Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: Lr0aFNzdJen5jhl4fpYNMzF1NVeeOqoJv21XCY6mxFE=
Subject key identifier: F4:17:6D:D5:4C:3B:46:E8:3D:78:F8:CE:3B:F9:01:C2:65:87:6F:B5
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 019D37F73822973BD099FC1ECCE07060DC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0FE4
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: A+jO1Ej9SrwXJ54LZ8SEq/nc7phafuTj0p2sEmiOkJ0=)
2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:38:22:97:3b:d0:99:fc:1e:cc:e0:70:60:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=f4176dd54c3b46e83d78f8ce3bf901c265876fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:22:d8:13:81:84:dd:95:8c:5b:77:f4:05:
12:e6:7e:c9:56:4e:02:69:2e:22:60:ff:f2:44:d5:
6e:1e:fa:be:b4:d1:b0:03:d9:43:ff:6d:51:32:3f:
e6:f1:2a:48:b6:e7:3f:58:31:99:5f:13:f0:78:2a:
db:98:28:b6:7a:0d:66:69:be:5c:50:d2:7e:71:24:
11:78:bd:3c:89:39:ae:0a:09:2b:d9:de:fb:f6:69:
6f:1d:03:61:d0:b3:a7:25:1a:26:e3:5c:75:e4:08:
97:9c:c5:d3:ae:31:41:af:16:33:12:1c:60:97:36:
48:68:e3:5d:df:34:c2:65:9a:26:14:21:8a:8c:18:
de:bc:12:1f:a3:df:d3:95:69:e7:7e:ff:f2:3d:94:
bf:e3:45:6f:7d:38:6b:13:62:9e:eb:bd:27:34:2b:
f0:65:1b:21:47:b2:5c:75:9b:65:07:cc:7a:f2:28:
87:5f:2a:9f:21:b2:33:ec:f7:d6:12:f0:02:7e:b0:
d2:2c:fb:9f:4e:2d:de:16:40:98:1a:01:e5:5b:12:
dc:f1:18:f3:b2:d8:76:22:0e:87:aa:8a:ba:47:f4:
53:62:fc:27:7b:af:bb:f9:75:19:d8:11:50:39:3f:
00:db:6c:5c:5e:07:1a:be:17:00:d1:d1:a7:79:3c:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:6D:D5:4C:3B:46:E8:3D:78:F8:CE:3B:F9:01:C2:65:87:6F:B5
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:22:39:b9:da:aa:1b:86:bb:23:73:a5:19:82:d3:40:99:
cd:a1:df:bc:b8:90:78:4a:72:e6:90:ec:ed:1a:ff:0e:f0:64:
2b:95:de:f6:75:5d:7f:c8:97:08:a3:92:b7:f2:1d:45:05:4a:
0e:08:09:0d:88:00:7a:37:a3:03:f1:e7:e9:8e:87:39:ca:41:
91:68:26:af:ec:15:0d:18:0f:1e:6b:6e:b3:5b:bf:12:73:2c:
e8:4c:e9:6a:42:65:73:9e:b9:7c:fc:02:f7:7a:f8:1b:51:3c:
d8:d8:b8:58:85:50:47:3d:27:90:c5:96:7d:f8:e8:d8:ba:26:
ba:53:fd:c6:8c:94:57:38:7d:0c:63:a2:e1:7d:e6:25:b1:a4:
c4:1a:8d:cb:a2:d5:28:4e:14:03:dd:4f:5f:08:29:fe:55:3d:
ef:78:ca:bd:23:9b:c9:17:6b:ca:6f:0b:a0:6c:41:3b:a1:e2:
3e:87:de:ae:0a:2c:87:37:58:11:64:39:1e:1a:c6:4e:49:89:
2c:41:b1:52:ae:68:03:5b:9c:b1:79:0a:8f:39:52:d3:e1:9e:
12:92:27:3b:e8:25:40:db:f0:e7:46:98:89:5c:6f:e7:db:c9:
d3:e8:2f:78:ae:69:5f:d2:9e:ed:b0:0f:4e:c7:0b:47:05:6a:
af:69:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:50 2026 by rpki-client