Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: MzH5Tyt41I4GkoiGIfrvVx5l22EhOBFbVo/R45TNjbg=
Subject key identifier: D8:F6:A6:93:03:22:CB:ED:05:92:F1:0D:AE:C4:BB:09:5C:0F:1A:B2
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019FAD1AD16986EC59C72F607F5A7FC05128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 196A
Signing time: Wed 29 Jul 2026 09:00:43 +0000
Manifest this update: Wed 29 Jul 2026 09:00:43 +0000
Manifest next update: Thu 30 Jul 2026 09:00:43 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: /mLuCkvIj3X4+QTWqt7t9DOqqVQzHMYOSoFFu5YkQF8=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:d1:69:86:ec:59:c7:2f:60:7f:5a:7f:c0:51:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jul 29 09:00:43 2026 GMT
Not After : Jul 30 09:00:43 2026 GMT
Subject: CN=d8f6a6930322cbed0592f10daec4bb095c0f1ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:86:19:83:a6:09:a8:9e:63:8a:e8:8b:74:
92:03:48:5e:45:e3:de:16:f8:8b:87:71:40:0e:2a:
bb:54:df:09:7c:2e:32:3c:57:fa:41:48:a9:da:10:
5e:e5:80:92:12:58:95:d2:be:2f:6e:31:fd:22:e8:
f6:ba:66:5f:d7:f5:81:40:35:4d:fd:37:dd:7e:fb:
6a:28:68:b2:94:5f:ed:61:61:b3:81:8e:cc:f2:ca:
8b:3c:90:2c:09:cb:26:3c:c8:68:35:8c:76:ef:8e:
60:26:d6:c8:84:82:4e:af:8a:36:84:61:15:41:2a:
6d:06:69:02:e1:15:99:cf:98:6a:6d:79:e4:71:6b:
be:0d:5d:05:c8:5f:f7:44:e7:52:27:0a:a2:a7:21:
30:2c:cf:2a:53:6c:77:74:bc:9b:8a:85:0a:2e:a1:
22:fd:85:c5:83:aa:66:af:0c:6e:08:52:9f:a7:95:
7d:37:0f:af:c7:8c:33:24:c2:6a:1a:cd:ca:38:55:
7a:0c:31:05:d1:b9:66:3e:09:74:ef:5d:0d:b9:d5:
60:1a:75:02:51:7f:64:c2:eb:1a:e8:6d:d4:0f:3a:
a5:b6:43:8f:37:3a:37:b5:48:e7:ad:86:43:da:5e:
9d:19:5d:96:25:95:38:fa:54:80:d8:d7:ef:b2:b7:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:A6:93:03:22:CB:ED:05:92:F1:0D:AE:C4:BB:09:5C:0F:1A:B2
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:9b:b3:e8:2a:fd:ee:c2:5d:92:cc:93:d2:dd:32:f1:5c:
c2:8e:b6:40:76:a6:01:19:26:d4:64:1b:5d:5f:53:7d:a9:fb:
7e:b8:ab:41:c9:f6:13:34:40:cd:a4:1b:98:1f:e8:9d:b7:5a:
8e:f5:ef:22:d5:f0:34:45:8f:b2:91:7f:ea:22:e4:15:f0:34:
0a:0e:09:8b:c3:f6:56:64:bb:06:2e:3c:63:47:d0:e3:ee:4d:
e7:c8:0c:1c:44:7e:eb:f5:bc:b2:d4:7f:8c:b2:a6:55:ea:56:
2a:f9:a1:b9:de:f8:56:c7:aa:31:82:14:1c:4f:4b:2e:23:e6:
69:50:eb:68:59:ef:c1:ef:bd:f7:32:03:e0:ee:5e:83:d2:9f:
50:84:10:a4:5c:d4:a9:66:e3:c2:fb:8f:70:bd:85:35:ac:20:
4e:d9:90:8a:2c:fc:bd:e0:e3:cd:e9:06:af:a5:05:13:be:de:
37:e6:42:ef:35:7b:df:e4:3a:0a:c7:3c:d0:20:d5:bf:5f:71:
db:3c:89:8f:84:a1:a3:65:1e:de:6f:58:62:7d:54:87:03:85:
59:70:cb:8d:83:a8:dc:d0:5b:fc:e0:10:a4:ea:14:60:30:9d:
d7:7e:95:8e:e2:61:95:2e:2e:2c:7c:47:5c:8d:cd:80:24:3a:
2c:ce:28:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGtFphuxZxy9gf1p/wFEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYwNzI5MDkwMDQzWhcNMjYwNzMwMDkwMDQzWjAzMTEwLwYDVQQD
EyhkOGY2YTY5MzAzMjJjYmVkMDU5MmYxMGRhZWM0YmIwOTVjMGYxYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2GGYOmCaieY4roi3SSA0heRePe
FviLh3FADiq7VN8JfC4yPFf6QUip2hBe5YCSEliV0r4vbjH9Iuj2umZf1/WBQDVN
/TfdfvtqKGiylF/tYWGzgY7M8sqLPJAsCcsmPMhoNYx2745gJtbIhIJOr4o2hGEV
QSptBmkC4RWZz5hqbXnkcWu+DV0FyF/3ROdSJwqipyEwLM8qU2x3dLybioUKLqEi
/YXFg6pmrwxuCFKfp5V9Nw+vx4wzJMJqGs3KOFV6DDEF0blmPgl0710NudVgGnUC
UX9kwusa6G3UDzqltkOPNzo3tUjnrYZD2l6dGV2WJZU4+lSA2NfvsrcKEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj2ppMDIsvtBZLxDa7EuwlcDxqyMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWGbs+gq
/e7CXZLMk9LdMvFcwo62QHamARkm1GQbXV9Tfan7frirQcn2EzRAzaQbmB/onbda
jvXvItXwNEWPspF/6iLkFfA0Cg4Ji8P2VmS7Bi48Y0fQ4+5N58gMHER+6/W8stR/
jLKmVepWKvmhud74VseqMYIUHE9LLiPmaVDraFnvwe+99zID4O5eg9KfUIQQpFzU
qWbjwvuPcL2FNawgTtmQiiz8veDjzekGr6UFE77eN+ZC7zV73+Q6Csc80CDVv19x
2zyJj4Sho2Ue3m9YYn1UhwOFWXDLjYOo3NBb/OAQpOoUYDCd136VjuJhlS4uLHxH
XI3NgCQ6LM4oDQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:04 2026 by rpki-client