Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: Tm4vEzn3DsxGlaNJz2PnjrkDsfXsFV5PjAsIrCv4Khg=
Subject key identifier: D5:41:1A:A8:B8:02:1C:6B:98:01:46:2F:69:47:CA:0A:F0:3E:00:B7
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019FAA19E5B7A856A53B51E3C7C9FDAF2B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1A23
Signing time: Tue 28 Jul 2026 19:00:51 +0000
Manifest this update: Tue 28 Jul 2026 19:00:51 +0000
Manifest next update: Wed 29 Jul 2026 19:00:51 +0000
Files and hashes: 1: 3CQPBvwQSy9_cPU5cEP39d2nObQ.roa (hash: mHzia9yQ9jVnKOVKmS0n7GXa6oQoerRG/9Ani8Cxtyw=)
2: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
3: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: pv+ZsQgaTDEWYHkN/UN9f9UJdHNfzNbIOAM/yDvtVbg=)
5: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
6: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:e5:b7:a8:56:a5:3b:51:e3:c7:c9:fd:af:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jul 28 19:00:51 2026 GMT
Not After : Jul 29 19:00:51 2026 GMT
Subject: CN=d5411aa8b8021c6b9801462f6947ca0af03e00b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:67:9d:fb:58:c4:75:b1:fc:b2:32:32:b4:
48:d9:ac:f0:e4:43:a2:91:33:a8:45:e9:71:75:c4:
97:41:74:81:ef:6b:17:18:be:c3:3a:e6:96:40:69:
fe:41:c1:a7:56:4c:f7:9f:7d:3c:c6:af:8a:ba:60:
26:dd:b2:3e:8f:92:68:b3:71:24:a2:59:42:52:b9:
c6:96:56:05:fa:77:48:48:1e:98:28:7b:1c:4d:8a:
75:b4:c8:cf:d7:fd:92:5a:82:94:4c:cd:77:80:91:
be:c7:83:0d:fd:77:92:cf:56:9a:87:a9:f1:4c:aa:
57:ae:f8:30:d6:c0:ce:79:45:ae:15:4f:1f:bf:d1:
cf:d2:8b:e6:6a:3d:7d:31:07:ef:87:e5:e4:26:6b:
19:56:9a:8c:bf:db:09:4a:76:a7:95:67:cb:9d:f1:
25:a5:a6:65:6a:37:00:22:cc:21:a9:5e:92:bf:f3:
81:7b:5e:62:70:28:85:b6:ad:e7:2a:91:5c:1e:4b:
c1:e9:16:ea:26:2f:1a:b0:04:f5:20:68:f7:d8:1e:
89:76:17:6b:70:a1:cc:d7:4f:70:85:3a:c6:db:10:
dd:56:04:ed:0a:b1:0d:24:14:f1:8f:98:9e:3c:39:
70:0f:40:a2:43:5a:1a:5b:3f:12:c6:50:53:93:0d:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:1A:A8:B8:02:1C:6B:98:01:46:2F:69:47:CA:0A:F0:3E:00:B7
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:05:ba:06:46:d4:54:92:9a:b5:ab:42:b3:db:2b:ba:7b:
99:b5:f2:76:21:05:40:5e:e1:cd:2e:7d:3f:de:0d:06:a5:53:
fd:e0:99:b9:54:98:12:ad:59:28:93:8a:d7:21:81:b6:1b:37:
30:76:d7:c9:ce:0b:88:70:8c:4f:e4:6f:b7:a2:da:07:ed:d3:
f8:22:e3:a0:f9:24:05:df:78:11:b9:f1:93:51:ac:77:65:0c:
0b:bc:4f:23:f2:33:86:93:79:c5:99:9f:35:f7:5b:f6:1c:e6:
0c:5b:bb:01:cc:20:ed:a0:7c:69:61:0c:32:85:50:56:e6:8b:
19:65:e8:7c:0b:39:4b:7f:85:cd:e0:0c:7e:43:52:ce:43:0f:
78:ce:5d:fa:6c:32:e7:88:8d:de:33:65:35:a5:10:44:18:5c:
8f:29:0b:2c:5f:04:f3:45:94:ef:b0:71:63:2e:77:c3:e9:06:
6e:1a:4c:2a:6d:6f:85:a2:fe:bf:3b:6e:73:e1:b4:07:df:83:
e4:3f:23:9b:52:e4:0d:43:2d:62:92:cd:27:bf:85:7e:92:01:
51:cd:b2:a5:6c:bd:f9:64:a1:9c:03:da:23:01:6a:d6:3d:f4:
cb:d3:2f:07:57:63:88:e9:9f:c4:a6:d1:57:4c:f5:6c:27:90:
88:2d:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:02 2026 by rpki-client