Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: X//dNonToJ8sUiz1a4JgPcjkXqNHF7ZNB04n7waYPGg=
Subject key identifier: 71:17:68:79:69:B4:FD:DC:63:F7:40:C9:A1:46:28:A5:BF:33:42:FD
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 01A09C92F4341BF6643D938509718100B045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 19E6
Signing time: Sun 13 Sep 2026 21:01:11 +0000
Manifest this update: Sun 13 Sep 2026 21:01:11 +0000
Manifest next update: Mon 14 Sep 2026 21:01:11 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: 9tfPnGHxmhYz7CO01U5maVX5gBddgtpSOgOROaGDeV8=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:92:f4:34:1b:f6:64:3d:93:85:09:71:81:00:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Sep 13 21:01:11 2026 GMT
Not After : Sep 14 21:01:11 2026 GMT
Subject: CN=7117687969b4fddc63f740c9a14628a5bf3342fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:42:ec:0c:77:12:6e:9d:58:58:90:ba:1e:
19:04:01:fe:6f:d7:73:6b:bc:e5:5a:e4:7a:e4:5a:
6e:cb:44:77:a5:f8:af:f2:ba:0c:72:da:d4:d3:7d:
48:a4:26:f5:0a:5d:c0:5e:64:99:e8:25:0f:f3:24:
85:b2:1f:84:f7:62:dd:dc:8f:69:21:da:be:32:b6:
90:cf:5d:95:92:c0:51:28:c1:5d:80:65:38:89:79:
4c:8b:98:4b:7e:71:7b:73:a7:05:75:11:0c:48:34:
ae:70:b0:80:36:f3:cb:6b:62:19:8b:2f:7d:d0:4a:
42:2c:6f:23:41:78:ee:56:b9:ab:3b:dc:45:93:95:
76:e3:06:3b:38:80:77:ac:98:e4:77:24:b8:db:92:
3f:52:8a:e8:d3:40:60:8a:be:42:2f:16:46:f8:9b:
99:d2:47:46:9d:29:74:ae:4f:b2:61:bb:f8:5e:d4:
b5:d2:f8:04:a4:c3:da:4c:39:b2:70:20:4b:6d:46:
84:52:96:2b:77:26:ed:83:86:8a:52:36:2a:86:12:
07:a9:6f:b3:f7:fb:86:e2:a4:ee:b3:a3:c0:74:97:
29:33:db:1a:98:dd:ab:b0:7a:5c:51:81:90:71:2a:
7c:1d:83:b9:92:e9:9f:c6:7b:d7:62:83:82:3b:32:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:68:79:69:B4:FD:DC:63:F7:40:C9:A1:46:28:A5:BF:33:42:FD
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:22:2c:06:6a:f3:48:a6:9a:e0:a4:ec:7e:48:b9:6f:43:2f:
7b:ca:d4:3d:d0:3e:a2:57:e2:f8:4b:fc:5d:5b:97:b6:70:06:
12:7e:f6:a9:5c:8c:2a:ab:6e:9b:f8:17:46:db:43:b5:69:4b:
4a:67:ad:55:65:ae:21:45:a5:64:8f:22:84:e1:bd:3c:44:6b:
b2:68:f8:2a:0a:33:7c:f8:be:68:ce:be:df:ce:00:cb:e5:c9:
ff:91:03:fd:d7:ad:7e:97:71:36:c2:8e:52:00:ac:86:ba:bb:
fd:19:48:d3:d4:ca:65:55:6a:43:72:c1:e9:3b:af:a9:2b:e1:
da:7c:3e:5d:5f:8a:00:61:71:56:05:e0:d5:06:7e:a6:d5:c9:
aa:92:83:c1:67:f2:c1:3a:73:fa:91:c4:91:26:dd:a3:64:74:
d5:da:58:9b:eb:14:0f:08:2d:9a:bb:5c:65:46:e9:0b:d2:c2:
ce:a7:1e:1a:90:da:df:36:28:cd:48:f2:e1:17:27:57:63:b3:
6c:28:22:9d:73:c0:6c:c2:73:02:53:19:9f:4d:e4:0a:6b:af:
e3:0f:ed:95:19:f0:8c:7b:57:8e:99:d7:d1:41:62:96:6e:1c:
96:42:ef:13:70:19:cb:62:39:be:8c:e0:13:fc:03:62:09:79:
02:41:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 04:11:58 2026 by rpki-client