Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: TixT+rE+QjWz6Kv8HS0PBHO6p08+Q9AAOmpuKfJ80vk=
Subject key identifier: 88:CC:42:81:1E:1F:EF:0F:30:F7:07:E2:FE:D6:16:ED:16:4C:88:E5
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 019D382E2058588F37B87906A8A48C645500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 03A2
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: DzN_WYe0XcHzOCsuLwI3-t8U6BU.roa (hash: IW2dIfGRE8kDdbDSGziwX25n3nT3NtlJvJJCv8rrTuw=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: bJqlo2ymvAk4J94V+K3cISV7fRAgiPNO1CrJdRq53mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:20:58:58:8f:37:b8:79:06:a8:a4:8c:64:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=88cc42811e1fef0f30f707e2fed616ed164c88e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:eb:2e:40:9f:18:b1:c6:08:1e:3b:c8:82:
2b:b7:4c:7c:ab:a9:ff:59:83:fe:97:a5:6b:f8:09:
a8:e7:bf:67:57:61:ce:15:86:85:80:13:05:8b:6b:
61:a7:59:bd:8b:23:63:ea:28:ac:b4:01:d8:f5:9a:
a6:0c:e2:32:cf:ba:f7:17:3a:6c:50:41:d0:f1:f8:
a9:52:ca:6b:72:c0:90:0b:b6:3b:30:26:53:ac:e0:
03:78:41:1d:97:82:55:0c:40:4c:a1:ac:73:fd:97:
45:03:d6:06:a4:7f:1d:2b:b3:56:91:19:07:ea:04:
c9:d8:c9:5e:be:fc:0e:bf:74:8e:84:f7:ad:80:dc:
30:fa:09:ff:34:2d:00:95:3b:fe:56:b5:61:36:24:
ba:70:ca:2d:69:f9:18:a2:84:6b:3c:c1:22:0d:58:
70:71:18:69:83:d5:7c:a3:f4:04:53:42:e5:9e:99:
5a:94:12:30:2b:eb:18:9f:43:03:e1:2e:4b:87:34:
01:a4:5c:7b:c6:e9:a2:cd:54:db:89:93:4d:c2:3e:
c4:81:e1:ec:06:03:5d:71:08:9c:36:89:2f:e5:8f:
1a:db:6b:e9:a3:39:75:e4:e8:75:f4:ba:3f:72:be:
cf:e9:f1:9f:12:60:e3:3f:8b:58:ab:7e:c3:9f:c0:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:42:81:1E:1F:EF:0F:30:F7:07:E2:FE:D6:16:ED:16:4C:88:E5
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:2c:17:f6:45:5a:92:ad:5f:a8:53:e3:e7:16:82:19:8d:
b5:48:a9:e1:45:ff:8c:a3:58:d9:50:10:01:c4:28:62:d5:66:
85:42:a0:92:a9:e5:88:5e:65:bc:13:e0:7b:75:93:8f:28:74:
a1:c3:2b:3e:40:af:78:b8:3c:aa:65:85:9c:fe:08:4d:f5:a2:
e7:6c:59:06:40:89:66:eb:33:8d:02:2a:6e:4a:3d:45:38:17:
ef:08:7f:bf:e6:12:8e:bd:19:94:6b:80:19:be:47:a5:5d:0c:
c1:d1:41:57:95:17:0a:25:37:5f:75:f2:e4:58:3a:ba:8f:bf:
75:4e:1a:59:97:d3:4a:a8:e3:a4:68:a9:f5:92:56:f8:8e:57:
94:f9:a8:4f:5c:ec:2d:82:74:19:c1:33:70:a4:0f:2a:65:cd:
d1:b3:51:56:2e:db:34:8b:a6:f4:d9:90:81:07:39:90:5b:ab:
87:72:bd:4b:ba:1c:23:28:07:70:b4:f7:84:7e:03:ea:70:dd:
84:2b:7a:50:cc:48:4a:c0:38:db:21:a7:60:ef:06:2c:ed:70:
4b:8d:5c:5e:81:bd:cc:9e:99:28:e4:14:a5:0f:f2:f4:1a:d0:
2b:e2:d9:73:39:fd:4a:d1:a4:64:e9:7c:8a:b7:ff:56:89:0a:
34:18:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:24 2026 by rpki-client