Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: dC8DX4DERy5hh7iBmOyilwGy2c4bXxmVsW8z6j9aIEE=
Subject key identifier: 4D:09:CA:84:A3:37:CB:C6:3F:5C:C4:1F:46:D0:95:9F:B8:B9:3D:B9
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019CAAFD8264FB9924A49F71497EC8DA89C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0D8B
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: boYND8tS37mkIQwTVQ+C1fE21SAojJOWQc5iZTMrSi0=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:82:64:fb:99:24:a4:9f:71:49:7e:c8:da:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=4d09ca84a337cbc63f5cc41f46d0959fb8b93db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:71:0b:12:31:9f:15:23:8e:02:ac:68:c7:
3d:fd:b6:94:2f:d9:8a:a3:d9:51:c7:40:90:7d:78:
4d:65:1d:f5:d8:4a:08:9c:28:88:5e:59:cf:d5:f0:
16:8d:fb:ec:b3:f1:a1:8e:cb:42:39:bf:2d:c3:36:
dc:8e:b0:6f:e5:62:4b:56:bc:e8:23:86:d2:76:86:
da:07:e3:3d:c8:76:54:15:35:22:15:68:1c:79:b2:
f0:56:2f:ba:f0:8f:2c:c7:75:8c:8e:b2:ce:da:64:
8a:8e:26:f5:a7:90:26:ef:1a:b8:15:4c:a3:51:af:
dc:2c:d2:fd:97:54:46:8b:e1:63:14:28:5e:36:be:
8d:f3:35:34:5e:8c:47:6a:ca:47:24:56:40:80:1d:
cc:a1:5f:78:4c:b7:d4:0d:b2:fd:0d:6f:64:6d:5c:
08:67:52:6d:89:e1:89:40:07:9b:91:aa:e5:ec:90:
7b:f7:87:0c:94:c5:50:a7:d2:4f:93:09:5c:59:57:
f8:e1:10:5c:a4:22:40:a0:e9:49:93:ff:61:e8:8e:
b7:cb:a8:48:94:ae:79:17:fb:48:6e:2f:dc:89:bc:
53:be:f0:72:56:f3:50:65:4b:b1:ec:d8:bd:ce:d3:
05:dd:26:02:3e:22:b2:0c:c4:49:61:27:76:f8:6d:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:CA:84:A3:37:CB:C6:3F:5C:C4:1F:46:D0:95:9F:B8:B9:3D:B9
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8d:6f:73:3c:c2:52:5e:d9:e7:44:1e:ac:11:35:87:69:eb:
ec:33:e1:3a:ba:24:b0:d0:f8:aa:5f:af:dc:74:e7:40:d6:b0:
11:04:29:55:a6:af:c2:7a:0b:d2:f2:fc:74:cd:1f:cf:30:19:
08:45:12:fa:fe:0f:43:41:8a:91:15:b1:6f:49:fa:0a:fc:c9:
b6:9d:1d:5c:a7:93:59:21:3d:b8:d4:10:bf:a8:91:a0:f7:01:
58:ed:83:c6:99:03:2c:19:be:7c:9b:d8:dd:c6:7d:db:76:30:
1e:9b:e0:82:47:ee:df:bf:d1:76:f3:4b:05:7a:91:a2:21:7b:
30:72:81:60:9e:90:83:73:4d:d1:ca:8a:2d:52:d0:4e:9c:3c:
e7:05:ae:bb:a3:bf:b7:97:74:df:26:31:41:e7:30:9a:ca:fe:
47:8f:2e:22:54:3f:09:9d:8a:2b:6d:b8:d2:39:e6:0f:7f:3b:
95:3c:7b:60:bd:e9:8f:dc:dd:56:ea:d6:a6:4a:3f:f1:a9:21:
62:e9:91:6e:a0:d4:17:83:2f:4a:93:49:03:5c:b0:13:3d:59:
a9:70:ef:e4:02:1c:16:c0:88:18:99:6d:f0:fd:0e:9c:03:a3:
a6:ac:b2:49:53:6c:0a:7e:96:f3:6d:2d:ce:9f:d1:97:9a:f3:
b9:5e:bc:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/YJk+5kkpJ9xSX7I2onBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk
MzFiMGQwHhcNMjYwMzAxMjAwMTA2WhcNMjYwMzAyMjAwMTA2WjAzMTEwLwYDVQQD
Eyg0ZDA5Y2E4NGEzMzdjYmM2M2Y1Y2M0MWY0NmQwOTU5ZmI4YjkzZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28VxCxIxnxUjjgKsaMc9/baUL9mK
o9lRx0CQfXhNZR312EoInCiIXlnP1fAWjfvss/GhjstCOb8twzbcjrBv5WJLVrzo
I4bSdobaB+M9yHZUFTUiFWgcebLwVi+68I8sx3WMjrLO2mSKjib1p5Am7xq4FUyj
Ua/cLNL9l1RGi+FjFCheNr6N8zU0XoxHaspHJFZAgB3MoV94TLfUDbL9DW9kbVwI
Z1JtieGJQAebkarl7JB794cMlMVQp9JPkwlcWVf44RBcpCJAoOlJk/9h6I63y6hI
lK55F/tIbi/cibxTvvByVvNQZUux7Ni9ztMF3SYCPiKyDMRJYSd2+G0MyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0JyoSjN8vGP1zEH0bQlZ+4uT25MB8GA1UdIwQY
MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt
MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk
LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkY1vczzC
Ul7Z50QerBE1h2nr7DPhOroksND4ql+v3HTnQNawEQQpVaavwnoL0vL8dM0fzzAZ
CEUS+v4PQ0GKkRWxb0n6CvzJtp0dXKeTWSE9uNQQv6iRoPcBWO2DxpkDLBm+fJvY
3cZ923YwHpvggkfu37/RdvNLBXqRoiF7MHKBYJ6Qg3NN0cqKLVLQTpw85wWuu6O/
t5d03yYxQecwmsr+R48uIlQ/CZ2KK2240jnmD387lTx7YL3pj9zdVurWpko/8akh
YumRbqDUF4MvSpNJA1ywEz1ZqXDv5AIcFsCIGJlt8P0OnAOjpqyySVNsCn6W820t
zp/Rl5rzuV68vA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:00 2026 by rpki-client