Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: 4+PXn8ln27yKs0AeOKXDdbrBlDMp9ONvwFsntslOhWQ=
Subject key identifier: F4:99:4E:16:70:B4:2F:49:89:93:45:61:2C:06:52:09:25:B8:74:D5
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 01A13711C145F122DCC64C0BBA8D60B1F237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1A36
Signing time: Tue 13 Oct 2026 21:01:12 +0000
Manifest this update: Tue 13 Oct 2026 21:01:12 +0000
Manifest next update: Wed 14 Oct 2026 21:01:12 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: NyDMe5iu9mnxMRhzmPp3RCAd0aXzfjJeS2kIQt2o7/M=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:c1:45:f1:22:dc:c6:4c:0b:ba:8d:60:b1:f2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Oct 13 21:01:12 2026 GMT
Not After : Oct 14 21:01:12 2026 GMT
Subject: CN=f4994e1670b42f49899345612c06520925b874d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:43:da:8b:35:5f:8e:2c:02:c2:51:bf:b3:42:
f4:90:8c:70:a1:3d:21:ae:2c:83:a1:72:84:a6:08:
7f:87:d9:1c:bb:db:a2:5f:d0:1e:b9:25:0d:bf:7c:
f7:07:25:70:a2:02:bd:ab:21:30:dd:7e:7c:9b:a4:
c7:e6:dc:32:c0:f4:08:83:8a:3d:3b:3b:ea:59:ec:
d5:75:6f:f8:c3:2c:7f:e8:0a:b5:47:8e:ef:4e:a8:
b6:00:3e:02:e3:7e:ec:f7:cb:4d:4d:65:e1:2d:fe:
c8:31:2b:0d:47:f1:27:14:cd:25:08:f0:d7:bc:1f:
59:23:d6:98:c6:af:72:fe:9c:9d:17:27:20:5b:58:
38:be:19:92:27:ce:a1:5c:db:f5:2b:a4:7f:e6:7b:
a9:37:59:06:de:a7:bf:fa:4c:1f:7b:66:09:82:c8:
17:5d:72:0b:c2:dc:4d:5f:26:c2:bc:94:61:02:92:
02:df:8b:5c:45:f5:88:06:12:bc:16:0b:c1:07:84:
86:90:ed:7e:d8:78:1e:b6:85:8a:fd:b4:7e:e2:82:
28:93:27:5c:de:a5:46:8f:59:41:11:7a:7e:b4:9f:
ec:85:e3:9e:b9:57:8d:92:78:7a:92:cd:3f:29:10:
c2:2f:2b:7d:bc:c5:7d:8e:c4:c6:21:d4:67:ba:3f:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:4E:16:70:B4:2F:49:89:93:45:61:2C:06:52:09:25:B8:74:D5
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:f8:4a:25:75:17:ba:c9:19:b4:21:6d:0d:ae:8a:9e:d6:
d0:50:cb:11:92:de:f4:19:e2:75:6e:bf:82:06:1d:ff:83:d3:
75:23:d6:09:8a:a1:22:e2:d1:9d:fa:03:f8:81:43:5d:89:34:
e6:b1:b1:2b:da:cd:93:bf:9d:40:74:61:46:0d:d0:48:bb:13:
ec:e2:d0:1e:13:86:e0:5b:dc:e2:13:60:d9:2a:85:93:e5:11:
51:69:99:31:fd:a1:96:38:ef:36:76:b7:00:45:19:df:ca:a3:
5f:91:43:e9:c7:ab:cd:7d:cd:18:35:61:d3:cb:f5:5b:42:5f:
6e:d3:37:66:96:13:ec:c4:35:02:37:2f:91:7d:a0:41:99:fb:
c0:ea:0e:d2:8b:77:5f:95:08:af:7f:75:56:0d:7c:dc:1e:ea:
7a:3f:2c:05:b5:d1:4b:4b:37:45:5f:15:13:b5:7a:31:cc:c8:
ff:7a:f4:be:5c:4f:e2:90:87:6c:06:ae:2b:81:41:36:2d:4e:
17:8e:36:99:bd:80:13:f3:de:69:d7:9d:64:ad:92:71:e9:12:
98:ce:a8:67:9d:b3:7e:67:e1:4f:9a:2c:58:3d:fd:03:5a:17:
fe:bf:f7:86:64:e4:61:2f:55:ed:72:e5:bf:04:cd:38:2d:fd:
3a:5d:4f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3EcFF8SLcxkwLuo1gsfI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYxMDEzMjEwMTEyWhcNMjYxMDE0MjEwMTEyWjAzMTEwLwYDVQQD
EyhmNDk5NGUxNjcwYjQyZjQ5ODk5MzQ1NjEyYzA2NTIwOTI1Yjg3NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kPaizVfjiwCwlG/s0L0kIxwoT0h
riyDoXKEpgh/h9kcu9uiX9AeuSUNv3z3ByVwogK9qyEw3X58m6TH5twywPQIg4o9
OzvqWezVdW/4wyx/6Aq1R47vTqi2AD4C437s98tNTWXhLf7IMSsNR/EnFM0lCPDX
vB9ZI9aYxq9y/pydFycgW1g4vhmSJ86hXNv1K6R/5nupN1kG3qe/+kwfe2YJgsgX
XXILwtxNXybCvJRhApIC34tcRfWIBhK8FgvBB4SGkO1+2HgetoWK/bR+4oIokydc
3qVGj1lBEXp+tJ/sheOeuVeNknh6ks0/KRDCLyt9vMV9jsTGIdRnuj9wAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSZThZwtC9JiZNFYSwGUgkluHTVMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbb4SiV1
F7rJGbQhbQ2uip7W0FDLEZLe9BnidW6/ggYd/4PTdSPWCYqhIuLRnfoD+IFDXYk0
5rGxK9rNk7+dQHRhRg3QSLsT7OLQHhOG4Fvc4hNg2SqFk+URUWmZMf2hljjvNna3
AEUZ38qjX5FD6cerzX3NGDVh08v1W0JfbtM3ZpYT7MQ1AjcvkX2gQZn7wOoO0ot3
X5UIr391Vg183B7qej8sBbXRS0s3RV8VE7V6MczI/3r0vlxP4pCHbAauK4FBNi1O
F442mb2AE/PeadedZK2ScekSmM6oZ52zfmfhT5osWD39A1oX/r/3hmTkYS9V7XLl
vwTNOC39Ol1PTg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:44:52 2026 by rpki-client