Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: TwsqR35lWbI0NGRxqr5se4YjKGWVPqtpdrBrFosyVdQ=
Subject key identifier: 43:3A:0C:63:40:2B:48:DE:E1:98:1F:14:59:44:81:BB:70:87:EA:55
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01A0D31574AFB6AFB051122555E15901FC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0FB2
Signing time: Thu 24 Sep 2026 11:03:13 +0000
Manifest this update: Thu 24 Sep 2026 11:03:13 +0000
Manifest next update: Fri 25 Sep 2026 11:03:13 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: T0OERRwSqddnNIrt5wToaAjs6/DqaDpLFzFTtx/yI9w=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:74:af:b6:af:b0:51:12:25:55:e1:59:01:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Sep 24 11:03:13 2026 GMT
Not After : Sep 25 11:03:13 2026 GMT
Subject: CN=433a0c63402b48dee1981f14594481bb7087ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:c2:20:08:3a:94:ec:17:d0:a7:b2:58:f7:
5e:ec:87:8b:7e:84:a5:74:fe:54:2e:94:10:b5:76:
70:19:42:3b:35:60:48:5e:4c:52:d8:03:da:43:d5:
b3:c9:30:e2:2f:2b:44:c3:78:69:41:e5:10:4c:4a:
e1:ba:86:71:2a:51:88:56:16:c9:a4:fc:90:96:c2:
fa:85:28:13:6c:3a:af:70:c0:1b:2e:27:ea:d6:e5:
e1:64:cb:25:36:8d:b2:d7:f7:c7:be:f4:f1:cb:f8:
7c:01:7e:9b:68:75:18:f4:1f:0f:4b:c0:4b:88:89:
11:f5:6c:df:de:ba:79:4d:05:bb:68:24:ef:32:27:
40:6f:ca:92:77:8a:83:1e:e2:d8:48:f0:4d:02:a4:
80:4d:58:41:ec:25:91:c0:1c:da:25:68:22:2d:b7:
4d:0f:5f:20:86:15:d8:4b:16:05:c1:ca:af:e6:50:
40:2a:1e:41:a6:3e:15:6d:8b:4a:8c:b2:20:ea:03:
12:94:aa:e7:0a:41:71:ed:b8:2f:a3:36:92:6b:59:
29:0f:03:5a:19:10:f0:e7:7b:3f:16:95:a2:52:3f:
5f:ce:9f:fe:6e:8c:ed:da:a5:63:b6:b2:78:83:d0:
62:6e:02:fe:43:42:0e:d8:5d:2e:5c:c1:71:4c:1a:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:0C:63:40:2B:48:DE:E1:98:1F:14:59:44:81:BB:70:87:EA:55
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:51:5f:1f:49:58:4f:e9:4c:a2:01:6a:83:d8:41:84:9b:56:
25:7b:e1:30:2f:f1:3d:f1:f4:19:5d:ac:ed:74:c7:0b:34:13:
1f:18:32:07:f5:14:88:6d:6e:09:09:e0:4d:ce:32:27:8a:3a:
4b:ad:62:c7:a9:ff:47:98:bb:57:1a:4f:7d:3b:3b:48:25:b0:
2b:e7:5f:4a:b1:f0:66:a0:c2:3c:9f:61:c1:75:8b:7e:ce:f2:
23:d5:49:40:cb:e6:f4:16:15:ff:0b:1b:b7:c9:1b:96:9d:57:
9e:3d:8d:03:20:2f:c8:c0:9a:66:06:4a:65:be:4a:a4:b3:f7:
72:68:f1:d8:c9:6a:1a:a9:5b:db:51:38:0c:ca:a2:07:52:05:
bf:9c:34:51:f0:cf:c9:c3:60:e9:c4:b8:04:60:0d:d1:cf:14:
ea:77:0b:6d:06:33:7a:5b:50:39:38:ea:63:85:24:a4:bb:14:
05:2a:8d:b5:38:ea:bb:e6:8c:d7:37:d0:a1:8a:48:2a:07:19:
df:df:9f:6b:2c:52:eb:5f:2c:ca:d8:27:f4:d6:cc:f7:61:9d:
ce:e0:d5:d4:36:74:6c:bb:23:e2:6e:d4:e4:b6:ad:a6:35:40:
f9:14:d6:ce:ee:fc:4c:dc:ef:92:a0:ad:4c:cc:99:5f:37:09:
0a:4a:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:22:37 2026 by rpki-client