Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: /LSCfkRiOV619PgfrJgLihb+I9i02Yf1MmxeywTw/UE=
Subject key identifier: 1F:2B:4F:6D:6B:AE:FF:09:AF:BF:E5:B2:C4:92:D6:24:D9:F8:FA:12
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019DCE99530BDF13F73D86F779059C8926C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0E22
Signing time: Mon 27 Apr 2026 11:00:47 +0000
Manifest this update: Mon 27 Apr 2026 11:00:47 +0000
Manifest next update: Tue 28 Apr 2026 11:00:47 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: dloxlIVWWo4Z1XNMbFCQq/hV8gSnyC2s7SuvE037NEg=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:53:0b:df:13:f7:3d:86:f7:79:05:9c:89:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Apr 27 11:00:47 2026 GMT
Not After : Apr 28 11:00:47 2026 GMT
Subject: CN=1f2b4f6d6baeff09afbfe5b2c492d624d9f8fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:df:c4:d1:c0:db:4c:58:d2:91:8c:ba:0b:
57:2b:ed:ba:52:4f:bc:51:4a:14:e3:24:2f:9b:85:
70:0e:40:88:50:c0:ad:8d:d4:bc:09:89:be:75:4b:
a2:9c:fc:dd:7d:49:c2:0a:c7:35:98:50:9d:38:52:
3d:59:82:a9:0e:e7:99:fe:76:95:75:f9:80:1c:03:
33:40:5b:0f:14:aa:a2:ca:19:c5:8a:6e:16:98:d7:
5c:e1:05:15:0d:c6:15:1a:1c:b5:b8:93:9a:9c:c8:
8b:e7:0e:52:08:39:37:25:7f:93:b7:df:0c:03:d3:
38:2e:5b:06:63:c5:0d:fb:b2:37:b9:8d:67:e1:44:
f7:d6:28:26:4c:31:8e:af:22:b7:ee:b2:a4:17:8e:
5b:2a:0f:9a:a6:b9:47:2a:65:14:c3:cd:48:f7:a5:
f8:cd:53:99:ca:54:fb:36:38:eb:a3:5f:92:8b:dc:
77:15:32:91:84:82:3f:bc:b9:92:5a:07:5a:28:58:
6b:d7:ff:76:10:24:4a:5f:e3:9c:41:89:cf:68:7a:
a0:7f:ca:70:8b:e7:6d:a0:0e:e8:4e:1e:41:70:81:
7b:68:02:fb:a9:c9:4f:f4:06:4c:bc:a0:80:d8:b3:
33:5e:c9:5c:24:b7:25:c9:07:6c:f3:e0:25:a1:95:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:4F:6D:6B:AE:FF:09:AF:BF:E5:B2:C4:92:D6:24:D9:F8:FA:12
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:08:5c:c6:77:8a:78:ab:89:42:5e:ad:54:c9:98:19:0c:54:
de:42:ac:c1:34:f3:4a:02:46:6a:48:d8:db:0e:24:1d:c5:72:
0d:16:11:52:97:54:48:d3:5d:90:8f:ed:03:f6:bd:c1:fb:30:
8b:a7:d0:3b:76:b7:61:2c:8c:5a:f5:85:ce:b8:f6:a1:5f:e7:
dd:a0:62:1c:06:0a:30:d4:86:34:b3:0d:a3:dc:ed:4d:ab:10:
0e:90:77:f4:fd:73:01:b4:5f:22:30:ec:be:61:a3:ea:90:80:
96:a9:56:61:32:7d:9c:fb:a2:06:7a:ff:fe:d1:a6:85:4c:52:
a3:17:57:db:57:e9:b7:e6:6d:36:45:24:46:31:66:59:93:60:
9a:d2:b8:8c:06:83:7f:0a:04:8a:e3:5e:31:e2:54:89:0b:6b:
96:67:aa:30:9a:fe:2a:19:81:0b:9a:2b:9a:cb:d3:24:59:b6:
54:88:32:27:37:17:36:eb:6c:1d:0b:70:28:a8:b5:d2:e2:d2:
85:42:8a:51:cd:c4:c2:3c:e7:b6:16:47:8d:d5:27:b3:ef:fe:
34:23:c0:02:30:a6:ca:d4:8c:8f:8a:f0:aa:06:0e:49:75:b9:
bb:fc:31:6d:4d:6b:60:49:88:59:3d:d3:82:0e:93:2b:bd:b4:
69:4c:c5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmVML3xP3PYb3eQWciSbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk
MzFiMGQwHhcNMjYwNDI3MTEwMDQ3WhcNMjYwNDI4MTEwMDQ3WjAzMTEwLwYDVQQD
EygxZjJiNGY2ZDZiYWVmZjA5YWZiZmU1YjJjNDkyZDYyNGQ5ZjhmYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbfxNHA20xY0pGMugtXK+26Uk+8
UUoU4yQvm4VwDkCIUMCtjdS8CYm+dUuinPzdfUnCCsc1mFCdOFI9WYKpDueZ/naV
dfmAHAMzQFsPFKqiyhnFim4WmNdc4QUVDcYVGhy1uJOanMiL5w5SCDk3JX+Tt98M
A9M4LlsGY8UN+7I3uY1n4UT31igmTDGOryK37rKkF45bKg+aprlHKmUUw81I96X4
zVOZylT7Njjro1+Si9x3FTKRhII/vLmSWgdaKFhr1/92ECRKX+OcQYnPaHqgf8pw
i+dtoA7oTh5BcIF7aAL7qclP9AZMvKCA2LMzXslcJLclyQds8+AloZXMmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8rT21rrv8Jr7/lssSS1iTZ+PoSMB8GA1UdIwQY
MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt
MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk
LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZghcxneK
eKuJQl6tVMmYGQxU3kKswTTzSgJGakjY2w4kHcVyDRYRUpdUSNNdkI/tA/a9wfsw
i6fQO3a3YSyMWvWFzrj2oV/n3aBiHAYKMNSGNLMNo9ztTasQDpB39P1zAbRfIjDs
vmGj6pCAlqlWYTJ9nPuiBnr//tGmhUxSoxdX21fpt+ZtNkUkRjFmWZNgmtK4jAaD
fwoEiuNeMeJUiQtrlmeqMJr+KhmBC5ormsvTJFm2VIgyJzcXNutsHQtwKKi10uLS
hUKKUc3EwjznthZHjdUns+/+NCPAAjCmytSMj4rwqgYOSXW5u/wxbU1rYEmIWT3T
gg6TK720aUzFkg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:28 2026 by rpki-client