Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: YqwV0WXY4f8VVjjLyqm1QIYyRRg39DMKZxg7a+fqYC0=
Subject key identifier: 69:16:AC:AB:6A:7F:DC:0D:BE:D0:E1:19:BD:91:64:21:15:EC:A8:81
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019E2A70025640B1AF9E82D041C027930DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 05D2
Signing time: Fri 15 May 2026 07:00:44 +0000
Manifest this update: Fri 15 May 2026 07:00:44 +0000
Manifest next update: Sat 16 May 2026 07:00:44 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: ++vAs2DEabZJ3/HN32Zxa59YounZaVeINxqSosjmwR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:02:56:40:b1:af:9e:82:d0:41:c0:27:93:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: May 15 07:00:44 2026 GMT
Not After : May 16 07:00:44 2026 GMT
Subject: CN=6916acab6a7fdc0dbed0e119bd91642115eca881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:6c:10:ec:69:35:5e:9c:1e:61:b7:95:f5:
1b:40:30:63:82:71:a8:08:a4:cb:6e:0b:41:95:a6:
18:cd:a5:35:26:c3:b2:6e:76:1f:eb:ad:7f:7a:b5:
fa:96:dc:66:d0:f6:9d:9c:f8:25:ae:9c:78:7c:cf:
7f:df:ff:af:ab:86:41:3c:d7:1b:f1:44:38:ad:89:
f1:a0:3f:19:c9:a4:7c:60:db:3c:b6:a4:e9:94:98:
ed:55:cd:eb:fa:00:9f:62:33:66:5c:59:00:56:60:
3f:d2:c3:3d:8f:08:00:de:71:bd:b2:f0:15:54:2e:
7c:96:4d:d5:a4:ad:64:b9:bb:f4:6f:21:c8:d9:df:
ba:cf:fc:0d:94:7a:e6:96:10:4e:b6:41:d4:b0:26:
9d:42:07:be:f0:eb:4e:36:49:fd:72:bd:c9:d1:39:
4d:1c:2e:58:fd:25:aa:04:89:33:c0:cc:f3:ea:45:
7c:b0:75:45:70:77:69:71:f9:e3:48:49:52:bb:32:
2e:0e:bd:07:b6:73:30:c1:c1:e4:ea:7d:83:a1:b3:
e2:cd:d2:12:05:b7:f3:e9:4f:29:42:f9:5d:6b:c3:
d5:45:c9:5d:41:47:b1:f7:3b:51:8c:8c:62:55:3b:
04:4e:31:9c:33:cc:8c:76:49:fb:d8:cb:af:82:69:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:AC:AB:6A:7F:DC:0D:BE:D0:E1:19:BD:91:64:21:15:EC:A8:81
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:25:32:50:88:50:c2:e5:17:9b:db:9d:7f:62:22:f6:18:a7:
59:6a:c4:b5:2e:e2:be:ff:c5:25:86:9d:92:5a:df:fc:cd:ca:
41:06:09:cf:0d:cb:9c:6f:50:09:f4:33:17:6f:85:56:9b:39:
42:79:62:59:a4:a5:78:51:e0:26:61:ac:5a:51:bc:9a:2c:ad:
7b:9c:cd:e9:e6:ac:7b:19:96:f3:cb:70:89:9f:7a:b5:2f:8f:
a5:3d:db:12:0d:49:93:8e:3a:45:73:fc:08:3d:d1:41:26:e9:
1a:91:9b:6e:f0:22:f5:41:c5:2e:fa:8f:b3:b4:de:7d:c7:18:
7d:49:79:d3:78:81:57:bf:a9:cd:78:29:88:ef:fb:e2:e2:61:
4c:1b:ea:f4:98:0f:55:3e:d3:79:b1:97:a9:6a:89:ed:49:6c:
28:fc:6b:b7:dd:64:47:a9:3c:e4:c7:6e:95:5e:9a:c5:47:0e:
d9:be:8d:1d:22:55:56:1a:90:5e:d7:1c:55:33:e3:de:a4:83:
88:81:3b:aa:8c:61:7a:7b:0e:1f:2d:0a:37:80:74:58:09:6f:
a5:2c:0a:c4:53:d2:0e:89:96:b3:4f:72:9b:90:a4:0e:3b:23:
fc:33:74:0b:48:88:33:9f:e9:18:f9:dd:9f:89:78:00:4d:ae:
7d:54:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:42:22 2026 by rpki-client