Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: J69i0WhuZECfKHn/7Cs+1q3fF4u6XydHVHb50PG2Nrg=
Subject key identifier: 8E:44:AE:7F:C3:6A:E2:34:B5:D0:8C:B6:9A:46:E3:07:03:1D:FA:73
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019F65A6FB8F4F035E7FBED6E506C16A642E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1945
Signing time: Wed 15 Jul 2026 12:01:09 +0000
Manifest this update: Wed 15 Jul 2026 12:01:09 +0000
Manifest next update: Thu 16 Jul 2026 12:01:09 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: G4aN2iY9NjD90Ewbtd3z4tZO3VqSPywELT2hdRiPVIo=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:a6:fb:8f:4f:03:5e:7f:be:d6:e5:06:c1:6a:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jul 15 12:01:09 2026 GMT
Not After : Jul 16 12:01:09 2026 GMT
Subject: CN=8e44ae7fc36ae234b5d08cb69a46e307031dfa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:b9:3c:f8:31:4b:ae:7f:f8:5d:6c:44:a3:
5f:40:a8:02:66:05:11:a4:b5:64:ea:20:b7:19:8b:
7e:a5:6d:ab:68:42:20:5d:36:81:41:5c:8f:99:67:
55:d8:4c:cf:25:00:fe:81:ca:96:e9:3f:73:c5:1f:
e1:c0:09:2f:8d:4a:63:1c:88:1a:57:cc:bb:74:1d:
5a:4c:c1:59:8d:12:f0:64:24:22:bb:dc:cc:9e:a8:
e9:4d:58:29:f1:2d:7a:15:de:0c:21:a4:4f:5e:2f:
68:34:44:cf:11:42:0a:3a:fa:2c:97:af:00:c2:02:
00:80:49:27:13:97:66:c8:c0:72:02:65:5a:c7:64:
79:b4:0e:db:c6:c8:05:c5:a3:ac:ea:bf:22:15:33:
ac:44:3e:1d:05:e4:d8:07:a4:96:b5:a6:81:3e:f0:
b3:30:aa:61:bb:34:57:ae:a0:3b:e4:16:27:51:fe:
25:5e:36:97:9d:84:cf:fc:f9:d4:98:3e:c0:4c:44:
f4:6b:de:20:19:6b:b7:8a:69:bb:a3:b5:90:06:ec:
8c:c9:f8:dd:bc:33:fc:97:45:42:26:58:f8:4d:83:
12:dd:d3:dc:fd:0c:e0:e9:b8:ec:d6:12:02:6a:ce:
c5:6c:96:91:83:c9:9c:51:1b:b0:e6:9c:ee:93:c9:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:AE:7F:C3:6A:E2:34:B5:D0:8C:B6:9A:46:E3:07:03:1D:FA:73
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:ff:0a:d6:fe:0f:91:da:d1:d7:c7:93:c2:0c:ee:1e:67:
14:bf:b1:67:98:f7:fc:e5:fa:a1:6c:bb:59:a4:a5:da:05:5a:
7d:9d:37:3b:15:d1:b5:fc:b4:2e:22:ca:a0:58:87:21:2b:b3:
15:ac:0a:d7:4e:4d:61:57:12:3b:93:15:b0:84:6e:4c:82:06:
c2:3d:9d:c1:7c:bf:bc:d0:a2:af:e7:bc:16:48:ec:05:4c:f1:
11:13:b3:b3:8d:80:58:ee:8d:df:51:0f:81:e0:1c:19:49:dc:
6a:20:f5:86:25:91:0d:1b:9f:d2:f6:76:26:2b:c4:e8:3c:39:
6e:2b:0c:3b:03:23:63:00:f1:c9:63:a4:0f:fd:44:4c:65:e8:
11:61:43:3b:2f:54:d2:6f:d6:e0:16:cc:19:6b:87:99:43:7f:
86:16:80:70:6b:5d:4d:f7:6b:d3:92:6d:6a:84:43:cb:6f:63:
75:0f:ae:e1:10:58:9d:48:f9:16:1b:1c:22:5a:03:3c:e6:89:
8d:1b:84:db:16:50:2b:25:51:35:ed:55:3b:1d:1d:5e:5c:58:
bd:e5:ce:78:fe:2b:3e:7f:52:06:0d:d3:86:68:c7:14:c6:d4:
75:60:7d:89:8e:9d:5f:de:ee:83:aa:f4:0b:9f:85:9f:10:35:
df:24:30:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9lpvuPTwNef77W5QbBamQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYwNzE1MTIwMTA5WhcNMjYwNzE2MTIwMTA5WjAzMTEwLwYDVQQD
Eyg4ZTQ0YWU3ZmMzNmFlMjM0YjVkMDhjYjY5YTQ2ZTMwNzAzMWRmYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR65PPgxS65/+F1sRKNfQKgCZgUR
pLVk6iC3GYt+pW2raEIgXTaBQVyPmWdV2EzPJQD+gcqW6T9zxR/hwAkvjUpjHIga
V8y7dB1aTMFZjRLwZCQiu9zMnqjpTVgp8S16Fd4MIaRPXi9oNETPEUIKOvosl68A
wgIAgEknE5dmyMByAmVax2R5tA7bxsgFxaOs6r8iFTOsRD4dBeTYB6SWtaaBPvCz
MKphuzRXrqA75BYnUf4lXjaXnYTP/PnUmD7ATET0a94gGWu3imm7o7WQBuyMyfjd
vDP8l0VCJlj4TYMS3dPc/Qzg6bjs1hICas7FbJaRg8mcURuw5pzuk8mMOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5Ern/DauI0tdCMtppG4wcDHfpzMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/b/Ctb+
D5Ha0dfHk8IM7h5nFL+xZ5j3/OX6oWy7WaSl2gVafZ03OxXRtfy0LiLKoFiHISuz
FawK105NYVcSO5MVsIRuTIIGwj2dwXy/vNCir+e8FkjsBUzxEROzs42AWO6N31EP
geAcGUncaiD1hiWRDRuf0vZ2JivE6Dw5bisMOwMjYwDxyWOkD/1ETGXoEWFDOy9U
0m/W4BbMGWuHmUN/hhaAcGtdTfdr05JtaoRDy29jdQ+u4RBYnUj5FhscIloDPOaJ
jRuE2xZQKyVRNe1VOx0dXlxYveXOeP4rPn9SBg3ThmjHFMbUdWB9iY6dX97ug6r0
C5+FnxA13yQwPw==
-----END CERTIFICATE-----
Generated at Wed Jul 15 14:48:14 2026 by rpki-client