
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: 6p0ZuOVD2jiXnYXvzHAZt7Qe9+QllobxYlhaSOhhzDA=
Subject key identifier: A7:36:7B:CF:33:67:42:6A:39:5B:10:B7:58:9B:42:AC:6E:2F:FF:D8
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 019D992B49BA2DB1E229C1B45D1A5BF72E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 09BA
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa (hash: RRlU0j5a3qBKVa1zgiaVLc9i2Imk7rlPX9bHpL9EoYc=)
2: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: vzp5qYVtUwJD2a4QCSrx9JgRoAttTD4wWpOZc5Qu+yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:49:ba:2d:b1:e2:29:c1:b4:5d:1a:5b:f7:2e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=a7367bcf3367426a395b10b7589b42ac6e2fffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:d6:49:18:7a:79:dd:a5:15:aa:27:e8:91:
8a:7e:7e:a0:e8:ce:4f:dd:5d:b8:af:ea:09:f6:1a:
75:6a:6b:b3:b9:72:35:06:ff:37:fa:bd:9c:88:76:
b4:5a:cb:fe:61:8c:c4:02:d4:d1:3c:31:be:31:09:
19:cb:7e:fc:1a:49:35:a5:07:4f:41:3d:2a:65:c6:
b6:cd:b4:ce:79:fb:55:a6:0b:92:dd:ae:35:2f:4f:
e9:f4:55:a5:94:3d:df:ca:82:c0:0e:00:7a:2e:94:
21:58:62:b7:6d:71:ad:de:de:91:35:ed:5f:20:9c:
90:0d:d6:35:f6:bc:f6:57:54:22:dc:04:bb:bf:62:
a3:15:89:55:f5:dc:9f:26:ed:9e:0a:d4:53:a1:91:
58:66:8a:df:fa:52:e4:d0:05:e6:80:52:d6:b9:c4:
ad:4c:3a:a7:e5:0c:1f:89:9d:44:d9:49:23:d0:ce:
0d:5e:cf:a5:b4:87:a4:04:7f:64:6b:29:c9:a9:8e:
f3:53:d1:cd:84:8f:98:05:e0:0a:b5:4b:94:16:e1:
e7:a8:1c:2e:30:8e:8f:b8:38:c8:87:83:b1:d9:5b:
9d:a1:2f:8b:9d:5d:d0:7c:de:92:de:c2:f0:a6:36:
81:5d:cb:3a:73:b4:e1:82:0c:01:13:f1:bd:b4:d5:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:36:7B:CF:33:67:42:6A:39:5B:10:B7:58:9B:42:AC:6E:2F:FF:D8
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:91:fe:15:16:ed:a6:f2:63:68:6e:65:6f:89:bf:78:e3:58:
f8:c3:02:a7:c3:8c:01:8d:f9:cb:50:2f:ab:13:3c:4a:4e:06:
92:20:0c:5b:db:11:8e:de:7f:18:6e:ac:1a:38:12:12:07:8a:
d5:a5:71:cb:95:d4:3d:37:8e:97:34:e8:9f:92:6d:15:fa:dc:
f7:75:5e:de:ec:36:c5:76:08:14:fc:d1:e0:c8:69:dc:e4:43:
ca:78:9b:13:55:c5:f5:26:c7:1e:0a:86:db:cb:31:d9:26:29:
30:b2:22:bb:3f:a1:4e:61:e9:21:a2:24:52:07:d0:63:be:87:
f9:9b:53:62:8e:74:84:e6:7f:f8:16:6c:e5:e3:31:1a:b4:e0:
b4:1b:b7:d8:aa:aa:35:34:5e:3c:3f:12:8c:a6:a3:74:7f:87:
ea:5a:ca:a1:c2:2d:b7:d3:ca:6c:5b:b5:9b:70:f7:5e:11:78:
39:86:1f:84:1e:79:45:0e:24:62:5f:9f:09:35:a9:6d:39:61:
ff:ac:b6:d2:c3:92:5d:b8:b5:2e:57:1b:13:2e:09:5d:d9:3f:
7a:6f:3c:32:dc:cd:84:13:50:78:a3:23:7a:f5:53:82:62:5c:
b0:11:2e:9c:2b:5e:a3:a6:4d:0b:53:03:e0:ee:88:1f:ff:00:
92:1c:1c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0m6LbHiKcG0XRpb9y4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk
ZGY0MWQwHhcNMjYwNDE3MDIwMDQ0WhcNMjYwNDE4MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhNzM2N2JjZjMzNjc0MjZhMzk1YjEwYjc1ODliNDJhYzZlMmZmZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAzWSRh6ed2lFaon6JGKfn6g6M5P
3V24r+oJ9hp1amuzuXI1Bv83+r2ciHa0Wsv+YYzEAtTRPDG+MQkZy378Gkk1pQdP
QT0qZca2zbTOeftVpguS3a41L0/p9FWllD3fyoLADgB6LpQhWGK3bXGt3t6RNe1f
IJyQDdY19rz2V1Qi3AS7v2KjFYlV9dyfJu2eCtRToZFYZorf+lLk0AXmgFLWucSt
TDqn5QwfiZ1E2Ukj0M4NXs+ltIekBH9kaynJqY7zU9HNhI+YBeAKtUuUFuHnqBwu
MI6PuDjIh4Ox2VudoS+LnV3QfN6S3sLwpjaBXcs6c7ThggwBE/G9tNWUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc2e88zZ0JqOVsQt1ibQqxuL//YMB8GA1UdIwQY
MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct
YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2
LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZH+FRbt
pvJjaG5lb4m/eONY+MMCp8OMAY35y1AvqxM8Sk4GkiAMW9sRjt5/GG6sGjgSEgeK
1aVxy5XUPTeOlzTon5JtFfrc93Ve3uw2xXYIFPzR4Mhp3ORDynibE1XF9SbHHgqG
28sx2SYpMLIiuz+hTmHpIaIkUgfQY76H+ZtTYo50hOZ/+BZs5eMxGrTgtBu32Kqq
NTRePD8SjKajdH+H6lrKocItt9PKbFu1m3D3XhF4OYYfhB55RQ4kYl+fCTWpbTlh
/6y20sOSXbi1LlcbEy4JXdk/em88MtzNhBNQeKMjevVTgmJcsBEunCteo6ZNC1MD
4O6IH/8Akhwc/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:23 2026 by rpki-client