Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: yXUcksaEkmsLJIUFDg/TEqm3A5xfg3em/29jmLVQsPk=
Subject key identifier: C0:4D:9C:57:CC:16:34:A4:8D:CA:3C:DD:B2:CD:05:BE:B6:90:4A:CA
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019D3909B6063E9012FE6ED0B45537EA0DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0F46
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: YuHJmYFCnAz2SSKMxUmvTY991CE.roa (hash: TOD8ARSMl4ubAqj2aurWlfEhx3SyaroxCxGERNtBcZQ=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: r29SAKDMnuGwwxz1UrGyc4hNr7jquCRGxZp1dgd9nqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b6:06:3e:90:12:fe:6e:d0:b4:55:37:ea:0d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=c04d9c57cc1634a48dca3cddb2cd05beb6904aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:d8:56:a4:83:f9:71:89:48:81:40:e5:25:
d8:18:ce:4f:7f:15:2e:2d:ef:8e:93:00:3d:9b:ec:
0e:84:a7:02:81:c3:18:ad:0f:10:2b:ec:78:31:cd:
37:c7:77:9e:ce:4f:f1:43:99:f9:a1:d3:4b:55:16:
31:70:b1:d0:6b:46:ec:57:aa:9e:bc:d8:9b:b1:90:
eb:4a:9c:d7:f6:14:8d:c3:08:91:70:0c:b9:b5:67:
91:42:9c:75:42:15:ef:4f:af:2b:91:68:fe:48:de:
02:b6:12:aa:4d:5b:6a:db:b1:d5:f0:0a:53:c7:62:
4b:6b:d5:7b:9a:00:68:da:61:d4:24:fc:c3:59:74:
d2:b4:11:72:d3:c0:d5:52:c0:fc:ee:30:d4:d3:15:
95:33:e4:c0:69:df:fb:40:28:65:01:86:db:18:a8:
87:ea:f8:79:88:0e:bc:85:64:94:20:f3:00:8b:04:
3e:49:f6:8a:07:25:9d:fb:41:52:c1:6c:87:cb:88:
9e:5e:93:da:63:b1:5c:31:9e:54:00:2f:06:42:bd:
ad:e3:ad:27:dd:25:71:fe:fe:5b:4e:31:4d:a4:00:
79:5c:f9:7f:12:32:6d:fe:8c:e0:09:d4:70:72:76:
0c:b7:65:80:c5:f1:3c:55:39:8a:29:7a:e1:14:b3:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:9C:57:CC:16:34:A4:8D:CA:3C:DD:B2:CD:05:BE:B6:90:4A:CA
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:06:29:c9:72:10:63:7c:8f:b8:74:2c:39:31:e1:f6:02:fb:
af:c5:5e:6b:ed:60:7f:6a:c8:d7:c5:ae:46:2d:dd:a9:0d:10:
a3:06:3e:b1:65:8a:5d:07:42:09:86:3c:2d:99:d2:88:29:24:
a9:8e:6c:20:c4:96:62:2a:3f:40:7e:ed:a3:fd:97:50:e8:55:
40:ab:bd:87:c5:2a:6b:64:48:59:70:56:db:98:3b:ae:a6:a2:
b8:98:2f:da:d6:7e:19:98:33:a0:e6:a8:e6:63:f2:31:b9:e7:
a8:b0:55:16:df:a1:94:43:96:f2:74:31:11:80:24:59:a8:45:
26:a1:97:6e:57:5c:f4:03:71:a9:b2:1d:8e:d8:20:d4:67:aa:
58:41:a2:2f:e7:c5:f0:85:95:d5:ac:40:09:6a:10:ef:c3:8b:
61:03:51:d7:cf:b7:d4:ad:e5:b6:04:fb:98:3d:f9:a0:f8:a9:
ce:fd:25:76:20:c8:4c:8b:a9:0d:58:06:6b:36:8a:b7:93:18:
9c:e7:b5:ed:bc:e0:84:d0:a4:b8:3c:3a:c2:b4:6b:c2:05:a5:
cb:4c:3b:5e:52:d2:d3:15:18:53:71:37:69:45:1b:a6:09:42:
84:2a:85:25:6a:4d:20:b3:e2:4f:f3:fe:7b:ef:dc:3c:72:f8:
58:50:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:23 2026 by rpki-client