
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: IXQTH7gRbV9ys14fWJqYNx3BTBORQ7gHXsIw/4mraKo=
Subject key identifier: FE:15:FC:FF:FD:4F:07:0C:80:0B:8D:5B:8A:A6:E3:78:04:77:88:AA
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 01A182D08327E6BD70AAAA45E83DB4A2DC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 121D
Signing time: Wed 28 Oct 2026 14:01:05 +0000
Manifest this update: Wed 28 Oct 2026 14:01:05 +0000
Manifest next update: Thu 29 Oct 2026 14:01:05 +0000
Files and hashes: 1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: mJ+2f3hqvaOocqGLP8bgwLdJH5VbXYt6DyoDCzDuxjQ=)
2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:83:27:e6:bd:70:aa:aa:45:e8:3d:b4:a2:dc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Oct 28 14:01:05 2026 GMT
Not After : Oct 29 14:01:05 2026 GMT
Subject: CN=fe15fcfffd4f070c800b8d5b8aa6e378047788aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:8e:69:62:ad:ae:23:c6:5f:57:ef:6e:06:
3c:09:24:e3:a7:8d:c4:a8:22:ca:66:69:6c:82:8e:
5f:aa:d2:d6:9d:b1:2d:b9:17:52:0e:25:ad:a1:cb:
03:e2:3c:44:20:99:90:93:4d:44:e5:6d:5f:cc:b7:
72:09:73:a7:11:56:b3:c1:67:38:5a:72:a3:27:10:
eb:22:6f:73:da:bc:9f:df:9f:b1:da:f1:e0:67:d1:
6c:89:e1:8e:f9:57:77:5d:c5:b4:77:af:46:b8:60:
08:01:99:39:f5:a5:7b:ee:1e:ea:f2:57:91:fa:bf:
36:7e:f6:5a:99:7b:c9:c4:2c:b2:31:c9:ce:13:de:
98:0a:4a:b2:8e:0f:94:bf:d3:0f:65:bf:d8:70:6d:
09:73:d9:b6:36:8c:ad:48:47:16:4b:15:1a:a8:48:
37:78:9e:14:1e:87:43:6f:c1:4c:f5:05:8b:d3:ef:
d1:cb:45:66:23:8c:80:b1:f5:57:28:bc:8a:b2:60:
61:04:f9:32:74:53:a0:dc:f3:67:fc:37:65:7a:86:
b9:01:7c:45:c9:71:a1:15:52:31:31:2f:d6:ab:4c:
92:0c:73:09:5a:fb:fc:9e:8c:51:dc:5b:5f:43:7c:
36:1a:13:d6:e2:48:50:44:50:e0:3e:11:30:82:4b:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:FC:FF:FD:4F:07:0C:80:0B:8D:5B:8A:A6:E3:78:04:77:88:AA
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:86:35:a0:61:42:7e:65:8a:4d:dd:a9:0b:8b:e7:47:e1:
ea:dd:4a:e1:d2:da:e7:1b:01:d9:56:02:39:64:47:3e:ba:ac:
16:c9:63:d8:e4:1b:12:a9:58:55:ac:32:09:6d:b1:5c:d3:ca:
38:8b:45:bb:6c:ed:27:af:8c:cd:3e:e6:e6:dd:43:0c:79:92:
9a:d4:8e:9b:7d:59:8a:6c:10:c6:d8:09:36:6e:54:d7:5a:da:
cf:fa:28:16:6a:a4:f0:e0:4e:6e:6e:ff:b6:4b:ff:ac:c5:c7:
67:fc:97:31:87:ff:6b:a0:3d:48:04:f9:21:fe:70:18:ee:ca:
8e:e5:8b:63:71:21:3c:d2:27:0f:ec:6e:b3:23:7b:29:0a:38:
4d:e8:b0:b3:1a:a3:80:90:a2:3b:ef:d6:60:b7:e7:39:d5:85:
5a:c8:2a:b5:1c:c9:d9:54:54:e6:dd:3e:c5:57:cb:04:73:56:
b4:56:68:bf:aa:05:dd:48:aa:d7:ba:e0:ab:e5:9e:cc:42:17:
05:1d:9f:b2:aa:80:0b:7f:86:3b:57:41:a3:b5:69:c1:cd:b1:
c8:34:f0:80:f3:97:a6:c4:f0:cb:56:1b:ad:2a:64:23:19:86:
c1:17:0d:f8:de:da:d9:32:87:03:44:e6:82:48:03:53:5e:4f:
23:53:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:57:43 2026 by rpki-client