Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: J4uC7lSo4DRwi4HRmJ85NgOeXCa+HIQsKst/vsEbu6A=
Subject key identifier: EF:EC:09:32:9B:C3:39:91:FE:A3:75:30:DA:96:A9:67:3E:B3:08:D5
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 01A0C2C3DD9DA1CAE7D215A261DAE286B098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 07:00:11 +0000
Manifest this update: Mon 21 Sep 2026 07:00:11 +0000
Manifest next update: Tue 22 Sep 2026 07:00:11 +0000
Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: HnqhQkCgErfwcsZIoCzsAZFxwF5JqHs/07UQUW7arDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:dd:9d:a1:ca:e7:d2:15:a2:61:da:e2:86:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Sep 21 07:00:11 2026 GMT
Not After : Sep 22 07:00:11 2026 GMT
Subject: CN=efec09329bc33991fea37530da96a9673eb308d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:9a:cd:a8:a7:ad:3d:01:26:b3:59:eb:56:
e6:8f:d0:29:84:3d:30:4d:15:65:db:af:90:aa:bf:
a9:67:5a:95:ca:9b:ba:2e:64:1d:45:c7:8b:6f:27:
78:eb:dd:57:53:18:8b:8a:9a:fe:cf:12:3c:5a:2f:
72:42:11:58:6e:c7:90:48:a1:95:3a:fa:29:bb:e8:
a6:f3:6e:92:60:22:ed:57:79:f1:72:69:34:e2:d5:
07:da:02:52:9b:c1:29:b4:53:f5:af:ef:26:1e:b8:
83:fd:80:c8:e6:a5:ea:00:4d:6a:d3:c6:c2:0c:c4:
d0:62:96:ad:f4:c0:3a:0e:20:90:ba:54:43:6e:d9:
a1:5d:7f:c0:27:57:70:31:fc:74:e6:81:4c:9d:b8:
db:be:c4:6f:5e:e8:64:e6:53:d2:c3:af:81:03:27:
9b:9a:c7:b4:e9:3f:1e:65:89:a6:4f:fb:e2:99:c6:
a3:b6:fe:ed:93:69:1a:6d:25:1c:c0:fc:ab:75:a0:
fb:11:b6:72:de:b8:8c:31:0e:6f:14:58:48:6a:09:
f6:cf:bb:61:c7:7c:f3:a7:60:75:55:6b:f1:79:b1:
14:2f:fb:10:58:b7:d8:85:a7:77:53:5f:fd:90:a9:
b1:1c:06:21:b5:1c:b4:25:10:d7:ed:d8:43:01:6e:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:09:32:9B:C3:39:91:FE:A3:75:30:DA:96:A9:67:3E:B3:08:D5
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:11:62:ca:57:00:f9:bf:fb:ea:21:09:0f:06:11:92:79:7f:
e9:70:63:f8:f2:fb:f0:a2:d2:f1:14:a7:98:92:36:b7:cc:d4:
d3:3f:68:0f:b7:f6:1a:75:1d:2d:22:d9:ff:5a:5d:d7:19:11:
56:6c:06:1e:ec:c6:d7:da:d0:0f:80:6a:b8:8f:cc:eb:a0:84:
67:f8:78:9e:50:35:de:d2:52:5b:b4:88:6e:bd:56:0d:77:23:
f8:05:7a:75:85:2c:2f:3c:2f:a9:e3:d9:8a:fd:b9:49:79:19:
01:a2:32:f5:d4:9a:00:bb:a7:e5:07:ee:ce:78:25:37:6c:aa:
08:b2:b2:e8:60:a4:f1:0d:ea:1a:3f:7a:c1:ea:c8:a6:15:07:
08:bb:97:f4:ff:bf:37:3b:52:be:e7:7e:0c:04:7b:76:c1:2b:
27:0c:98:7b:9b:d4:9a:d4:aa:2d:35:09:3c:a6:83:00:2a:7a:
67:4c:c6:6e:b5:a6:09:45:49:d6:f8:14:cb:64:98:2a:01:c6:
34:4e:51:0e:88:1c:01:44:57:41:aa:87:c9:47:7b:49:86:21:
aa:cb:a3:ea:a6:56:2e:4a:24:dd:d9:f1:dd:41:6f:7e:83:f5:
fd:ed:90:b9:7b:01:1c:a8:90:06:91:94:32:01:68:fc:cd:18:
12:63:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:39:47 2026 by rpki-client