Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: uXzJwx+WlDMmO8X/1VAUgSfCfHkxZU9zZn0w45BKW98=
Subject key identifier: 61:5E:26:91:A1:D6:F2:BB:E7:39:7C:23:6A:E2:12:DA:4D:00:A5:14
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019CADFE9BC09803725AC0A40FB81E09D82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 10:01:10 +0000
Manifest this update: Mon 02 Mar 2026 10:01:10 +0000
Manifest next update: Tue 03 Mar 2026 10:01:10 +0000
Files and hashes: 1: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (hash: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk=)
2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: BptjZytDgZ6Y4U/C7pMUAluaOUHKKGUqyKKsAVRTLDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:9b:c0:98:03:72:5a:c0:a4:0f:b8:1e:09:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Mar 2 10:01:10 2026 GMT
Not After : Mar 3 10:01:10 2026 GMT
Subject: CN=615e2691a1d6f2bbe7397c236ae212da4d00a514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:41:9b:32:57:f7:3a:6e:e6:04:c2:cb:0d:
e3:45:da:6e:3a:5b:28:cf:92:b9:51:d7:95:b9:1a:
35:16:4a:20:34:60:1c:52:9a:01:13:6b:8e:7d:95:
68:03:14:2b:f1:0f:46:73:8a:0a:72:ad:86:dc:bf:
4c:43:c2:94:75:a8:ec:e3:e6:c7:56:59:19:a1:c3:
36:e4:37:b5:03:c9:48:8e:25:e0:51:50:88:0b:dd:
0f:ff:4c:bb:48:34:63:98:d6:80:0d:1f:6f:6d:dd:
68:f6:f1:60:b9:66:31:03:3f:b2:52:bf:d6:e1:35:
2a:51:44:93:23:01:93:fd:ef:72:3a:45:f0:8f:ab:
17:54:00:5a:7a:8b:aa:c7:a3:82:d1:17:d9:b3:ce:
51:9f:ab:af:12:e1:73:6b:56:91:70:9a:e3:e5:fb:
21:a4:60:d2:a2:cc:e3:61:80:5d:5b:95:a3:16:f4:
5a:35:c9:3d:11:75:21:2d:71:78:4b:3d:93:d8:7f:
73:b1:ec:a1:ba:a6:bf:7b:4a:e8:29:1d:9f:c6:66:
78:62:ab:48:dd:ee:79:c9:89:aa:e3:bd:44:3e:6c:
80:fd:eb:39:92:eb:c4:ae:56:7f:50:3b:b4:79:61:
fb:e3:79:74:22:94:37:6b:70:a4:d3:98:4c:4e:d3:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:26:91:A1:D6:F2:BB:E7:39:7C:23:6A:E2:12:DA:4D:00:A5:14
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:7c:d8:da:bd:82:dd:6b:c3:f6:08:28:d7:77:36:af:24:
b0:82:f3:f3:c1:2e:88:4a:0e:5f:f9:5e:15:48:c9:30:bf:c7:
ff:6c:8b:b0:cc:94:00:ae:bf:2f:1c:b7:fa:c0:5f:b9:8f:96:
72:c0:41:0c:c9:d0:7a:b9:c8:65:0b:7c:44:6b:0b:5e:fe:e7:
eb:3f:3e:bb:2e:41:0e:4c:90:eb:8c:9b:e6:01:f8:c3:cc:c7:
75:ba:ab:af:80:e9:2f:b8:58:17:86:4d:af:3d:dd:d0:3a:3d:
48:b1:28:fa:da:37:6b:81:c3:2f:bb:6b:d0:ed:61:90:6d:56:
fe:76:4b:61:28:22:0a:91:e1:64:ea:9b:47:76:20:6d:77:ad:
d0:db:79:dd:90:0b:cd:c5:a5:6f:f5:f0:ec:71:53:04:b3:44:
e9:e3:79:7a:e5:3b:67:cd:a1:45:04:ba:db:d3:5f:bb:4d:3d:
0e:d1:ff:64:3a:07:08:15:f5:ef:12:ee:f8:89:f7:81:d1:13:
14:fd:ef:78:1b:39:65:43:ab:41:24:07:01:b2:cb:9d:36:f6:
13:45:c0:8c:00:a7:44:33:c8:d2:16:2f:8e:2d:24:65:aa:e6:
f2:58:f7:0d:ec:e0:ad:84:a4:3c:f7:24:c2:47:e9:8a:4b:cb:
d2:9c:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:22 2026 by rpki-client