Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: vWnwAmxV5Tq34WH631pRUWoFvQ5dMcm2ut+zC9CQRw4=
Subject key identifier: 67:0A:1A:28:22:BA:02:B6:AB:5A:20:C5:29:0B:48:1A:DF:E8:FF:C1
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019CAE6C6EA3A1A1865CE795BD63F5273BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 17DD
Signing time: Mon 02 Mar 2026 12:01:07 +0000
Manifest this update: Mon 02 Mar 2026 12:01:07 +0000
Manifest next update: Tue 03 Mar 2026 12:01:07 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: BEXfRogVhxIhVbfj5D3PHVKFSPt8O6jGY6CFyRQysgM=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:6e:a3:a1:a1:86:5c:e7:95:bd:63:f5:27:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Mar 2 12:01:07 2026 GMT
Not After : Mar 3 12:01:07 2026 GMT
Subject: CN=670a1a2822ba02b6ab5a20c5290b481adfe8ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:53:c1:8f:36:42:16:00:2a:37:f5:f0:22:
3b:0a:69:36:7e:d3:61:55:30:c0:ad:13:5e:9e:55:
e1:08:71:50:6e:8d:e4:81:98:3d:b6:b4:46:96:67:
f7:2c:e2:62:24:e1:a9:2e:9a:e3:f9:6f:e9:a2:b5:
2b:8b:4f:50:b5:1a:ea:5b:30:22:b8:a4:6c:6e:90:
2f:3f:1b:8a:db:40:65:8f:c0:99:9b:0b:6a:0b:23:
49:58:f8:2a:f4:53:d1:e9:37:80:54:da:02:0d:f7:
a2:96:58:37:33:55:a2:ec:af:a4:5f:ca:76:b1:d4:
23:d7:fd:6d:b8:71:80:b9:fe:e8:16:ee:86:4b:f9:
1a:c4:13:34:d6:fb:7c:7b:38:87:20:11:b6:e3:94:
52:12:f2:ac:98:60:54:d3:05:a5:09:b0:17:6c:6b:
b9:c4:f7:ae:db:90:cf:b7:47:dc:23:fa:21:8b:2d:
ba:9a:56:22:75:68:0e:6c:6d:c6:1f:eb:92:75:6c:
10:bb:19:c5:75:a2:c4:0b:4a:1a:0e:fb:6a:18:87:
00:ce:f3:07:62:ea:9c:40:2b:2a:69:14:be:5c:b9:
66:ef:69:1d:2c:d3:92:23:64:4a:65:2c:b7:82:82:
88:44:31:a8:02:4d:71:40:87:29:59:d9:6f:d3:af:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0A:1A:28:22:BA:02:B6:AB:5A:20:C5:29:0B:48:1A:DF:E8:FF:C1
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:2a:22:8e:11:c1:ef:b3:81:2d:79:35:c2:89:bf:3c:6b:
67:15:a4:f7:73:71:44:4d:3d:8d:ea:4c:57:2b:fd:9f:6b:22:
bf:d1:93:0e:4a:30:36:c3:76:b5:10:6a:c2:47:05:1c:04:44:
34:fb:09:0e:00:9a:5a:27:bd:f6:38:46:78:b8:88:b4:b3:04:
d6:bb:df:60:6b:53:42:34:46:a8:e8:b4:69:f4:b3:e2:fd:5e:
d8:ab:b3:f4:bc:d1:25:a2:ac:af:e0:ee:9a:dd:2c:36:42:97:
99:c3:15:2c:d0:3b:9e:c8:20:52:f0:94:fb:5a:fd:31:07:e8:
0c:09:2f:2c:16:5f:4b:a6:d8:a9:5c:c1:2e:56:66:6d:43:e7:
37:28:be:1f:98:36:a0:48:5e:fa:61:71:b7:7d:cd:bc:f7:80:
0e:c8:25:6c:1a:e0:7b:29:19:b1:e2:bd:c3:a4:f4:f3:d6:f2:
5b:77:f3:ce:c7:5b:c7:38:e3:f3:41:d8:7c:4c:19:5f:b0:e4:
42:d9:f7:f6:9f:60:6f:62:3d:00:6e:1d:c6:0f:22:8b:3c:bc:
7f:11:bf:50:19:57:51:bb:7d:59:57:6b:53:4d:14:50:58:97:
9c:7d:c9:8e:ad:97:cb:f7:4b:b6:cd:0e:6a:90:91:44:ff:c1:
94:8c:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:38 2026 by rpki-client