Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: lFbET7kHjXp2FJWILbF4A6kJLQWJSE/iL/YH6iFdqdU=
Subject key identifier: 98:F6:6E:A3:8D:BE:61:EC:32:66:A2:23:0C:0B:D7:EC:2B:E6:48:80
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019CAE3560619161F666FA5DAABB389BD193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 0395
Signing time: Mon 02 Mar 2026 11:00:59 +0000
Manifest this update: Mon 02 Mar 2026 11:00:59 +0000
Manifest next update: Tue 03 Mar 2026 11:00:59 +0000
Files and hashes: 1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: d6RR6+xS0cVADin1J8OvmVT7aTevfbguavkM2Hs8zP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:60:61:91:61:f6:66:fa:5d:aa:bb:38:9b:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Mar 2 11:00:59 2026 GMT
Not After : Mar 3 11:00:59 2026 GMT
Subject: CN=98f66ea38dbe61ec3266a2230c0bd7ec2be64880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:4c:3f:f3:9f:c5:31:aa:1b:d0:8b:49:ac:
b8:05:63:60:58:9e:a5:f9:e9:86:c8:76:3e:4c:6b:
4a:6f:bc:56:03:42:e1:2c:e4:c2:f0:aa:0c:64:17:
70:5f:9b:27:cc:8c:02:33:73:3d:16:0a:b6:b5:51:
02:6f:eb:e3:43:a3:17:01:e2:d1:52:d6:f1:61:e9:
8a:de:3e:2a:6c:b7:4f:2e:f7:15:a7:c9:ba:f0:2f:
b0:17:d1:f5:78:c3:65:cc:32:2a:a3:27:e0:c7:4b:
26:44:c7:ce:57:60:b4:60:b6:f6:c3:a8:6a:d0:cd:
b1:96:cc:bc:8d:a3:4c:1e:98:aa:10:69:ae:25:03:
65:2e:4f:f1:5b:50:95:56:0f:34:fe:2c:92:37:ab:
aa:e9:01:d9:c6:7e:ce:4b:e4:83:84:f7:3c:c0:d4:
14:0c:73:1d:7b:b0:0f:3b:6a:8f:ae:ac:da:38:c0:
4e:82:69:73:cc:3c:d3:c8:36:c4:dd:61:06:b6:60:
3b:38:d9:c8:de:c7:af:48:80:05:c0:5f:34:c7:f4:
3c:39:18:5b:b9:9f:79:c7:ba:ec:d0:29:61:f7:a7:
d3:89:9d:dc:a5:c5:ef:26:ac:d0:f3:d6:71:56:28:
2f:f2:24:f2:7d:96:e3:e4:a5:a5:07:79:66:62:0c:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:6E:A3:8D:BE:61:EC:32:66:A2:23:0C:0B:D7:EC:2B:E6:48:80
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5a:00:4e:f5:37:e2:05:a8:c9:4f:82:cb:4a:85:92:71:74:
99:9b:b9:28:f2:b3:95:45:69:6a:1b:d3:a7:b8:2d:0e:56:af:
40:10:aa:9c:36:40:64:ba:07:79:77:f7:da:2b:9e:1c:12:17:
28:d8:8a:71:87:f5:c3:a3:8d:7f:42:b5:79:9f:d9:84:b0:60:
53:3e:26:d8:d1:06:73:f5:4c:65:9d:07:ee:24:3b:f7:93:61:
42:97:fd:c9:b4:6b:fe:1b:c2:13:42:cd:d5:c6:a0:ac:ca:23:
81:d2:39:0e:2b:c0:c6:00:c5:6c:df:db:0d:b5:d1:40:9d:c9:
39:d3:a6:68:63:a0:ff:f6:a4:ca:23:d9:be:8a:f4:2e:d9:f0:
8c:85:61:99:d5:84:73:b8:f5:90:c2:4b:7b:71:30:e4:11:76:
96:85:b8:2e:35:0a:95:9c:14:ce:68:ca:d9:6d:9a:79:16:f1:
4c:57:da:56:7f:7d:5f:6e:63:05:bd:6d:36:e5:7f:c0:88:ab:
35:e5:a3:cb:3e:f2:c6:8f:e6:76:7e:65:ee:2e:06:44:8a:dd:
56:77:97:5f:7e:6a:32:4f:eb:2f:b4:82:1d:ae:84:4d:20:a9:
cd:ef:a4:b8:7a:d3:1c:4f:27:27:49:6d:ce:39:c9:a9:72:9e:
aa:da:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:13 2026 by rpki-client