Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: DItweZ3nDmbhkijTmmWZpiaieNZA7q/78dc8Fg5Hk38=
Subject key identifier: C6:97:D8:EC:62:4E:EE:55:ED:08:C2:59:12:5F:90:D8:2A:9D:6B:51
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019D99CFF363FA48A3CA1D0E7B0C29DABB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 040F
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: /8w8lSI5pqkk06QxpWe5dLgco0oaBH8NSgpZUv2AsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f3:63:fa:48:a3:ca:1d:0e:7b:0c:29:da:bb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=c697d8ec624eee55ed08c259125f90d82a9d6b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:7b:44:40:67:11:a6:c4:0e:97:d4:da:fa:
00:98:34:94:d6:eb:d6:94:04:c5:8e:24:35:88:9d:
fa:b7:0e:2c:39:23:d5:5e:86:54:96:0e:a5:56:b5:
22:f4:c3:bd:68:40:de:e4:7a:b4:68:ba:eb:83:ed:
b9:ee:9d:27:ee:d2:06:31:21:7d:87:8e:61:38:12:
a5:38:c8:79:73:c2:c9:83:4a:c6:e9:1d:96:e3:f7:
ab:bf:b4:97:50:2f:2b:71:fe:29:cb:f0:76:50:ab:
9f:71:9f:8d:86:3b:03:97:75:9c:11:66:83:9f:d0:
49:13:89:24:23:09:57:0f:92:3a:05:73:f2:53:84:
1d:3f:77:9e:df:89:4d:d7:31:db:71:46:a5:9e:ea:
a4:ea:e1:a5:42:50:fa:43:e1:0a:4b:63:d6:2d:67:
52:80:3a:c1:38:a7:0a:6c:b3:83:2f:f5:2a:89:ce:
11:e4:7c:99:50:44:a7:32:96:9e:29:31:b4:a8:11:
2c:8d:0e:d6:3a:4b:06:bf:4d:92:4f:35:2a:3a:8f:
7a:76:80:5b:a6:9d:52:8b:39:66:d9:01:82:f1:27:
b7:79:9e:82:b0:8b:ec:f2:73:e8:fc:bb:6d:54:3a:
6f:23:7f:8a:f8:2f:23:b4:87:a3:63:8a:7e:6c:36:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:D8:EC:62:4E:EE:55:ED:08:C2:59:12:5F:90:D8:2A:9D:6B:51
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:11:6f:fb:e3:21:da:f4:14:66:b6:ec:e0:08:17:d2:a4:
e1:d2:da:8c:5e:42:97:0e:d3:54:9e:9c:cc:b4:ff:69:66:4f:
dd:26:54:10:64:a1:03:1d:81:16:42:f3:5c:2d:29:c4:da:04:
c7:df:f6:fb:f9:17:20:1d:11:cb:8e:5a:03:42:0e:1f:5a:3e:
b2:46:b7:f7:2f:a0:22:1f:7a:38:00:12:95:59:a4:21:fa:ba:
f7:61:5a:9f:38:6d:3e:71:0b:4f:7b:33:3c:fd:9e:62:7b:8b:
7d:e0:ec:75:18:74:b0:56:bd:e4:02:26:2a:61:fc:db:24:ab:
21:d0:f3:db:2b:7e:af:08:3a:ea:93:6e:ba:30:88:96:82:04:
41:3c:55:6a:20:04:2e:d9:74:1c:62:f0:de:7b:c4:58:e5:29:
08:1a:b8:33:5b:72:6f:fe:9e:c9:cf:6b:c0:fb:f7:1d:ce:01:
cb:32:e5:ab:11:c8:be:65:b5:66:5d:ac:ae:8c:b5:d9:b3:07:
aa:b6:9c:a0:54:2f:e1:a6:a3:41:c4:aa:95:fc:65:5d:06:7a:
4a:e6:18:64:64:08:93:6f:eb:bd:ad:15:a0:41:da:6c:98:c0:
a6:70:5c:21:b9:8a:1a:73:43:b5:70:3b:45:1b:9e:83:9e:a2:
a2:76:c5:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz/Nj+kijyh0Oewwp2rsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5
N2M1YzMwHhcNMjYwNDE3MDUwMDM1WhcNMjYwNDE4MDUwMDM1WjAzMTEwLwYDVQQD
EyhjNjk3ZDhlYzYyNGVlZTU1ZWQwOGMyNTkxMjVmOTBkODJhOWQ2YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dF7REBnEabEDpfU2voAmDSU1uvW
lATFjiQ1iJ36tw4sOSPVXoZUlg6lVrUi9MO9aEDe5Hq0aLrrg+257p0n7tIGMSF9
h45hOBKlOMh5c8LJg0rG6R2W4/erv7SXUC8rcf4py/B2UKufcZ+NhjsDl3WcEWaD
n9BJE4kkIwlXD5I6BXPyU4QdP3ee34lN1zHbcUalnuqk6uGlQlD6Q+EKS2PWLWdS
gDrBOKcKbLODL/Uqic4R5HyZUESnMpaeKTG0qBEsjQ7WOksGv02STzUqOo96doBb
pp1Sizlm2QGC8Se3eZ6CsIvs8nPo/LttVDpvI3+K+C8jtIejY4p+bDZFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaX2OxiTu5V7QjCWRJfkNgqnWtRMB8GA1UdIwQY
MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt
YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh
LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCERb/vj
Idr0FGa27OAIF9Kk4dLajF5Clw7TVJ6czLT/aWZP3SZUEGShAx2BFkLzXC0pxNoE
x9/2+/kXIB0Ry45aA0IOH1o+ska39y+gIh96OAASlVmkIfq692FanzhtPnELT3sz
PP2eYnuLfeDsdRh0sFa95AImKmH82ySrIdDz2yt+rwg66pNuujCIloIEQTxVaiAE
Ltl0HGLw3nvEWOUpCBq4M1tyb/6eyc9rwPv3Hc4ByzLlqxHIvmW1Zl2sroy12bMH
qracoFQv4aajQcSqlfxlXQZ6SuYYZGQIk2/rva0VoEHabJjApnBcIbmKGnNDtXA7
RRueg56ionbF9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:27 2026 by rpki-client