Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: RGQT/4o+NFn4twDQD42aGTewTpgSS2eWBwfL78sl79Y=
Subject key identifier: 7F:95:7E:CC:9D:37:EE:C2:B4:16:2B:9D:02:92:CD:6C:AB:94:D2:BA
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019CE6DAF7FA8BA30322D9D6D8CE7AC26E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0DAA
Signing time: Fri 13 Mar 2026 11:00:35 +0000
Manifest this update: Fri 13 Mar 2026 11:00:35 +0000
Manifest next update: Sat 14 Mar 2026 11:00:35 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: hFPNwWTfBOLTWV6KhdQhD/nz9IJNjzFAI77PRtQS1QE=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:f7:fa:8b:a3:03:22:d9:d6:d8:ce:7a:c2:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Mar 13 11:00:35 2026 GMT
Not After : Mar 14 11:00:35 2026 GMT
Subject: CN=7f957ecc9d37eec2b4162b9d0292cd6cab94d2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:2b:71:b8:41:94:5b:0d:ba:96:ef:e9:55:
1e:f5:49:58:66:09:9c:40:b9:50:65:2c:79:0a:44:
04:d9:49:23:e8:e1:02:de:1a:03:ba:9c:85:64:cb:
6a:22:90:9a:c3:45:23:f7:1b:40:87:93:87:15:d9:
c4:b7:f2:55:cb:b2:49:30:cb:86:38:20:b3:72:16:
8a:5f:61:30:46:bf:04:8f:a2:62:1b:0f:bc:65:77:
43:33:e1:21:f7:10:00:90:b3:79:3f:ea:fe:59:3a:
54:be:1b:2b:6d:a4:70:0e:b1:cf:61:ac:27:cf:42:
66:84:1c:eb:5f:b3:36:86:d0:48:3c:7e:e4:eb:c6:
20:ec:da:56:ab:ca:d6:f1:f9:f8:d0:cb:81:09:82:
f3:d1:8f:93:4f:7e:a4:82:60:da:e6:1e:22:90:2a:
01:79:86:78:a6:26:78:79:c7:28:3f:bb:b2:3e:c6:
f9:71:aa:94:ac:27:fb:97:ba:0e:07:ad:35:bf:46:
e7:52:cc:4c:3a:86:ed:87:64:5b:43:19:db:16:e8:
43:81:2b:60:81:05:fe:53:6c:a5:d4:b3:4e:e1:e6:
bd:7a:57:ce:4b:72:ad:d7:f2:1c:b1:c1:fc:66:e1:
89:fc:59:9a:c7:e7:9f:07:4d:71:b5:6e:fc:5b:32:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:95:7E:CC:9D:37:EE:C2:B4:16:2B:9D:02:92:CD:6C:AB:94:D2:BA
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b6:82:84:29:14:35:f1:bb:17:c3:a3:6a:0f:b8:4b:e2:6e:
f1:d7:b6:3d:ea:61:17:79:7c:3a:f9:e4:6a:0a:ea:28:51:f5:
1d:8c:f6:fb:01:20:3f:d5:7e:38:9c:69:16:11:d3:d7:14:e2:
2e:d9:ad:34:6c:99:db:b9:a5:01:fb:85:b7:8f:ed:f0:64:15:
06:22:51:f6:2e:91:51:3b:ed:e3:80:67:ce:06:7b:3f:16:bc:
ea:6f:ac:39:b6:ed:da:b0:a0:6b:18:95:9c:97:23:ef:84:a6:
36:0c:51:b6:8e:4b:da:05:ef:eb:6d:fc:a9:82:95:56:30:ad:
c4:d1:6d:91:17:9f:43:a3:8c:4a:a9:0f:6f:70:46:ae:35:78:
57:b2:72:9e:a1:7d:dd:cc:b5:7b:cc:c4:39:b8:83:aa:51:51:
0d:a0:df:c5:6e:b3:a2:c2:60:b0:ce:2c:01:f1:5f:9d:90:a6:
03:51:47:85:51:90:0e:6f:f5:e6:89:07:69:72:6a:85:99:b8:
fb:a5:68:bd:45:29:ac:5c:df:ac:66:25:15:15:87:18:b4:4c:
ac:ef:a8:ad:7e:97:1d:aa:13:6b:f8:a9:80:4f:f0:73:52:e0:
6e:dd:10:d7:46:0a:54:3d:fe:cb:61:61:98:e2:49:2a:95:7f:
6b:28:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:53:58 2026 by rpki-client