Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: YDNlFItCT9vAUnWiDO3y3eb/o1D0yZUFriTNyfHVH3c=
Subject key identifier: C4:8E:8A:53:FC:21:0B:00:CF:18:FA:CA:D0:79:19:52:24:06:5D:3B
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01A134112B32E6442033790EFBF9DB768093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0DCC
Signing time: Tue 13 Oct 2026 07:01:42 +0000
Manifest this update: Tue 13 Oct 2026 07:01:42 +0000
Manifest next update: Wed 14 Oct 2026 07:01:42 +0000
Files and hashes: 1: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (hash: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: BAFP39meS6UD2mR+nfTANPpomJYl/ptnonIHKzO9+2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:11:2b:32:e6:44:20:33:79:0e:fb:f9:db:76:80:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Oct 13 07:01:42 2026 GMT
Not After : Oct 14 07:01:42 2026 GMT
Subject: CN=c48e8a53fc210b00cf18facad079195224065d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:ed:52:14:8a:3a:74:f4:68:98:b3:b1:31:
1d:cc:c4:ce:f8:78:a2:34:e1:29:59:dc:1a:b3:5c:
77:b2:30:f4:ef:c9:21:36:f2:cf:8a:3f:c2:2f:98:
9b:79:33:00:91:1b:ed:f2:fe:92:99:85:ca:eb:9d:
d9:8c:92:8f:5f:4e:9a:a8:b8:8c:44:03:22:7f:00:
d3:6a:52:72:3d:9f:f4:83:25:66:5f:86:78:b9:6e:
8c:4a:e1:27:47:fe:90:ad:47:4c:78:fd:5a:21:44:
5d:4a:1a:f2:c7:f1:75:1e:4b:66:98:5d:0f:7d:fd:
aa:73:6f:06:f2:7d:67:0d:34:03:49:63:b4:ea:e2:
23:99:4f:fa:3c:64:4b:9b:7c:10:be:af:96:62:cc:
c1:d3:14:98:e2:c3:64:5e:23:ad:b4:ff:23:17:bb:
f2:fc:02:a0:64:d6:ac:fc:44:8c:5e:8d:bd:3f:82:
49:2d:62:b6:e9:4b:4d:48:36:e8:3a:d0:0b:d2:cf:
88:5c:78:47:ad:e9:8b:ca:1b:92:75:08:3d:85:fa:
07:2a:e6:39:51:2b:c6:14:56:fb:0f:fd:2f:8d:6b:
da:4b:b1:72:44:3c:a0:6a:74:c0:f7:c6:0c:5e:d1:
f5:f4:1e:12:04:84:5a:34:4f:88:86:ce:fb:b0:4c:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:8A:53:FC:21:0B:00:CF:18:FA:CA:D0:79:19:52:24:06:5D:3B
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fa:07:73:aa:24:36:66:71:d5:68:b5:12:1f:17:3f:06:0e:
32:f8:e6:08:00:e6:65:ba:dd:ac:aa:a1:9c:9c:5d:26:1e:f3:
41:f0:bb:7b:63:2c:31:43:d8:23:da:c0:c0:b5:d2:3c:95:9a:
26:dc:53:ff:46:e3:79:e4:f5:69:d0:d8:b0:6e:5f:01:77:bc:
c1:63:f5:2f:9b:f0:43:96:b3:28:4c:3c:a9:f3:c7:26:63:39:
84:44:69:d3:56:95:e8:ca:93:33:10:80:5e:4d:c0:d0:eb:4e:
55:58:35:5b:cb:40:b1:93:b2:8a:ff:1b:82:3d:95:83:e5:1e:
6d:e3:d7:b0:32:7d:59:43:a4:45:ff:4d:3d:50:da:2c:9c:3a:
b9:13:04:0e:88:fc:d4:e1:5a:17:fb:85:c9:6e:b1:d9:09:e1:
ec:e2:99:fe:7a:35:90:14:ff:4b:c3:5d:3c:c0:2f:f4:9a:5c:
b7:ac:83:7f:94:cb:3d:39:44:3f:12:be:45:aa:78:5b:43:3d:
2a:09:f5:cf:3c:80:7d:78:16:00:29:7f:11:40:bc:93:ad:55:
4a:f6:0e:a9:ba:fc:7f:ec:9a:12:ec:ef:5e:27:f0:fe:33:d6:
cb:a0:ff:99:11:a9:b6:4a:6f:cc:ab:f2:ef:b3:d8:31:28:b6:
ae:82:ff:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0ESsy5kQgM3kO+/nbdoCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh
NGUzYTEwHhcNMjYxMDEzMDcwMTQyWhcNMjYxMDE0MDcwMTQyWjAzMTEwLwYDVQQD
EyhjNDhlOGE1M2ZjMjEwYjAwY2YxOGZhY2FkMDc5MTk1MjI0MDY1ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkLtUhSKOnT0aJizsTEdzMTO+Hii
NOEpWdwas1x3sjD078khNvLPij/CL5ibeTMAkRvt8v6SmYXK653ZjJKPX06aqLiM
RAMifwDTalJyPZ/0gyVmX4Z4uW6MSuEnR/6QrUdMeP1aIURdShryx/F1HktmmF0P
ff2qc28G8n1nDTQDSWO06uIjmU/6PGRLm3wQvq+WYszB0xSY4sNkXiOttP8jF7vy
/AKgZNas/ESMXo29P4JJLWK26UtNSDboOtAL0s+IXHhHremLyhuSdQg9hfoHKuY5
USvGFFb7D/0vjWvaS7FyRDyganTA98YMXtH19B4SBIRaNE+Ihs77sEycZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSOilP8IQsAzxj6ytB5GVIkBl07MB8GA1UdIwQY
MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt
MWFjNGE0MDA3ZGI0LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0
LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvoHc6ok
NmZx1Wi1Eh8XPwYOMvjmCADmZbrdrKqhnJxdJh7zQfC7e2MsMUPYI9rAwLXSPJWa
JtxT/0bjeeT1adDYsG5fAXe8wWP1L5vwQ5azKEw8qfPHJmM5hERp01aV6MqTMxCA
Xk3A0OtOVVg1W8tAsZOyiv8bgj2Vg+UebePXsDJ9WUOkRf9NPVDaLJw6uRMEDoj8
1OFaF/uFyW6x2Qnh7OKZ/no1kBT/S8NdPMAv9Jpct6yDf5TLPTlEPxK+Rap4W0M9
Kgn1zzyAfXgWACl/EUC8k61VSvYOqbr8f+yaEuzvXifw/jPWy6D/mRGptkpvzKvy
77PYMSi2roL/Xg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:50:11 2026 by rpki-client