjAzMTEwLwYDVQQD
EyhiNmEzNmIwOWQ4YWM1YzZmMTYwMDI0OWVmZTY3OWVlNjQzNGU1MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUzVKO6iTNbhhMEICl2SKsC5D8xd
MDD1JpJsBZ+c6AtzpBE0N1udBn3BBqrr4U8QSgUKd8qLVmE/Iq4MK94IDPeUsXOY
8L29hcYKTvkZN0AVb2yFDzc/t+/IH70bKxV8cIIYftcy/Y0fwYOe5DWe/mmWS817
leyoucC8h6lEyzO9eis76BxE+ZC0+hT1pcdBxFTOI7njWsoFTuLXEH5kqtc1jF9g
yGxzQ9ZUPvKFAh/C3oJKZPG/hGncbZRWQqnVECtBl692xO02Lb+iJG/lsCduIzux
+pjTaunVvCbj7BQDVICzoyQOwKe/qa39euSWcMl4wTYXRF8r4S2VgDJ0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLajawnYrFxvFgAknv5nnuZDTlLZMB8GA1UdIwQY
MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt
MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0
LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbpIsAIe
daM4Jj90NYeHatwKcxMsmMOvHIdM/1sNBL7OdZjIi3evQpi4/OMcfKWaQhOzyMXz
RSvQG4igKBcSCR5BwTzKIMKQl03wI4vavgNdQbFoHAfUwV6napYVWCkJUkfd/2Q3
+6jry/T2wlr/h1AQMvY99pn+gg5Jp51wtTSy5PJUIIImPEbxlrb1LhSrcnNYGj14
q/2zQaGLxljEcykgesi0+BRZ7Zl5F5/M59wCTyvauXscbr3cy7KZdmyZanBQmDOZ
S0E14JRv09UcX994BYUj98M5Y5f+ujnKPgQfwMosA+0icbG7k9VUb/NIR3tEEEfK
ZNmxnvyFbeAflg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:47 2026 by rpki-client