Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: aAYDd+PQcB0BQvzqL5vTNwQjxsYq0vDkqYJHmno2hh8=
Subject key identifier: E9:02:77:20:1B:76:EE:19:B5:FE:AA:DC:AB:44:24:EB:C9:CD:6F:68
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019CAA21A8C06BC27A96A23399F242E9383B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 050B
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: Fx02sEAOIsg9epIU8a7swEfLxMGYkhVaC2ePElBP//A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a8:c0:6b:c2:7a:96:a2:33:99:f2:42:e9:38:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=e90277201b76ee19b5feaadcab4424ebc9cd6f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:4c:02:4e:8f:de:ba:10:80:39:c1:05:fa:
fe:b8:84:13:d5:61:e3:36:20:b9:5c:15:92:11:38:
d4:95:46:b5:09:77:4d:26:b1:78:39:db:de:1f:75:
d0:15:d2:f1:f5:75:39:b8:78:cc:55:15:be:d6:0c:
9d:2d:18:47:dc:4a:a8:7e:18:0a:e2:5b:09:48:a2:
b8:b7:54:51:e4:3f:2b:8a:f7:0a:cb:c7:7f:2b:15:
28:1b:00:b5:02:f4:c7:2f:c9:4c:cb:fd:8f:0c:97:
4d:6c:c8:45:fc:29:42:e7:d2:e1:c3:f6:a4:8a:78:
4a:09:f0:88:ab:03:63:2b:bd:27:53:c3:53:d0:dc:
56:6d:2d:ff:62:a3:f2:ab:8f:a6:44:9a:8e:cf:81:
c5:36:cf:c5:61:0f:c9:85:b6:6f:b7:58:1a:db:68:
23:88:9d:40:29:3e:34:36:0c:36:e7:58:04:84:fb:
c5:e4:88:bc:78:2a:09:d7:8c:5a:60:da:69:13:81:
d1:54:3e:0d:d0:3c:c5:da:e7:f8:64:b1:aa:00:0a:
d4:25:cb:95:85:88:81:fe:5e:a2:4a:c9:b0:a2:1b:
a2:4d:3d:53:0d:cb:df:12:41:0f:5d:24:9a:8a:8d:
2a:ef:62:78:f8:8c:6a:b5:79:fe:1d:ac:f4:91:9d:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:77:20:1B:76:EE:19:B5:FE:AA:DC:AB:44:24:EB:C9:CD:6F:68
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:7e:5b:83:19:86:84:b9:3f:1d:25:5b:d5:b2:f8:66:59:
5a:2a:ec:8a:c4:64:08:54:d8:2c:fe:5a:2c:c5:4b:21:ae:1c:
61:a3:f4:90:19:a1:21:7b:34:12:ab:b2:68:40:f7:31:55:fc:
f1:da:66:2a:45:2c:65:56:49:70:12:d8:9c:6c:92:dc:54:d7:
9e:1c:30:94:00:cd:ff:ae:ce:21:d5:69:73:bd:63:fc:8c:7c:
fe:ef:51:1c:b9:11:07:05:ba:e9:b2:32:a9:7c:aa:2f:f7:9e:
29:f0:24:e8:72:c4:1e:2c:04:08:56:29:bd:93:af:13:7e:ef:
29:61:7c:d8:95:11:b7:16:12:58:33:75:fa:6e:2f:19:f4:fa:
1b:e9:82:06:2f:50:c3:f6:de:e1:ac:75:dc:60:8b:f8:de:b7:
f6:a7:14:92:ce:21:d0:4d:ce:ec:90:3f:42:14:92:4d:99:ea:
ef:d4:d0:4c:27:a6:50:06:d0:7e:18:fa:6b:f4:0c:52:3c:8b:
71:03:0a:28:2e:15:b4:1e:bc:8a:50:50:c1:49:26:f7:c7:45:
ff:f3:f8:86:04:01:14:85:40:a9:0e:b2:4b:cd:a9:2b:9f:b4:
7a:b8:f5:89:c8:5e:f4:2b:65:96:24:33:94:16:c2:4f:ec:46:
32:9b:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:03 2026 by rpki-client