Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: a4PWFrGrHrx1XIuYbkQ8KzRyLrjVjilRDtFFXETIB6A=
Subject key identifier: D0:76:70:EE:F4:D7:94:BD:8D:C0:F2:52:0C:89:CB:3B:B4:49:1F:B3
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 019D9A754654D47C36EB2306D953C0A4614B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 1017
Signing time: Fri 17 Apr 2026 08:01:10 +0000
Manifest this update: Fri 17 Apr 2026 08:01:10 +0000
Manifest next update: Sat 18 Apr 2026 08:01:10 +0000
Files and hashes: 1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: QDCodW+pcrrKe5i7mx63+ySBCvZDRqPHkn0FjfQyoBs=)
2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:46:54:d4:7c:36:eb:23:06:d9:53:c0:a4:61:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Apr 17 08:01:10 2026 GMT
Not After : Apr 18 08:01:10 2026 GMT
Subject: CN=d07670eef4d794bd8dc0f2520c89cb3bb4491fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:78:9b:32:c4:4f:77:60:94:6f:47:31:24:
31:40:f3:1e:28:d9:f6:af:eb:79:24:2a:ef:0e:ee:
41:20:ee:b2:25:51:cf:89:2f:d8:c8:96:d4:df:91:
42:e0:48:5f:c6:24:bd:18:13:89:fc:8b:b3:fa:53:
3c:dc:21:1b:aa:e9:ed:80:ef:43:14:a4:ef:32:fc:
58:1e:a3:ef:76:c5:5d:34:c7:59:59:d1:7a:ef:88:
78:61:30:1e:ac:83:b7:28:50:38:4d:54:ea:87:93:
64:a3:37:70:cf:4d:6c:6a:16:5f:5c:57:ae:32:67:
eb:3c:35:66:4a:31:28:66:4b:a2:79:cc:fb:de:4d:
62:43:ce:a7:09:83:97:ee:a0:4a:95:ec:1e:6f:16:
81:b2:f1:d6:03:e8:f5:4a:29:76:2e:dc:45:0f:81:
98:ec:90:24:bf:01:94:7a:26:62:ff:00:af:91:22:
f2:58:a3:6f:ce:c6:46:76:55:f6:f9:39:73:42:dd:
b1:1d:1a:3e:8e:bd:84:05:1a:b7:a7:75:2b:23:4b:
1d:e7:bc:20:7b:c6:6a:7f:1e:61:5a:ca:25:c0:fe:
af:47:6c:52:18:de:b3:bb:61:2c:24:44:73:ce:32:
64:f2:fa:53:c8:ba:41:82:d4:82:52:88:1c:22:ef:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:70:EE:F4:D7:94:BD:8D:C0:F2:52:0C:89:CB:3B:B4:49:1F:B3
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:91:1e:db:73:13:0a:36:cd:fd:c8:ef:d1:c4:2d:b8:fe:b4:
28:74:7a:32:0e:6c:c5:b1:96:3f:12:c6:f1:f8:a3:1b:e2:a4:
5c:eb:fc:66:c6:1e:93:0f:9c:cd:27:91:b7:e2:01:8d:c1:87:
ad:a2:79:b6:21:9e:f6:da:64:c8:41:46:bd:6e:9c:de:07:77:
ce:d3:e2:41:03:57:61:12:b2:5a:97:b0:84:7a:cf:f2:0d:40:
30:55:c6:7a:36:9c:c6:b9:24:79:8b:0f:81:90:3f:c3:40:39:
5c:6e:1e:2b:16:d1:df:3e:3d:7a:15:1b:1d:2f:4e:b7:6f:f2:
4a:26:88:65:69:5a:a9:83:d3:d5:d8:16:2c:86:02:b3:79:3b:
25:41:03:a3:d4:cc:96:60:6b:0b:33:54:62:6c:3f:ae:13:d7:
b5:5a:db:08:73:7e:89:0a:f8:7c:ea:57:80:c7:4c:c9:ae:91:
40:cd:77:31:bf:19:f5:59:dd:aa:ab:f5:e9:d8:66:d9:e7:15:
53:ef:77:5f:c4:1e:bb:1b:4f:ff:64:a7:ff:83:91:39:16:85:
29:0a:dc:da:6f:8c:92:d6:65:e9:29:e3:1c:23:c6:a1:70:5b:
b1:1b:4d:da:d6:1f:eb:58:82:15:36:b7:6f:f0:bc:6b:9e:61:
dc:8f:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:14:58 2026 by rpki-client