Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: NDJJj+ArHuJEYXLiltVGNhanbs0+HZswmKcppXMENHg=
Subject key identifier: D5:FA:59:89:33:1B:46:58:75:A2:A9:A2:96:96:30:57:7D:59:94:F9
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 019DA75589444EA100F525D8EC0CE2CB0AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 0542
Signing time: Sun 19 Apr 2026 20:01:33 +0000
Manifest this update: Sun 19 Apr 2026 20:01:33 +0000
Manifest next update: Mon 20 Apr 2026 20:01:33 +0000
Files and hashes: 1: C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa (hash: cpa4ey5flhFVWa6hOHqUoUQLhSQVEdjFj4vHoE37Kb0=)
2: HMfT7RXQv0cCzI6qjjbXpv0Dpvs.roa (hash: rpVCvThgsyRbmHi9yrVB1FHQ2vnW/yUkYGAfm5xLUFo=)
3: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: RkTzLmm+gUsPmhwZ4qbdHPsLX7QrRsAfQkweIj3Y+5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:55:89:44:4e:a1:00:f5:25:d8:ec:0c:e2:cb:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Apr 19 20:01:33 2026 GMT
Not After : Apr 20 20:01:33 2026 GMT
Subject: CN=d5fa5989331b465875a2a9a2969630577d5994f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:b5:d1:36:06:77:e1:80:d0:c1:10:f5:59:
11:68:df:73:ce:96:0a:7e:b8:a0:59:46:5d:ca:02:
49:48:e7:95:a6:fb:0f:47:81:23:90:37:70:b0:10:
78:24:39:28:00:9a:0a:4a:d2:e1:a7:a9:0f:2c:a8:
82:ae:b2:e8:0c:31:d0:31:6e:7b:1e:24:95:50:fe:
8f:e3:f2:30:31:3c:08:c3:09:96:58:61:b8:24:2e:
4b:f9:67:56:bd:5e:35:39:13:8c:ac:1f:3e:a1:95:
36:aa:ce:2d:31:17:60:13:da:d6:e2:30:7e:f8:b6:
ac:a2:6b:5e:de:77:31:d8:6e:a1:89:96:5d:98:83:
c1:3e:5f:72:ca:e5:3c:81:d9:5a:29:00:86:52:55:
ee:4d:14:ef:f7:66:6f:61:b8:7b:4e:95:a5:e9:57:
3c:19:87:fe:d3:50:82:ac:1e:4d:b2:a7:77:04:88:
a1:38:45:90:ae:b1:b4:ee:a4:a6:a0:b9:e8:70:48:
13:5f:e4:d5:48:90:66:60:12:55:32:15:1c:90:19:
69:1e:39:f2:9d:88:33:08:46:a7:74:30:03:42:27:
1d:7a:56:be:4f:70:17:b9:13:71:7f:2c:e1:01:d9:
d8:57:ac:d7:58:96:e2:9d:9a:3e:c6:63:23:ee:95:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:59:89:33:1B:46:58:75:A2:A9:A2:96:96:30:57:7D:59:94:F9
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:eb:dc:fc:11:38:e6:14:e6:4a:3b:39:f9:25:e2:8a:5a:
33:33:02:f1:ee:af:17:e3:9e:fb:d1:ea:05:b2:9d:1e:31:c3:
0a:13:a4:0a:3e:e3:e2:94:85:d9:bd:34:ed:91:36:09:dd:22:
ae:b0:5e:05:a2:70:10:d4:7a:17:61:2a:9b:8f:7f:81:c9:94:
f6:ba:40:d3:c7:ae:1c:bf:55:20:84:a9:9a:22:aa:88:c8:c3:
1e:ef:11:c2:67:e5:2a:bb:92:18:d1:f0:b2:4e:39:52:ac:5a:
c2:ab:9f:1a:10:5f:8a:fc:14:e1:fb:e8:b6:97:b7:4e:cc:6a:
2a:c2:52:64:3d:11:97:7d:05:bc:c5:5c:ca:ef:4b:a9:cd:ec:
81:89:38:9b:31:6d:3e:ee:48:2a:8f:2b:f6:82:4d:ce:61:b9:
c5:4d:17:56:76:ff:e6:41:23:a0:06:24:41:86:c6:2a:7b:5f:
cf:81:25:1f:9c:12:a9:9c:97:64:aa:4e:cb:00:6a:fe:ad:67:
0e:87:f8:51:b9:54:ae:f7:79:82:81:d2:86:b3:18:f1:d6:3b:
2a:19:af:a5:78:3d:ab:39:69:af:e1:cc:ab:8d:f8:66:92:7f:
50:a2:d6:cf:b1:d0:74:a9:03:2a:27:39:a6:97:c0:9d:54:c5:
fc:de:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:59:06 2026 by rpki-client