Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: aDoJKhXl0gfyZIOw2ll8EZNlj6W1Mf4Ony3shrGUGIs=
Subject key identifier: 2A:CB:B9:EB:8C:E7:73:2D:89:AD:27:D5:4B:BB:01:E1:8D:FC:92:A7
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019D999958BAF74CEE59AC06E4A5D68D9D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0587
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: op9C4C62OA5XPzKgutift7QXmHzZn3L04KFrcuqwtYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:58:ba:f7:4c:ee:59:ac:06:e4:a5:d6:8d:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=2acbb9eb8ce7732d89ad27d54bbb01e18dfc92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:53:7c:fb:c6:b5:fc:f7:d2:82:fc:e7:ed:
4a:bc:09:55:1c:3c:31:60:91:84:e3:5f:95:53:8b:
5b:f2:68:fc:49:1f:e7:a6:b7:f4:dc:42:92:6c:0f:
46:88:4d:7c:69:79:71:1c:1b:f2:e9:a2:b3:3e:1b:
33:6e:e0:23:54:38:c5:90:91:8d:d7:6f:44:8a:33:
4b:60:f3:f3:5a:cf:5e:9f:f0:56:dd:35:e1:89:7b:
d2:d3:17:12:64:b4:87:bf:9b:88:e4:10:8a:3a:50:
f4:27:fc:b3:20:65:19:c9:b8:9a:cf:73:7d:eb:c6:
06:f9:9a:72:c4:e2:e8:b6:69:83:b9:92:71:4b:76:
44:15:c0:46:0c:8a:51:84:68:92:45:16:70:9e:84:
5f:35:7d:7b:18:4d:5c:c4:5b:b1:e0:b2:a5:81:71:
38:bc:64:d6:03:a1:99:53:80:6f:99:0b:7f:a6:ea:
84:0b:89:da:f1:4f:a1:82:07:a7:72:5e:07:18:5d:
cd:b7:42:08:66:41:7b:78:e5:46:94:05:a9:eb:33:
93:f5:b0:bd:6a:e8:e5:7b:bb:e9:12:09:a2:72:e1:
ec:26:14:26:61:06:f4:56:bd:42:e5:e1:4e:f7:09:
22:54:d9:5a:a3:d6:29:04:8d:61:b0:67:d5:74:5f:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:B9:EB:8C:E7:73:2D:89:AD:27:D5:4B:BB:01:E1:8D:FC:92:A7
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:f9:14:c4:fa:a3:1a:7a:e8:10:8e:76:e1:8c:c2:08:af:
c4:46:9a:cd:1a:73:4c:86:0e:48:f2:77:51:f5:f4:5a:d4:95:
dc:c7:22:cf:bc:9e:88:88:1c:30:a8:12:d2:9a:50:13:96:2b:
6a:5c:60:f4:10:08:48:11:72:8d:26:6b:44:e1:57:9e:d0:b3:
7e:1e:a0:e5:1c:1c:5e:b8:dc:e2:9e:9e:21:34:87:21:2d:0d:
05:87:b5:0a:71:52:83:16:e7:99:b7:9c:2b:d2:93:8a:5b:a9:
3b:0d:df:0c:94:79:1f:17:bc:a9:6d:ba:00:75:4b:5e:2c:eb:
7f:c2:82:bb:0b:d8:53:01:cd:60:c3:ff:f9:25:77:d6:b9:08:
81:53:1d:ea:79:bf:30:cd:44:7b:55:8e:52:0d:8b:07:52:da:
2f:47:fe:c0:f8:a4:1d:fc:5f:12:91:fc:dd:95:ad:30:61:1a:
2c:85:40:65:68:fa:2a:ac:6f:2f:14:73:da:c0:05:73:08:66:
77:e1:9e:00:f4:02:21:20:c0:de:8e:8a:f8:56:a2:61:9a:16:
23:5a:18:f1:32:57:76:b2:f5:0f:0d:28:35:22:32:1c:b2:ad:
e6:5b:a3:c7:a2:ee:8c:57:27:d0:f9:db:90:9c:43:2e:69:9b:
da:63:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:22 2026 by rpki-client