Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: dVXv5cfhkGyMPNDJlxQBgSURhALJ5GeLKi3bjWNddHM=
Subject key identifier: 67:27:4A:E9:C4:F0:CE:A9:E3:0E:74:00:8C:03:D7:32:55:6E:96:BC
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 01A10A70A1A0534901384D687026749265F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 1A89
Signing time: Mon 05 Oct 2026 05:01:55 +0000
Manifest this update: Mon 05 Oct 2026 05:01:55 +0000
Manifest next update: Tue 06 Oct 2026 05:01:55 +0000
Files and hashes: 1: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: BiNY7/70uhO3GEckgvn9PXlEbzxk4zFN0tz7ExMYFWE=)
2: iS4aP9tMsLMEBkI89bWWRaKMKGk.asa (hash: MDkJJc2R+eFDooxAw3E2bgJVuPEghC4CFwikOlAVImQ=)
3: yck28xcl3jczXgwL4uHBsdkr9eA.roa (hash: e+2vyfKfLKulD+WhEKHkneTjPq/LBArHRIYQYPU8rjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:a1:a0:53:49:01:38:4d:68:70:26:74:92:65:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Oct 5 05:01:55 2026 GMT
Not After : Oct 6 05:01:55 2026 GMT
Subject: CN=67274ae9c4f0cea9e30e74008c03d732556e96bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:0e:dc:8d:95:5c:8b:c0:68:e9:e5:3e:f8:
7d:b4:c7:51:00:16:2a:e7:f7:76:16:26:0e:35:ec:
b7:e6:d8:84:fc:0c:bc:8a:af:02:ea:7c:62:67:b8:
6d:df:fc:a3:44:a0:59:a4:b9:36:b9:78:dd:de:d1:
d1:c8:7d:3e:15:cc:28:dd:3f:37:c4:dd:39:0d:f7:
55:10:2c:0a:dd:62:c2:8b:11:b4:34:af:fe:ae:73:
8f:9f:69:c5:ff:6f:7a:10:4f:3b:5c:b5:78:e3:27:
04:7a:b4:7e:e5:1f:7c:43:7c:dc:ca:af:4e:8e:59:
a6:a7:33:0f:55:a2:5e:24:21:b2:c3:eb:71:51:e3:
08:f5:c8:e4:64:44:58:88:06:5c:92:eb:57:9f:40:
8b:0d:c4:15:c0:24:d9:a7:e2:41:3a:14:b5:3b:a5:
d7:ab:0f:74:78:ad:9c:36:b0:46:d1:44:63:dd:7e:
62:e0:e2:db:ef:80:5c:7f:e2:aa:4a:42:65:f2:29:
40:84:6b:db:ec:e1:c6:8f:cc:dd:e3:99:f4:84:f5:
67:35:f6:6a:97:c2:cb:67:58:56:0a:6d:9d:24:d4:
d6:d6:59:6b:24:47:8b:6e:7f:1b:16:7b:ad:db:b2:
c8:4f:f8:79:bb:cf:dc:f7:eb:eb:cd:c7:30:43:99:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:4A:E9:C4:F0:CE:A9:E3:0E:74:00:8C:03:D7:32:55:6E:96:BC
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:07:6d:94:c0:15:84:b9:55:59:f2:91:cd:a2:bb:40:77:
71:3e:72:b2:40:4a:f0:1f:44:47:8d:3d:fe:c5:86:eb:7f:c5:
8e:2b:71:74:ba:47:02:56:76:48:b6:2e:3c:ec:87:46:49:ff:
16:eb:f4:34:39:b6:1a:4e:8d:d1:3b:1c:ed:4b:6d:e9:d5:23:
0a:19:63:08:00:ed:6f:4d:0d:7a:c5:03:62:7b:1e:49:cd:dc:
6c:da:83:11:6c:09:d9:0d:99:86:c7:ea:59:5c:6c:b3:e4:71:
a0:4d:7f:e4:86:fc:5d:6c:68:2f:20:32:5a:e2:59:5c:f3:a3:
37:e1:17:3a:99:8a:86:61:d1:fe:87:a7:f0:32:9b:bf:45:21:
b9:70:2c:2f:41:6a:b1:4c:b7:d8:a4:7a:f7:a4:a8:ec:85:30:
7a:d7:c9:ff:80:71:5e:d6:6b:c1:39:e1:25:12:66:6e:a0:e3:
01:d6:00:64:ee:45:0e:96:92:69:ec:ac:1b:04:7c:d8:32:8c:
63:83:39:7e:09:cb:cc:0f:37:bf:4d:81:0b:a7:38:f6:5d:3f:
54:95:6e:ca:85:53:1c:7d:36:19:32:8c:26:ce:a3:02:50:ef:
b7:0d:40:e0:6d:03:4f:00:0c:55:a6:09:d9:93:8d:9e:b1:2c:
b7:27:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:25 2026 by rpki-client