Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: cbHyAmQa8/f36f5G0hMN4ftvmvZXKiETrxaBU/l2toc=
Subject key identifier: 19:BB:98:8A:2F:93:F1:7C:C8:1C:5A:A6:97:CF:29:74:42:F1:B7:FB
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 019CABA239A8E8AC5D4F3418B768499FF3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 093F
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: JOlDCsZlCcmTT2OjiCTDsMx6-fY.roa (hash: RRlU0j5a3qBKVa1zgiaVLc9i2Imk7rlPX9bHpL9EoYc=)
2: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: NjV4nELTlDbXX9Tt6eh+BL07C34x6DFXNiZOOWyBRpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:39:a8:e8:ac:5d:4f:34:18:b7:68:49:9f:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=19bb988a2f93f17cc81c5aa697cf297442f1b7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:14:da:21:6a:cf:66:f2:fa:26:b3:f9:4b:
78:c6:a4:97:f0:02:97:23:93:d3:3e:7f:54:24:ef:
68:34:16:d6:3a:40:c4:97:2c:b3:cf:5d:1f:ed:87:
40:3b:f7:4f:21:b2:3d:81:0e:a2:b5:e6:27:b0:82:
9b:e9:86:50:ec:68:b7:03:04:a9:cc:1e:ad:ee:47:
4f:46:27:7f:74:d6:d0:57:97:f9:f4:4c:61:68:6e:
f8:7e:81:33:aa:85:c1:d4:96:ff:2c:42:ff:cf:b9:
2d:bf:c5:4f:8e:7e:5a:81:87:51:67:6d:0a:40:0f:
71:36:4d:39:0a:92:65:0d:f5:df:5e:ad:e9:5b:22:
35:95:1c:54:f1:77:33:41:3d:56:2b:5b:e0:db:e2:
97:cd:5d:c0:03:6a:f7:02:7c:ef:3c:e6:28:22:bf:
cc:f7:8e:dc:86:d0:4f:8e:c5:45:c6:f6:ac:5b:0b:
71:64:15:83:43:9f:d1:c5:e4:ef:ca:02:1d:ab:6e:
b0:b3:46:7e:07:c9:ec:31:7a:33:86:93:26:8d:71:
a3:cd:3a:0d:12:44:2d:7a:24:0d:e9:6f:63:a9:d3:
c7:a7:d3:0a:2f:61:0e:5c:d9:e9:80:11:57:57:23:
c1:18:7d:23:a4:60:a8:5b:0b:53:59:e0:12:10:de:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:98:8A:2F:93:F1:7C:C8:1C:5A:A6:97:CF:29:74:42:F1:B7:FB
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:09:d2:bc:9b:6d:57:d7:b2:2f:18:30:3c:e6:18:13:da:
1b:0b:84:96:ab:7a:6d:10:e6:3f:84:4b:0f:18:e6:9b:b8:b9:
5a:ac:9d:57:9e:cc:04:ce:c4:68:5c:1c:d9:be:4f:ff:40:56:
39:12:e6:c7:58:cf:0d:4d:6c:74:3c:14:bd:c6:5b:27:37:79:
2a:79:30:33:5b:e6:27:52:6c:5a:9b:b5:92:d2:b3:40:a2:7f:
b9:6a:fe:20:0e:6b:f4:d1:11:a6:43:d5:e7:95:de:59:c8:f0:
93:d1:56:6a:34:e4:11:1e:0d:45:11:e5:ce:0e:da:81:c0:a4:
ef:4f:8d:22:51:ed:b1:ce:7e:df:94:66:95:db:85:8e:ab:ad:
33:c2:29:c5:c4:3a:f5:27:8b:93:99:2c:99:0c:8e:a2:71:16:
15:44:27:85:49:6c:66:01:3c:6f:53:2c:8b:63:c9:59:64:84:
c5:0e:3e:35:ae:1e:e3:31:ba:8d:3e:f2:94:6e:a6:a8:0e:cf:
2e:bd:f8:9b:fc:e0:d3:55:d4:ee:1b:44:1e:5a:ba:05:84:15:
6f:37:1b:13:53:18:7a:63:71:03:ba:d5:c4:03:51:32:04:4f:
dc:1c:7c:37:8e:9d:a9:8f:07:54:e1:1d:97:6a:b7:59:99:1c:
33:9d:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:59 2026 by rpki-client