Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: X8j+TGQxIg82BPkBs/Ooo2yqxecR+kbAp+4s3Xz+d4s=
Subject key identifier: F1:82:89:62:5A:8F:4C:1B:64:98:6A:D2:2E:46:56:98:03:F4:7A:3C
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019FAD1A76EADA027AD19478E21576B449A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 069B
Signing time: Wed 29 Jul 2026 09:00:20 +0000
Manifest this update: Wed 29 Jul 2026 09:00:20 +0000
Manifest next update: Thu 30 Jul 2026 09:00:20 +0000
Files and hashes: 1: 92BWX1zbWyo4TMOfNb_tzSoWbCY.roa (hash: c0Yuqp+qbpUBM3UZdmZmEFvrAfboFIavdSOeFXW5BoI=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: YTCXPF6ZpObWzAPWt0AM81URNE5y7QGqnM3ufbesuHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:76:ea:da:02:7a:d1:94:78:e2:15:76:b4:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jul 29 09:00:20 2026 GMT
Not After : Jul 30 09:00:20 2026 GMT
Subject: CN=f18289625a8f4c1b64986ad22e46569803f47a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:90:9e:01:f5:38:64:73:4f:27:6c:df:cd:
5e:9c:46:ac:50:71:c3:24:a3:1d:de:1f:cb:45:88:
2a:83:68:77:db:34:f4:4b:c6:93:2e:be:d9:67:24:
82:35:db:8d:eb:ef:d8:ab:43:c5:08:c7:75:42:c7:
f7:e7:94:9e:a7:18:dd:4a:6e:d9:49:5b:b1:2c:99:
0e:0e:33:3a:6c:74:7b:9e:c7:2d:d2:02:61:97:ca:
f3:53:37:b6:9e:2e:17:39:7f:c8:b3:43:7e:af:9f:
6a:3f:02:af:c8:29:09:a8:ac:3a:ad:65:90:73:02:
8b:bf:c1:a3:68:52:01:dd:05:c7:67:38:7d:65:40:
88:fb:12:17:00:5c:60:06:b4:81:0c:a6:e7:6e:b0:
9e:d2:94:38:10:93:b8:d6:a7:17:66:46:7d:0b:ea:
ff:19:98:fd:7c:70:25:86:ba:94:18:d4:eb:57:d9:
b9:38:07:3c:62:04:0e:ba:66:b4:c6:44:fc:16:8c:
e2:32:c4:0d:64:d1:3e:d7:90:dc:21:07:62:c7:47:
21:81:11:53:ab:8d:cf:b4:dc:fd:d6:ee:d5:7b:fd:
69:b4:2f:32:67:e3:d7:fe:72:7b:a4:87:fe:89:03:
b8:d6:d8:1e:cc:ee:a0:34:3b:c9:3b:51:be:b1:41:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:82:89:62:5A:8F:4C:1B:64:98:6A:D2:2E:46:56:98:03:F4:7A:3C
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:9f:ce:bf:a5:22:80:6e:e9:a1:f2:a6:62:b4:3e:7b:93:
e5:7d:c2:88:b9:b8:7f:7d:6d:95:46:46:5c:40:1a:be:42:51:
f6:d6:3e:7e:03:2c:4e:4a:8c:e5:22:fd:2e:75:03:47:3c:5e:
2a:16:ef:92:dd:b8:44:73:ff:44:74:76:7b:a9:29:b6:5a:ca:
cf:d7:1b:0f:bc:a7:06:81:c6:a7:92:cf:49:66:93:ca:f6:5d:
40:bf:07:31:c0:14:cc:ce:0c:9f:71:34:00:65:19:cb:cc:07:
3e:ed:69:e0:bd:69:6d:9a:59:61:23:59:f7:86:d4:d8:54:c2:
c1:62:f8:ed:9c:56:30:f1:5b:88:f8:96:b3:b7:e1:02:5e:0c:
6b:c9:87:24:17:9e:80:7d:38:89:d1:bb:6d:52:89:b7:2c:87:
0b:3b:ce:cb:71:95:c0:09:73:4a:0c:a5:ae:fe:0b:94:eb:8d:
c6:0f:45:f1:a2:90:de:9a:c0:6a:7e:11:11:84:2d:ab:c0:f4:
95:f9:68:e4:7e:b7:62:2a:ac:13:f8:50:31:bd:6b:a3:e2:04:
0f:77:06:8e:b4:2d:2e:0f:94:a6:a5:b0:4a:fa:bb:1d:33:95:
fd:d3:ee:06:43:20:31:98:b7:59:0e:2d:19:c6:73:78:ec:f3:
a5:60:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:57 2026 by rpki-client