Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File: HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier: JPZTqEqGReKsz20w6/o6ZaLhZ9lXsbOiN6LbBI0Ov9Y=
Subject key identifier: 09:23:E9:F9:A9:3C:47:FF:7D:DE:17:A6:D3:F7:20:D6:F6:14:25:E8
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial: 019CADC8068BF65D5DD9A2D0A3A678AD0CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number: 0EDA
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: Aj338RhXkgr6UJwL54dYD6EL_uA.roa (hash: L6u8GmvhlsMn8ZhoCBvozLBVpXfmfa9tx+tUqGdETYw=)
2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: 3iffqYi29qyo/otnHEIioe0DwdlMNRbWQvsQ3HL0Zzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:06:8b:f6:5d:5d:d9:a2:d0:a3:a6:78:ad:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=0923e9f9a93c47ff7dde17a6d3f720d6f61425e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:0d:de:09:de:71:6c:f7:5e:15:9d:e7:91:
e4:96:9d:31:6e:ac:e2:54:c9:45:31:3a:59:06:a5:
f1:50:3e:87:70:ca:24:ab:4e:77:25:d4:cd:94:ca:
6d:d6:e0:29:f5:3c:1a:4a:0c:8d:93:5d:1f:63:b5:
8b:d7:4f:63:16:b9:8d:18:e0:7f:c2:47:e1:17:fb:
3f:75:ed:77:25:6a:f4:4f:73:d7:2b:6e:ac:36:94:
e3:37:7e:50:ed:c2:9b:8b:48:37:9f:27:a7:c5:4d:
95:ba:e8:72:f2:d7:c2:6b:fc:c3:bb:0c:10:2e:90:
7f:d3:8c:d7:ef:00:4b:0a:91:11:1b:52:d2:d4:d9:
5c:37:37:74:fc:d6:56:3a:bf:43:70:ce:75:98:07:
71:f1:8c:d2:4a:68:c3:1b:8e:e1:36:c2:32:02:9f:
70:95:92:99:94:93:b0:fc:d2:2f:c7:11:7e:db:20:
72:ba:f2:c2:c9:ba:d3:ea:55:19:b2:24:74:49:9f:
83:28:a0:e5:fa:b9:1c:8e:1a:37:e6:71:c3:25:8f:
4a:30:40:33:4b:5e:40:18:ce:c6:ae:60:49:aa:7f:
04:f8:b6:6c:60:02:80:77:94:d6:fe:47:53:2f:d7:
42:84:0b:94:2c:31:ef:4b:e7:58:f2:4a:dd:71:d3:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:E9:F9:A9:3C:47:FF:7D:DE:17:A6:D3:F7:20:D6:F6:14:25:E8
X509v3 Authority Key Identifier:
keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:96:80:0e:a2:26:61:de:73:f1:b1:a8:9f:96:c8:5f:da:
de:19:f3:9d:e8:ce:f0:bf:c8:a6:e3:2a:81:66:a2:3e:71:e6:
0c:d4:8f:c6:0b:f7:9d:bb:d3:ca:ea:02:0c:e0:22:c0:fe:18:
fd:a6:1b:60:45:6a:44:9a:ae:8f:b7:18:8b:e1:42:5b:16:a0:
7d:d0:b2:d2:57:5d:c7:46:5a:f6:fd:cb:c9:d6:d0:dc:bf:15:
c9:f0:30:67:eb:82:f2:91:ca:c6:56:74:2b:80:73:bf:73:46:
8b:78:3b:63:ba:8a:40:f3:ca:65:a2:09:4b:aa:32:5d:e5:8d:
fc:7d:ac:ab:21:ad:f6:9e:5f:8a:7f:be:b2:df:31:4c:9a:8f:
9c:76:f4:e5:2b:08:bf:20:4f:6c:73:89:86:03:59:7c:b6:5a:
77:f0:0d:c5:56:8a:8d:b5:7d:10:c8:b7:7f:ff:46:10:77:68:
0b:73:4c:1b:4d:d9:d9:21:5b:b5:b2:c8:a0:0c:22:e7:5e:ef:
54:e7:41:97:e5:92:26:4d:ec:5a:b7:68:12:a0:b7:cb:26:a5:
b8:e8:8a:72:f1:2d:3d:1a:db:f7:eb:0a:d6:4f:6a:1e:b9:3f:
8e:b2:02:a8:f3:fb:89:e7:0d:20:c5:88:a4:a9:b0:e4:33:17:
6c:8b:1c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyAaL9l1d2aLQo6Z4rQzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODE5OTBhOGE4Y2NkN2U4YTRmNDhiYjc2OGYzNWQyNjk5
Yjc4YjIwHhcNMjYwMzAyMDkwMTMzWhcNMjYwMzAzMDkwMTMzWjAzMTEwLwYDVQQD
EygwOTIzZTlmOWE5M2M0N2ZmN2RkZTE3YTZkM2Y3MjBkNmY2MTQyNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/4N3gnecWz3XhWd55Hklp0xbqzi
VMlFMTpZBqXxUD6HcMokq053JdTNlMpt1uAp9TwaSgyNk10fY7WL109jFrmNGOB/
wkfhF/s/de13JWr0T3PXK26sNpTjN35Q7cKbi0g3nyenxU2Vuuhy8tfCa/zDuwwQ
LpB/04zX7wBLCpERG1LS1NlcNzd0/NZWOr9DcM51mAdx8YzSSmjDG47hNsIyAp9w
lZKZlJOw/NIvxxF+2yByuvLCybrT6lUZsiR0SZ+DKKDl+rkcjho35nHDJY9KMEAz
S15AGM7GrmBJqn8E+LZsYAKAd5TW/kdTL9dChAuULDHvS+dY8krdcdMWJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkj6fmpPEf/fd4XptP3INb2FCXoMB8GA1UdIwQY
MBaAFB6BmQqKjM1+ik9Iu3aPNdJpm3iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEt
NmYxNWE2ZWFkM2NjLzEvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEtNmYxNWE2ZWFkM2Nj
LzEvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIGWgA6i
JmHec/GxqJ+WyF/a3hnznejO8L/IpuMqgWaiPnHmDNSPxgv3nbvTyuoCDOAiwP4Y
/aYbYEVqRJquj7cYi+FCWxagfdCy0lddx0Za9v3LydbQ3L8VyfAwZ+uC8pHKxlZ0
K4Bzv3NGi3g7Y7qKQPPKZaIJS6oyXeWN/H2sqyGt9p5fin++st8xTJqPnHb05SsI
vyBPbHOJhgNZfLZad/ANxVaKjbV9EMi3f/9GEHdoC3NMG03Z2SFbtbLIoAwi517v
VOdBl+WSJk3sWrdoEqC3yyaluOiKcvEtPRrb9+sK1k9qHrk/jrICqPP7iecNIMWI
pKmw5DMXbIscdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:09 2026 by rpki-client