Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: DI0rc724vwU8bPqicyXWIedDOUwI99ppOrw3KH1q+XU=
Subject key identifier: D5:88:31:CC:1A:66:61:FA:7A:AE:D4:3C:43:E2:66:03:A2:E2:72:2B
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01A0C9A223E101B51A602E7F7365D9918B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1AB8
Signing time: Tue 22 Sep 2026 15:00:41 +0000
Manifest this update: Tue 22 Sep 2026 15:00:41 +0000
Manifest next update: Wed 23 Sep 2026 15:00:41 +0000
Files and hashes: 1: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
2: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: kfE51UqQYzzs/puO3E9GI+XMt/wLuqyaCJ80BppQQvg=)
4: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
5: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
6: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
7: ltWQIbVSsWD0YaRvvL1lUUftqVM.roa (hash: IKV8fDWgcwQI5DFcwu0bq2ldD2bFd7MscF59oggxfFA=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:23:e1:01:b5:1a:60:2e:7f:73:65:d9:91:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Sep 22 15:00:41 2026 GMT
Not After : Sep 23 15:00:41 2026 GMT
Subject: CN=d58831cc1a6661fa7aaed43c43e26603a2e2722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:09:3b:c3:7b:5b:13:e2:f8:f0:e5:44:bd:
95:b1:e0:ec:f0:0e:eb:a8:85:73:64:67:01:d1:65:
20:24:69:dc:3f:ff:3b:e7:ef:f9:80:02:19:6b:31:
ef:b0:cf:c3:77:a2:f3:37:f6:ff:d2:b3:86:6e:ae:
21:4a:c9:d3:81:28:27:c2:6f:05:08:39:ab:a4:f8:
4d:24:b9:45:0c:0b:54:21:c9:7b:c1:d5:9c:ec:75:
4b:2b:f4:20:fa:6e:b6:5f:58:83:3c:c0:ca:9c:52:
52:40:b5:de:10:6e:94:2b:ae:d0:1e:a1:59:f3:50:
81:f6:40:24:0b:e4:70:1a:07:f8:c4:46:4b:47:ce:
b8:2c:68:7c:3a:19:53:03:cc:d3:50:ea:12:5a:a2:
5d:ba:e1:7a:a0:2d:76:9e:51:fe:f9:ec:9d:4a:30:
df:9e:ad:5e:46:1b:76:2a:c4:20:a7:77:b6:f5:7b:
1b:b7:31:7f:ef:73:4a:11:22:37:9b:05:46:95:0f:
d9:e9:d5:5d:56:f4:5d:71:90:12:dd:c3:4a:df:87:
fc:2c:a4:0f:7f:b8:30:2d:35:37:ef:11:28:b5:e6:
e5:21:af:f7:48:7f:c6:1b:93:1b:e2:12:8c:d1:19:
dc:50:67:39:27:11:14:75:bf:fa:2b:c8:f9:96:11:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:31:CC:1A:66:61:FA:7A:AE:D4:3C:43:E2:66:03:A2:E2:72:2B
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:92:1c:3d:b1:22:8a:8a:f5:2e:fd:ca:c6:8a:bf:89:5b:4b:
db:1c:e7:ac:72:87:69:07:fd:ba:b9:36:da:c7:fa:48:2c:82:
14:f7:a3:11:1f:e9:55:60:d5:00:70:a0:55:84:90:20:00:1d:
c3:1b:83:16:21:52:f7:8f:91:bc:88:a2:36:ca:ce:ff:d4:d4:
39:3c:a8:b5:d3:fa:2f:98:29:2c:53:3b:6d:d0:db:d5:b3:8f:
a3:80:8e:54:aa:84:58:4c:1d:59:a5:99:c8:69:19:6d:cb:18:
a1:10:0a:26:4d:c4:37:a4:68:fa:96:bd:50:0d:e2:65:89:d1:
aa:aa:36:e4:5d:08:9a:87:2c:fe:dd:5e:2f:81:d7:99:1e:df:
96:e4:c5:9b:b5:68:7e:04:ad:b3:a2:ab:10:e0:3e:fe:d4:09:
d6:7a:37:98:8e:26:ce:5e:0e:a2:4e:9a:e6:01:c8:ca:b6:9f:
15:31:64:62:51:d7:f5:93:ea:b4:6f:fc:a8:bc:11:b8:de:61:
fa:ff:6e:fa:e6:38:58:29:40:a4:17:e6:38:5a:3f:4f:ee:76:
60:0e:64:7a:92:a9:79:4e:0d:f8:5c:a6:f7:4a:48:74:96:6d:
1e:69:8f:67:09:15:06:19:b3:3c:3c:ba:7f:54:17:ab:ad:d6:
60:d6:0f:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoiPhAbUaYC5/c2XZkYthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjYwOTIyMTUwMDQxWhcNMjYwOTIzMTUwMDQxWjAzMTEwLwYDVQQD
EyhkNTg4MzFjYzFhNjY2MWZhN2FhZWQ0M2M0M2UyNjYwM2EyZTI3MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZkJO8N7WxPi+PDlRL2VseDs8A7r
qIVzZGcB0WUgJGncP/875+/5gAIZazHvsM/Dd6LzN/b/0rOGbq4hSsnTgSgnwm8F
CDmrpPhNJLlFDAtUIcl7wdWc7HVLK/Qg+m62X1iDPMDKnFJSQLXeEG6UK67QHqFZ
81CB9kAkC+RwGgf4xEZLR864LGh8OhlTA8zTUOoSWqJduuF6oC12nlH++eydSjDf
nq1eRht2KsQgp3e29XsbtzF/73NKESI3mwVGlQ/Z6dVdVvRdcZAS3cNK34f8LKQP
f7gwLTU37xEoteblIa/3SH/GG5Mb4hKM0RncUGc5JxEUdb/6K8j5lhF+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWIMcwaZmH6eq7UPEPiZgOi4nIrMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5IcPbEi
ior1Lv3Kxoq/iVtL2xznrHKHaQf9urk22sf6SCyCFPejER/pVWDVAHCgVYSQIAAd
wxuDFiFS94+RvIiiNsrO/9TUOTyotdP6L5gpLFM7bdDb1bOPo4COVKqEWEwdWaWZ
yGkZbcsYoRAKJk3EN6Ro+pa9UA3iZYnRqqo25F0Imocs/t1eL4HXmR7fluTFm7Vo
fgSts6KrEOA+/tQJ1no3mI4mzl4Ook6a5gHIyrafFTFkYlHX9ZPqtG/8qLwRuN5h
+v9u+uY4WClApBfmOFo/T+52YA5kepKpeU4N+Fym90pIdJZtHmmPZwkVBhmzPDy6
f1QXq63WYNYPrw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:48:33 2026 by rpki-client