Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: Ki64nBKVrmA5uzKp4/hag8jaAp+y4xam6FSq6LkFMoM=
Subject key identifier: 9C:FE:29:F9:E3:63:E3:64:2B:24:B0:0D:ED:45:67:C0:CE:8F:6F:D4
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019D3789A032DDB5C0B98BCA8C22244E9EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 03:00:59 +0000
Manifest this update: Sun 29 Mar 2026 03:00:59 +0000
Manifest next update: Mon 30 Mar 2026 03:00:59 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: UP14QUpH1niUYQfVyHflUa4Ch5hIq6wOMD4AM7lmN1E=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a0:32:dd:b5:c0:b9:8b:ca:8c:22:24:4e:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Mar 29 03:00:59 2026 GMT
Not After : Mar 30 03:00:59 2026 GMT
Subject: CN=9cfe29f9e363e3642b24b00ded4567c0ce8f6fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:9e:25:cc:df:a1:74:bf:ea:6c:2d:b9:09:
d4:af:22:6a:30:07:95:b6:e8:4a:0f:a7:9a:51:d3:
bf:bd:86:28:1a:e4:8a:e7:b9:76:25:b3:d9:6a:08:
2f:00:e0:71:77:46:6c:a2:dc:69:b7:a0:f4:95:1b:
ff:76:71:6f:a0:70:04:a5:49:26:11:06:73:04:19:
cd:31:f4:e1:6e:98:b5:22:24:a7:13:c5:1c:3d:83:
e3:7c:36:5c:3e:a3:a0:5f:77:c1:99:bb:dc:0b:c5:
e8:dd:3a:2d:d8:3d:ca:00:f7:11:f9:fb:cf:4e:14:
c7:10:d5:e6:5a:ac:46:4f:ed:91:b7:a7:43:b5:e0:
ff:e3:da:63:b2:ef:66:3b:68:b7:42:6a:81:04:00:
b1:f8:b1:dc:db:ea:ae:8e:e8:7a:c0:00:81:68:d3:
cc:20:a0:87:a7:0b:f3:9d:52:fd:b3:63:fc:8d:fe:
b1:90:f0:42:52:42:7e:ed:b9:23:34:33:b5:bb:ad:
4b:c9:46:df:46:61:a7:be:d6:2b:f6:f0:5a:f1:e9:
55:df:9b:16:a2:79:cf:70:b7:9e:f3:3f:c3:fd:06:
d8:47:1f:c1:f4:94:8c:3c:c0:bb:fd:0a:39:24:35:
f3:03:83:69:6f:d0:2a:ca:40:01:3a:cf:ad:72:9c:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:29:F9:E3:63:E3:64:2B:24:B0:0D:ED:45:67:C0:CE:8F:6F:D4
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:06:66:95:7f:12:e6:d1:45:12:85:1d:a1:b2:76:71:ed:a2:
31:94:b9:f7:38:9f:3b:77:28:a6:d3:9d:92:5a:43:6d:4a:e3:
c5:40:06:b3:21:76:83:d2:97:fb:91:2a:ae:15:ca:84:02:74:
09:de:36:ff:ab:c4:26:84:06:38:4f:29:71:81:a0:83:70:92:
af:29:de:da:c8:8f:af:d5:8c:dc:36:b5:6e:87:76:bd:c6:46:
74:63:85:c1:4a:6d:c7:b1:ed:ce:90:4f:85:c1:d7:ca:8a:1a:
b0:80:34:e9:73:f0:93:26:e4:6f:fc:a2:a7:7a:8b:65:b8:4c:
9b:99:ca:2f:ba:ba:f0:e9:8f:1d:48:4f:05:bb:bf:fa:9f:0c:
51:99:5f:be:bb:61:a9:ba:ff:0c:3a:26:84:ed:2e:52:5e:ce:
c7:c8:7b:10:80:7f:ec:38:54:58:1e:bb:7a:8c:3f:67:9a:22:
d0:de:02:d1:de:37:ea:07:60:b3:90:4c:55:85:d0:74:eb:d8:
ab:bd:82:fa:8c:dd:8b:28:4c:67:93:d6:bc:82:a2:36:8f:82:
3d:7d:32:cb:40:07:c5:a9:b9:4e:03:2b:27:f2:0c:d1:1e:42:
c4:8f:d6:0f:0b:57:1a:38:b8:bf:df:bd:87:b7:96:1a:9c:2e:
61:05:f0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iaAy3bXAuYvKjCIkTp7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYwMzI5MDMwMDU5WhcNMjYwMzMwMDMwMDU5WjAzMTEwLwYDVQQD
Eyg5Y2ZlMjlmOWUzNjNlMzY0MmIyNGIwMGRlZDQ1NjdjMGNlOGY2ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3+eJczfoXS/6mwtuQnUryJqMAeV
tuhKD6eaUdO/vYYoGuSK57l2JbPZaggvAOBxd0Zsotxpt6D0lRv/dnFvoHAEpUkm
EQZzBBnNMfThbpi1IiSnE8UcPYPjfDZcPqOgX3fBmbvcC8Xo3Tot2D3KAPcR+fvP
ThTHENXmWqxGT+2Rt6dDteD/49pjsu9mO2i3QmqBBACx+LHc2+qujuh6wACBaNPM
IKCHpwvznVL9s2P8jf6xkPBCUkJ+7bkjNDO1u61LyUbfRmGnvtYr9vBa8elV35sW
onnPcLee8z/D/QbYRx/B9JSMPMC7/Qo5JDXzA4Npb9AqykABOs+tcpwjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz+KfnjY+NkKySwDe1FZ8DOj2/UMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwZmlX8S
5tFFEoUdobJ2ce2iMZS59zifO3coptOdklpDbUrjxUAGsyF2g9KX+5EqrhXKhAJ0
Cd42/6vEJoQGOE8pcYGgg3CSryne2siPr9WM3Da1bod2vcZGdGOFwUptx7HtzpBP
hcHXyooasIA06XPwkybkb/yip3qLZbhMm5nKL7q68OmPHUhPBbu/+p8MUZlfvrth
qbr/DDomhO0uUl7Ox8h7EIB/7DhUWB67eow/Z5oi0N4C0d436gdgs5BMVYXQdOvY
q72C+ozdiyhMZ5PWvIKiNo+CPX0yy0AHxam5TgMrJ/IM0R5CxI/WDwtXGji4v9+9
h7eWGpwuYQXw8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:07 2026 by rpki-client