Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: 5ReRUBBMB8AP3j64UgSg+AYAsNhnS5OeiRgON/1NeYo=
Subject key identifier: 42:A1:A9:37:35:D5:47:9C:2D:45:97:8D:10:59:92:F3:8B:8D:BE:65
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 019DB3905A76AE329C49188ED26AC0CF205C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 18D2
Signing time: Wed 22 Apr 2026 05:01:15 +0000
Manifest this update: Wed 22 Apr 2026 05:01:15 +0000
Manifest next update: Thu 23 Apr 2026 05:01:15 +0000
Files and hashes: 1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: Eu27la7e/o/n0KsLn3ao8lREDoZPO90eFzQkN1u+xWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:90:5a:76:ae:32:9c:49:18:8e:d2:6a:c0:cf:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Apr 22 05:01:15 2026 GMT
Not After : Apr 23 05:01:15 2026 GMT
Subject: CN=42a1a93735d5479c2d45978d105992f38b8dbe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:21:b7:3a:04:04:64:64:a8:a7:18:db:41:
4a:7e:ef:41:bb:2f:59:97:ec:ce:88:70:f8:d5:c0:
1d:d6:52:71:cc:4a:a2:f9:a8:dd:0f:ee:f1:26:43:
58:1e:49:f4:06:3b:fe:62:8e:15:ed:9b:a2:db:72:
3b:ad:c9:f8:9c:a7:90:37:9d:ad:2d:0d:cc:0c:b8:
f9:6e:7f:26:d7:7c:54:87:e6:e6:60:46:4e:99:b8:
9a:9e:c4:db:15:51:6d:c8:74:87:25:d9:52:db:fe:
49:7d:51:8b:64:45:e2:23:fc:b1:21:95:6e:df:93:
0f:b2:b8:f6:25:be:bf:ed:4a:7a:b7:15:77:44:d3:
43:a5:55:c4:ca:29:09:c8:f9:e7:3c:dc:31:de:19:
aa:12:63:3a:d2:b0:3a:80:c3:3f:04:63:c7:79:c5:
59:94:c6:79:d3:9b:e4:60:0a:55:63:1e:fb:ec:2a:
8d:b7:a6:cf:7d:4f:16:92:62:d3:6a:23:9b:5f:83:
ff:d2:4a:70:ae:46:e7:53:27:91:a5:2f:33:68:58:
1c:8c:d2:59:a4:a8:73:d6:27:b6:8b:59:68:ff:0d:
f7:83:4c:ce:49:2e:6e:95:29:67:f8:be:a6:69:99:
a9:97:5d:d9:95:ef:ac:67:0c:63:fb:de:92:63:2a:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:A9:37:35:D5:47:9C:2D:45:97:8D:10:59:92:F3:8B:8D:BE:65
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4e:26:46:3b:d5:d1:97:3c:5c:a6:1c:58:7c:0c:f9:72:dc:
57:a5:df:15:56:50:9d:5f:30:73:a5:4a:0e:46:cc:de:7f:5e:
29:65:34:2e:3c:be:16:b2:e7:5c:82:44:a0:6c:db:1a:57:b5:
a3:ae:61:86:2a:f8:11:b9:43:a6:4f:38:b5:16:51:8a:2a:23:
80:9f:d8:db:f3:41:be:9a:9a:11:6a:8a:8e:c0:2c:8e:40:4e:
88:48:c5:f3:00:e0:33:81:3c:95:d0:47:6c:ec:79:36:dc:cb:
7d:8d:25:0f:2f:3b:94:06:f3:41:7a:32:35:24:db:c5:c6:06:
b0:a9:f6:fe:7b:49:04:05:d6:9b:09:4e:b3:58:b1:43:c1:b2:
57:0c:eb:97:75:1a:50:9a:97:77:14:5e:b3:38:7b:51:cd:f7:
e4:64:85:61:f3:67:f7:cb:b2:0b:14:b5:bf:2e:1c:71:43:c5:
d0:7d:53:a3:b0:c9:3c:e7:c7:46:c4:6c:f2:b2:dd:4e:23:d8:
e8:cc:4d:b9:48:03:25:a1:79:cd:38:a3:b8:14:ec:5d:72:07:
21:f4:59:ea:6f:fd:5d:9d:94:b5:4e:91:89:62:4b:71:27:f6:
d9:39:55:f8:67:02:6c:6b:5f:72:05:39:c9:f7:c4:6b:7f:6e:
93:0c:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:57:08 2026 by rpki-client