Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: /ymUiuWk26zXJWFG5f3of5viLpNoNPyV6cv+kTNZR2g=
Subject key identifier: 4E:B9:C5:D9:9A:C8:B5:89:48:4A:1A:4F:67:F5:37:67:C9:41:8D:5F
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019D9BF588C7C6C9BFE5CC87782F41AB6E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1858
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: qLtKBJ6EJHTdH5EW/WG0kJBOSW6GFy0w6CCGz9tuQ1U=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:88:c7:c6:c9:bf:e5:cc:87:78:2f:41:ab:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=4eb9c5d99ac8b589484a1a4f67f53767c9418d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:ea:c6:ad:a7:8e:8e:e7:21:2a:5f:03:75:
84:cd:82:75:4b:8b:61:73:9d:f5:5b:cd:2a:8a:13:
c5:1b:b7:29:97:fa:ab:13:88:86:a8:e0:c8:0b:d3:
fe:31:f6:0d:22:8a:77:89:a4:6f:fa:88:2e:04:91:
19:fb:32:b0:26:9e:3d:1b:de:9c:94:c4:43:ea:a1:
ef:8e:35:08:81:d3:67:36:36:5a:87:fb:34:7e:dd:
27:0c:7c:51:e8:b9:8c:60:06:52:56:a2:f0:ff:db:
9f:09:ae:fe:68:74:b3:3e:1a:31:4e:a7:30:6e:b4:
b2:21:e5:24:05:78:c4:2c:9c:d5:06:fe:95:80:52:
12:69:a8:b9:ef:40:77:f8:b5:0b:af:ce:00:75:3a:
c0:30:39:fc:ad:86:75:d1:56:cd:a1:0f:00:78:7c:
b3:94:4b:98:91:24:98:87:c0:dc:85:23:b2:ef:2e:
f0:12:3b:ff:0c:ad:e8:fa:d3:15:99:81:52:e6:5e:
89:61:f5:19:49:95:c9:f8:3f:df:18:ec:1c:0d:8f:
6d:d7:35:39:c6:54:f8:3b:6f:e5:1a:9f:dc:48:1e:
9a:20:1a:46:84:e1:7e:cc:11:0f:71:ef:fa:2e:bb:
bf:65:2e:f6:6c:07:46:8e:5c:e6:36:1e:2b:3d:43:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:C5:D9:9A:C8:B5:89:48:4A:1A:4F:67:F5:37:67:C9:41:8D:5F
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:91:0f:48:eb:ca:fc:bb:c8:f8:dd:91:0e:8f:9b:e9:d3:f8:
1a:51:e9:81:0a:5c:58:f4:b6:02:a7:d3:2b:c5:a1:9e:25:05:
fb:a9:3e:85:93:86:52:0a:e2:d3:54:cd:48:70:35:c2:f8:1c:
1c:31:45:09:86:0e:cf:6e:ee:0e:cf:aa:3b:97:8c:fa:2f:51:
fc:99:30:a1:9c:e7:b7:38:27:a2:b9:95:f7:ee:d5:8b:3d:de:
11:ca:95:0f:18:61:a5:8b:fb:38:d8:7a:1f:b7:2c:2f:63:83:
48:4f:c6:4f:be:3a:8e:5d:92:79:d0:15:91:48:51:d7:47:b3:
f1:39:68:c9:98:e1:c9:04:8f:91:55:ee:27:f1:4b:23:6b:81:
3b:9b:61:97:7f:9d:16:b2:83:ac:3a:63:18:a8:5d:62:ec:6d:
e7:91:5c:bc:81:32:00:b7:f9:2b:4d:8c:1e:55:b0:7e:e2:37:
db:5e:a2:e7:c8:03:32:80:db:b1:41:37:67:ed:0b:0d:73:9c:
31:b8:16:f5:ba:bb:11:6b:91:65:ff:2a:d5:0e:0d:89:dd:46:
88:e8:c6:e8:5d:d0:72:f1:f4:6c:b7:bc:a4:e7:ee:06:da:df:
8b:42:a8:d8:18:83:fe:94:b1:c3:89:51:70:4c:f4:a4:e1:52:
b7:7c:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:35 2026 by rpki-client