Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: eS4BLhnyh2Wbu8JoD7ztbpu9KoCjzr2x4ZoJQgtqB1s=
Subject key identifier: 87:0D:05:F8:FB:32:E7:A9:00:C3:F4:CF:2F:90:D0:D9:FB:46:EB:64
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019D9C2CD79B0E7523EF43CFA489F180E430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1910
Signing time: Fri 17 Apr 2026 16:01:17 +0000
Manifest this update: Fri 17 Apr 2026 16:01:17 +0000
Manifest next update: Sat 18 Apr 2026 16:01:17 +0000
Files and hashes: 1: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
2: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: vxwpQ3lqIy1LhUR7UY+E31Xduns/nkAihu8vUqgg5ik=)
4: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
5: ZL5qjgsi9BPQMmwEJV-5ph7nrUc.roa (hash: 607Q8N23kCOFsq5QHsq+U3v+0vaGqEVou9ctP4NZ2ac=)
6: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d7:9b:0e:75:23:ef:43:cf:a4:89:f1:80:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Apr 17 16:01:17 2026 GMT
Not After : Apr 18 16:01:17 2026 GMT
Subject: CN=870d05f8fb32e7a900c3f4cf2f90d0d9fb46eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:42:b5:58:0a:ae:b7:41:40:23:aa:eb:b1:
cf:5b:41:5f:0f:b3:e1:6a:d8:d9:6b:42:bb:9e:80:
ca:c0:fe:0b:e1:c1:fc:b7:6f:51:40:05:13:04:be:
d7:43:06:c5:e4:31:a7:9c:8c:e4:fd:53:dd:73:a2:
74:2d:9d:32:ab:1b:9f:98:0f:3e:33:fe:ef:87:69:
40:d1:ce:62:dd:df:5e:0c:76:9f:94:68:6b:60:70:
8c:d6:ab:49:e8:eb:44:06:7b:3a:a3:28:a3:1c:28:
1a:9c:ad:c0:74:1d:c0:98:ca:12:e9:31:d9:17:be:
81:3e:db:70:2b:7d:09:50:a4:9e:3f:c7:20:f5:23:
cb:0b:52:7b:20:67:db:eb:6f:80:06:ce:9c:9a:cf:
ae:60:05:6c:56:8f:de:eb:58:1b:0e:5e:0e:57:63:
40:79:16:8d:00:bb:e7:a8:1a:21:d0:75:ed:56:d4:
74:ac:4b:b9:c4:e3:41:08:f4:cb:35:9a:07:a4:59:
c5:0d:54:67:ae:b5:a7:57:b5:db:8c:73:de:58:e0:
cf:b8:e6:41:46:b9:f2:d0:98:7f:70:4f:62:6e:f8:
90:ca:84:a5:02:63:fe:be:57:b5:b5:fb:85:0f:8b:
a5:f3:84:58:68:b8:bf:3b:1f:a8:0f:7b:da:32:cf:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:05:F8:FB:32:E7:A9:00:C3:F4:CF:2F:90:D0:D9:FB:46:EB:64
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:8b:6c:95:15:21:fa:23:90:39:7b:9b:3b:a8:52:25:16:
50:24:96:d0:fb:84:07:f8:4c:a9:5b:00:d4:7a:f3:61:01:ca:
05:3c:0c:e7:a9:21:e2:75:06:08:bc:6f:db:0c:2f:e1:46:10:
94:49:57:06:d3:24:fc:55:7a:06:1a:d9:79:0f:6f:95:b9:79:
f6:3b:23:a3:c6:ee:18:ff:90:94:5d:c6:e4:e2:4f:0f:03:c4:
cf:9c:79:d8:fd:f6:e3:8c:16:de:4d:fb:70:5e:47:20:fb:41:
e5:b7:3c:c1:95:96:f4:b9:9e:6c:23:73:7b:1f:7a:6c:08:fb:
83:13:54:e5:d2:bc:d8:78:42:05:56:6b:42:62:5e:32:73:b7:
5b:e3:e2:c7:58:57:c9:19:09:ec:9a:bb:af:3e:bc:bb:46:08:
76:f6:12:f1:f4:bb:08:4b:e2:2b:8b:64:68:d9:64:61:94:2c:
77:5f:6d:27:0e:36:64:eb:48:ba:60:d8:a7:f9:f4:f0:75:16:
49:3f:64:8c:85:ae:d9:c5:7d:c8:20:30:d2:6b:4c:6c:8e:1d:
71:92:fb:24:b7:15:4b:d7:71:df:c7:53:93:2b:5f:1e:69:e7:
d9:77:b2:27:fa:6f:70:97:01:59:54:e4:31:05:1e:12:a0:f7:
54:ab:30:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLNebDnUj70PPpInxgOQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjYwNDE3MTYwMTE3WhcNMjYwNDE4MTYwMTE3WjAzMTEwLwYDVQQD
Eyg4NzBkMDVmOGZiMzJlN2E5MDBjM2Y0Y2YyZjkwZDBkOWZiNDZlYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApctCtVgKrrdBQCOq67HPW0FfD7Ph
atjZa0K7noDKwP4L4cH8t29RQAUTBL7XQwbF5DGnnIzk/VPdc6J0LZ0yqxufmA8+
M/7vh2lA0c5i3d9eDHaflGhrYHCM1qtJ6OtEBns6oyijHCganK3AdB3AmMoS6THZ
F76BPttwK30JUKSeP8cg9SPLC1J7IGfb62+ABs6cms+uYAVsVo/e61gbDl4OV2NA
eRaNALvnqBoh0HXtVtR0rEu5xONBCPTLNZoHpFnFDVRnrrWnV7XbjHPeWODPuOZB
Rrny0Jh/cE9ibviQyoSlAmP+vle1tfuFD4ul84RYaLi/Ox+oD3vaMs/xlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcNBfj7MuepAMP0zy+Q0Nn7RutkMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7yLbJUV
IfojkDl7mzuoUiUWUCSW0PuEB/hMqVsA1HrzYQHKBTwM56kh4nUGCLxv2wwv4UYQ
lElXBtMk/FV6BhrZeQ9vlbl59jsjo8buGP+QlF3G5OJPDwPEz5x52P3244wW3k37
cF5HIPtB5bc8wZWW9LmebCNzex96bAj7gxNU5dK82HhCBVZrQmJeMnO3W+Pix1hX
yRkJ7Jq7rz68u0YIdvYS8fS7CEviK4tkaNlkYZQsd19tJw42ZOtIumDYp/n08HUW
ST9kjIWu2cV9yCAw0mtMbI4dcZL7JLcVS9dx38dTkytfHmnn2XeyJ/pvcJcBWVTk
MQUeEqD3VKsw6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:40 2026 by rpki-client