Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: UJsQ472DfMqexnh1kCAabjF74qVY0FpL29rJaGJ7EXU=
Subject key identifier: D5:97:2B:F9:89:17:4E:D5:58:3B:7A:9C:2C:D2:B5:50:13:B3:D7:22
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019FAAF57178F065E239B5FB7B09576954E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 0521
Signing time: Tue 28 Jul 2026 23:00:39 +0000
Manifest this update: Tue 28 Jul 2026 23:00:39 +0000
Manifest next update: Wed 29 Jul 2026 23:00:39 +0000
Files and hashes: 1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: JbRTCo9Pq/9aoiVr/LkvnNkYS+8pDDNtUM2+3CTqbX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:71:78:f0:65:e2:39:b5:fb:7b:09:57:69:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Jul 28 23:00:39 2026 GMT
Not After : Jul 29 23:00:39 2026 GMT
Subject: CN=d5972bf989174ed5583b7a9c2cd2b55013b3d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:aa:ec:81:c7:fa:53:13:61:da:6a:e0:bf:
0f:61:ab:41:8e:c0:4f:65:15:b2:4a:86:d7:97:1f:
2a:cf:92:17:d9:81:90:02:64:66:04:bf:a5:aa:62:
fa:75:45:b2:6d:ce:7a:25:34:30:81:b6:81:9e:a5:
95:9f:f4:94:3d:70:a3:55:71:52:a1:f1:10:c7:4b:
ef:bf:b6:21:24:e3:d4:29:15:7c:ab:e9:64:d7:93:
46:5c:dc:1b:45:5b:79:28:b3:cf:07:f3:a7:c7:87:
ad:e2:88:34:3d:1c:d0:bf:9a:7e:c2:44:82:fb:b7:
f0:91:ff:c1:bf:7c:25:cf:64:c7:6a:d7:48:54:d9:
18:87:49:10:12:15:d3:bb:84:89:59:35:d1:ff:97:
be:3b:ba:42:a0:84:66:20:71:5a:56:e6:61:96:54:
0e:08:80:92:a6:44:df:2b:70:00:35:66:29:97:1d:
d1:ac:dc:f4:bd:c6:7c:ca:7c:64:15:04:e8:2f:94:
e9:5c:6b:94:10:e6:90:a8:0f:a5:47:7d:6a:8a:dd:
0f:e8:90:8c:7b:83:cf:60:f3:10:a5:8f:5b:b9:88:
38:14:8f:b0:05:fd:fa:ac:7a:61:ab:b9:c6:33:0c:
df:50:01:ad:c3:73:b1:0f:77:7c:54:ee:2d:fc:f8:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:97:2B:F9:89:17:4E:D5:58:3B:7A:9C:2C:D2:B5:50:13:B3:D7:22
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d0:9a:f6:d8:f9:db:5e:24:f6:37:3d:fb:ec:a8:fe:e8:ef:
68:12:9b:49:9a:d4:72:a5:83:cd:c8:2e:7e:4d:97:99:ca:62:
e3:ec:43:6a:5c:c2:7f:0c:14:81:9e:65:a7:10:b3:eb:69:2a:
ec:65:c7:a7:dc:fd:1e:d1:47:b3:f6:25:c0:8d:8e:0e:68:f2:
83:a3:0d:6c:b3:b7:8b:e7:00:8c:04:be:0f:11:ed:cf:4b:09:
68:74:f3:0e:86:fa:08:dc:82:06:63:a6:ed:c7:a9:f1:ce:8c:
0a:3a:83:21:c5:bc:b8:c1:1d:68:a7:2f:e8:92:4c:1f:f3:e1:
1e:97:b8:a9:c4:dd:c0:19:82:fd:f9:df:7e:ff:28:cc:1f:62:
25:43:ca:87:6e:7f:50:4e:73:27:5a:88:97:77:5a:99:07:8f:
90:06:72:56:27:30:3d:e5:ba:39:fa:cc:f8:19:42:64:79:2b:
d6:64:28:a7:fe:0d:07:6a:6a:d4:00:8e:33:e3:00:63:ec:47:
9a:95:11:92:4d:17:d4:c3:fb:3f:1a:f4:e2:70:ef:e8:b2:a9:
24:99:c9:2f:f4:be:ed:a0:88:1d:d5:cc:29:e8:2d:3b:66:67:
8c:1c:8c:f8:b3:3a:ab:15:18:9a:02:6f:a3:09:17:b7:41:8a:
c6:d0:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:23 2026 by rpki-client