Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: VCLDtbwg5FDmKyR2GsjdgVMsVhM/GQZmWELdNAcPF/g=
Subject key identifier: 3A:6F:39:04:06:A5:83:C6:EB:ED:BF:1A:B7:3B:AD:98:A5:6B:71:51
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 019D9999963BA8DEF0C9FD8135F8AD080C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:12 +0000
Manifest this update: Fri 17 Apr 2026 04:01:12 +0000
Manifest next update: Sat 18 Apr 2026 04:01:12 +0000
Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: MsYloQN7xrX0zLUOrEOWdVtHU+qRV5to3e6qyAhHNTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:96:3b:a8:de:f0:c9:fd:81:35:f8:ad:08:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Apr 17 04:01:12 2026 GMT
Not After : Apr 18 04:01:12 2026 GMT
Subject: CN=3a6f390406a583c6ebedbf1ab73bad98a56b7151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:ee:b8:c2:2d:60:e5:84:dd:54:75:0d:df:
14:da:0c:8c:9a:91:1f:4b:5a:2d:ee:d3:82:67:a1:
a8:d7:66:74:6a:aa:39:f2:b3:76:38:48:4b:f8:90:
36:4c:a1:45:34:d0:24:93:85:81:da:a0:ff:94:31:
53:b2:58:48:37:ea:28:d0:97:73:0e:00:23:d5:5a:
fd:58:63:a8:9d:b9:2c:9b:6d:95:50:dd:d8:c3:a4:
96:12:13:6d:ee:1d:92:6b:56:b6:71:02:3b:d6:b1:
c6:76:5e:a0:a0:d1:d1:e9:30:ba:a1:aa:a5:7e:6b:
1a:27:79:2c:4a:cf:ae:75:99:fa:eb:80:ce:e4:61:
ba:56:bc:aa:ce:45:08:41:b9:fb:47:6b:26:7f:18:
2e:04:da:de:0e:7c:c2:27:32:61:61:f0:11:bd:b0:
9c:2f:35:a0:3d:87:71:6f:22:33:38:a3:30:4b:bd:
73:18:0d:23:e2:9c:5f:2c:0b:4e:f6:93:6e:11:03:
a7:61:cf:a3:d6:79:58:78:9c:18:ea:4a:c8:71:5e:
0c:1f:6f:b8:e1:ac:a8:8e:94:9e:6e:b4:8f:4e:dd:
a1:9a:ca:42:db:2a:b0:0b:a4:dd:71:dd:58:61:79:
5d:b8:f3:6a:6b:8e:28:5d:88:9b:78:61:1d:bf:fd:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:39:04:06:A5:83:C6:EB:ED:BF:1A:B7:3B:AD:98:A5:6B:71:51
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4c:ff:71:a0:5d:b7:3d:a7:17:4b:ba:da:ec:5e:2e:03:21:
35:91:aa:11:73:b0:a5:74:2d:d2:74:c6:09:33:00:85:3d:10:
25:3e:7e:02:11:56:85:46:4a:6c:1d:20:68:bf:8b:18:94:70:
ce:d0:0f:24:a7:42:12:01:bb:fb:6a:1a:c9:5b:7c:4e:3e:c5:
61:cd:39:c3:15:57:c5:c6:f1:44:5f:8b:82:dc:68:43:fb:58:
c0:d9:85:43:3b:c2:60:62:fd:82:c5:a4:7a:c9:75:c1:1a:6a:
91:4e:f7:9f:e9:97:a3:1c:79:53:17:4d:73:0d:0d:da:44:74:
1b:f3:2a:5c:8e:1f:75:db:82:8f:a5:2a:e7:7b:00:d7:5a:2a:
75:3b:9b:d8:f7:86:ad:37:5e:f3:6f:e5:3b:fe:a6:29:49:bb:
2b:8f:7f:07:17:80:5a:ff:99:b5:6b:5e:dd:fc:48:b2:0c:e8:
38:f2:4c:e1:40:45:5d:88:04:db:e4:79:36:5f:77:36:4e:50:
d5:e6:93:eb:53:9f:c8:0d:5f:d5:84:73:34:94:41:8c:30:d6:
b0:86:77:47:de:bd:a8:05:fc:22:dd:e6:80:6b:31:22:49:5c:
c1:11:8b:44:ea:37:44:4f:20:73:a8:5f:ec:c9:56:1f:5a:e4:
41:57:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:40 2026 by rpki-client