Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
File: HohQniSkFesNpjckz6i__buIqrA.mft (raw, json)
Hash identifier: w0HinrSl9rfUkDk/3NOOxQTaXLIBZHo4mOzgpq0+0xE=
Subject key identifier: 99:2D:9E:C5:05:FC:95:74:6A:9F:75:CA:70:3B:AF:38:83:D3:90:27
Authority key identifier: 1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
Certificate issuer: /CN=1e88509e24a415eb0da63724cfa8bffdbb88aab0
Certificate serial: 01A1593045BF0E1D0DDC7E2B813C75CA6073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:37 +0000
Manifest this update: Tue 20 Oct 2026 12:01:37 +0000
Manifest next update: Wed 21 Oct 2026 12:01:37 +0000
Files and hashes: 1: 6Ytq80bepi5xsFS1Xns_9MDLod8.roa (hash: f25Wel2LZvpK11BQ2NEC5Qraoq3oR1AXAPCrpBzJpjY=)
2: HohQniSkFesNpjckz6i__buIqrA.crl (hash: RtFPyFwTgPN5PPiJGnEd5KCVjTqsTI0NMhpH/RDqVLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:45:bf:0e:1d:0d:dc:7e:2b:81:3c:75:ca:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e88509e24a415eb0da63724cfa8bffdbb88aab0
Validity
Not Before: Oct 20 12:01:37 2026 GMT
Not After : Oct 21 12:01:37 2026 GMT
Subject: CN=992d9ec505fc95746a9f75ca703baf3883d39027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:b5:e0:45:cd:a0:af:f4:a6:1a:8d:2d:4e:
fe:ce:fa:e8:f1:96:50:f4:1f:b0:54:75:6c:9b:55:
15:ee:49:95:9c:79:f6:d9:fa:a6:e4:0a:93:aa:ad:
d7:87:25:20:b6:d0:48:b7:e5:c1:e6:21:3e:7f:7b:
e1:2f:2f:0f:86:29:1a:2e:a8:7d:b2:07:e3:02:a9:
4b:02:96:f0:21:e7:b0:b8:eb:54:b4:3f:bb:a5:b6:
52:bf:9e:8e:a1:42:63:16:75:8c:c4:5d:50:45:5a:
26:70:36:cb:a1:ce:56:7a:23:6b:d7:ec:ac:ae:fa:
aa:81:1f:06:fe:e2:2a:34:01:a2:79:87:ee:68:e1:
43:8d:da:0b:d1:d0:ef:83:2d:74:4c:b8:f3:7b:25:
8d:df:5b:48:a0:99:78:19:2f:7d:84:6a:10:20:e8:
ca:67:cf:a1:f3:f4:6a:02:d9:90:06:c6:89:54:20:
cb:d9:ec:ba:cc:aa:fc:76:79:d0:46:c6:68:37:11:
48:a4:68:68:83:04:d0:dd:4c:24:1f:6c:fa:b6:c6:
3c:86:f6:45:61:12:fc:21:11:c3:7d:a2:f2:cc:a6:
d1:6a:28:3e:4b:b0:00:2a:f3:d6:c5:af:ba:cf:5c:
17:98:dd:da:ab:de:f8:78:1b:aa:ab:84:96:2f:ba:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:9E:C5:05:FC:95:74:6A:9F:75:CA:70:3B:AF:38:83:D3:90:27
X509v3 Authority Key Identifier:
keyid:1E:88:50:9E:24:A4:15:EB:0D:A6:37:24:CF:A8:BF:FD:BB:88:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HohQniSkFesNpjckz6i__buIqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/HohQniSkFesNpjckz6i__buIqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:2d:45:79:a8:f2:fe:ae:5a:d8:70:30:88:72:e9:e9:7a:
da:e6:43:13:09:2a:e9:4c:dd:cf:ef:82:62:c0:7d:71:3d:d3:
e4:4b:cb:3a:ab:76:18:c8:85:e2:2a:19:d3:89:ae:3d:38:32:
2d:f8:69:7f:9d:40:77:c9:58:0f:28:af:ae:94:5a:2b:a5:e6:
38:bd:57:92:cb:95:fb:5e:5d:cc:ee:84:b4:2e:ec:80:3b:72:
53:67:6e:38:49:6e:b4:4a:53:60:ad:2d:a8:8f:db:a8:6f:3d:
79:0c:81:ba:62:41:48:46:81:f0:62:fa:ef:95:9e:7c:53:2b:
ae:9d:ec:0a:da:98:de:4b:44:79:45:3a:fa:94:29:96:c2:67:
a9:34:26:06:b5:44:b8:e4:23:d5:93:e7:68:7c:a5:a4:b5:22:
02:8d:87:95:f7:f3:b2:78:a0:d0:96:26:48:b1:65:70:3a:3e:
69:5d:8c:40:14:91:9f:ac:bc:da:77:0f:2a:75:0a:65:c1:4d:
b7:36:7c:25:85:35:9c:af:51:e0:95:ad:da:ef:f8:03:ce:9d:
fd:b5:30:ff:79:a5:e7:45:d4:30:34:5c:7c:74:b5:9e:e9:fc:
9e:09:db:12:df:9e:29:3a:c7:43:df:47:13:94:33:f0:4a:0a:
50:0c:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:01:54 2026 by rpki-client