Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: 8dNa7T+pChcBfJH6kdlju5LuYaPLbEyckJPA3p1tCHQ=
Subject key identifier: A0:81:94:C6:37:51:BD:AB:1A:72:CA:4B:CD:1F:29:FE:28:1B:24:4F
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 019D38D3BECEF3BAEEE7CE496F9D08A90C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 0955
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: BsUK6q4arJHbcNcyqOOvwteXiS0.roa (hash: mH5FcSTjVNeSVMSPqpSkXYdFczl7hZ5yzWhcRGubmnk=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: +1SgSKoMIWSvt6pxgK4qaRklXSk20p4tiDJgOBVFk/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:be:ce:f3:ba:ee:e7:ce:49:6f:9d:08:a9:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=a08194c63751bdab1a72ca4bcd1f29fe281b244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:0d:00:13:25:75:3b:cf:7b:38:5e:2a:62:
91:cc:26:a5:64:01:e6:3f:69:3a:fd:77:2a:14:7c:
c2:3d:ab:0c:bc:ff:87:2a:8a:aa:89:08:50:94:19:
26:6f:83:50:78:5d:7d:a6:4d:71:05:2c:1d:97:cb:
32:c6:4d:7a:95:fa:43:fd:f3:f2:32:39:87:0d:4a:
f2:bf:c0:60:e4:22:e5:19:97:0d:9b:5c:72:2b:70:
65:3f:2d:a0:48:72:61:fd:75:95:be:e4:a5:b3:b6:
36:15:65:9d:41:b0:2c:45:97:a2:81:17:2c:45:b5:
f9:2e:4b:5f:01:0e:62:15:12:38:2f:2c:e5:01:2e:
2c:2a:2d:1c:c3:b9:3c:50:2e:62:b6:a7:a7:30:61:
d3:8f:cb:28:27:a4:0b:06:ca:0d:75:53:bd:6a:dc:
d9:eb:ed:ed:f0:8d:0d:02:04:94:7c:89:eb:4f:19:
3a:78:db:f7:a4:6b:31:bb:7d:bb:84:8c:7d:5a:18:
b6:73:fb:99:da:c2:0a:55:ab:92:df:23:64:67:2b:
2d:65:4f:a9:ce:c6:62:75:29:87:be:13:29:31:5f:
c0:0c:13:20:a7:f9:66:a8:b1:18:dc:91:e2:01:e7:
42:5e:06:4a:3d:30:20:1b:33:1b:78:5c:8e:14:ab:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:94:C6:37:51:BD:AB:1A:72:CA:4B:CD:1F:29:FE:28:1B:24:4F
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:94:64:33:f8:bf:51:7c:5c:c3:0b:31:2d:02:1f:f1:ab:
35:5f:3e:60:7a:8d:de:05:df:6f:5d:2d:9a:a6:78:64:d5:4b:
b6:4e:7b:fd:d6:70:0a:ec:15:41:0f:aa:ea:76:ef:16:bf:05:
37:75:38:7f:71:5b:16:bf:c6:a3:44:7a:e7:f5:b7:64:ee:e7:
9c:2b:21:8e:55:69:aa:17:cc:79:d1:69:ae:ac:58:f4:e2:23:
48:1e:d4:ec:79:0c:a9:bc:3f:66:8f:00:aa:72:de:37:d8:f4:
9f:2b:a9:54:7f:6e:e7:b8:c2:4d:4f:1b:e2:c5:b0:df:84:e4:
62:be:cb:53:ea:6c:0f:e9:de:60:3f:e8:04:05:8f:04:9e:82:
6d:a0:bf:e5:f5:e6:d5:62:c5:24:33:5c:df:fa:05:9a:64:3e:
4d:4b:7b:9f:32:2f:8f:e5:bf:3a:0a:7d:1b:12:b7:96:06:18:
c3:f7:38:a2:ea:4b:b0:2a:b4:82:2b:0b:28:4d:01:f3:2b:b0:
8d:cb:5e:97:ed:c1:e7:be:be:18:c8:46:c8:0e:33:a2:ce:c0:
b0:43:db:23:20:7f:ac:8b:ae:8e:40:d1:82:0c:30:cb:49:4f:
59:13:b1:44:53:0c:23:c1:66:ff:6c:c6:74:c2:23:27:8b:cd:
1a:10:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:02 2026 by rpki-client