Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
File: hoRh4GD99IzUHTOtknHIB9Qk60I.mft (raw, json)
Hash identifier: +XXsFkHjcoXEY+I9iAWSWF+ysd6SSa9H8/pmGd6OeSE=
Subject key identifier: DC:5E:F9:6B:96:9A:81:C1:24:47:48:27:A9:E4:B4:F9:28:23:BE:B7
Authority key identifier: 86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
Certificate issuer: /CN=868461e060fdf48cd41d33ad9271c807d424eb42
Certificate serial: 019D382DEBBF637AED6C018ABE4ACA80E4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
Manifest number: 03B4
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: IyUD0cTbm163_nE6Z_KQkHMo9a0.roa (hash: ckmuLvsLe1WHUbDkzeJOW8KVL9BpPwjboxRuotk+r7Y=)
2: hoRh4GD99IzUHTOtknHIB9Qk60I.crl (hash: VoMhW+N4Gu1ETppv1gNzoZrxFROYvWW4ASyMdOq1xmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:bf:63:7a:ed:6c:01:8a:be:4a:ca:80:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868461e060fdf48cd41d33ad9271c807d424eb42
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=dc5ef96b969a81c124474827a9e4b4f92823beb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:71:2d:e8:eb:df:0f:67:ff:a5:23:7f:27:
9f:12:85:3e:4d:a0:52:5b:a0:1a:e9:fc:28:da:5c:
00:da:74:88:bd:e6:16:02:48:2d:c4:8a:bf:6e:7b:
8c:bd:88:18:48:e0:b5:74:e9:49:d8:32:15:09:27:
31:c9:ef:c5:c4:ce:34:07:3b:7a:66:b1:9b:e9:8e:
7f:ce:0a:5a:18:63:1c:8f:ae:c5:8e:00:f0:c1:f4:
eb:22:b0:38:d2:ca:03:11:8c:2c:2c:ae:06:22:ce:
22:c6:f0:cd:cd:88:70:df:23:18:d5:ed:0f:72:cc:
c5:41:45:54:ca:a5:e2:61:b7:c1:16:2b:f6:57:83:
85:15:8b:94:ea:05:cb:73:a5:bb:ed:12:bd:8c:b9:
99:89:75:d8:b7:b1:62:38:7f:9f:6d:10:87:65:c1:
bf:92:91:25:ad:db:75:62:86:d8:35:3c:c2:bb:27:
f6:6e:37:96:53:ac:88:a9:e6:49:34:a4:ba:a0:d3:
ed:5c:58:fe:9b:94:44:15:59:2a:c5:fd:1a:80:bb:
5c:21:47:f9:e7:11:79:61:af:15:b6:f2:e7:b3:05:
af:5a:96:e8:4e:ad:a3:f0:8c:88:50:d4:aa:fe:d3:
54:a0:62:d4:d5:91:37:50:f0:08:7f:9e:65:44:8b:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:F9:6B:96:9A:81:C1:24:47:48:27:A9:E4:B4:F9:28:23:BE:B7
X509v3 Authority Key Identifier:
keyid:86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:3e:4f:f0:91:da:42:25:4f:4e:af:a9:d5:19:f5:47:ac:
b8:04:18:36:dc:c9:5c:1c:94:f0:41:e5:3e:42:0c:48:51:5f:
32:84:2b:36:12:09:1e:5a:e5:39:10:da:30:24:2d:d0:92:8b:
9e:06:e8:39:d6:fe:ac:88:14:51:eb:ee:70:98:52:e0:6d:a9:
3d:87:79:19:1a:24:44:03:0d:d9:d2:25:e4:c5:68:46:1b:1d:
cf:7c:bd:51:86:8b:5f:d2:57:d0:8c:ca:2a:f8:b5:de:94:a0:
02:10:6d:81:a1:38:9f:b5:34:37:96:28:29:94:48:fd:e7:56:
a5:99:cb:97:9f:1f:bf:3d:4b:84:99:36:5c:23:eb:22:e9:55:
ec:f3:f4:42:df:25:0c:34:c7:52:66:b8:57:db:8f:7b:7f:56:
f2:b8:05:5b:08:d9:ce:ac:8f:17:51:37:0f:e6:51:d3:7b:fe:
0a:45:f7:1d:94:74:cc:77:78:2a:59:e3:32:96:c2:d8:06:75:
da:87:4c:7b:e6:76:4d:dc:3e:d7:3d:6a:48:56:bf:97:24:96:
b7:e0:fa:3b:45:1e:96:79:87:30:19:5a:1b:9f:24:13:a6:63:
5e:ef:58:97:40:38:f2:a3:4b:32:2f:be:45:2b:a4:d4:43:12:
72:97:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:49 2026 by rpki-client