Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: rR78zLXUeGeSkxfbPOMa6k4vBOs2duWdTRC1HEuVk3s=
Subject key identifier: 01:A8:0D:55:72:5E:70:E8:84:A7:E9:A3:4F:C0:FE:6F:D5:3D:C9:3A
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019D390A5A89BDA4F7D657E8162DC7CA1287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0555
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: k+4Lt0PG+DtTKmk1sIgTDlODNPzdrsYjGSVE6XKhySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5a:89:bd:a4:f7:d6:57:e8:16:2d:c7:ca:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=01a80d55725e70e884a7e9a34fc0fe6fd53dc93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:79:82:95:b3:8f:a0:37:0a:47:ac:8e:e2:
a9:d9:f3:d4:55:9a:a0:7b:54:5b:84:7f:df:26:bc:
83:56:5d:de:60:58:c7:ad:71:bf:4e:35:b2:46:eb:
96:28:64:6a:ae:85:d9:be:52:62:6e:dc:e4:f0:2b:
f7:69:a7:f1:60:31:52:9b:5d:6c:6e:9b:fa:e8:7a:
dc:5a:00:04:f6:75:ce:09:23:bc:fb:bc:a9:04:2c:
cd:2a:59:82:47:e5:55:c1:6a:38:73:79:1b:65:6f:
60:cd:4e:b3:45:7e:00:52:14:f5:d9:d7:51:c4:87:
a8:10:0b:dc:40:df:57:ea:0b:dd:a2:19:43:4d:e8:
a2:f4:aa:72:2c:4e:a3:c8:cd:6f:bb:6a:d2:44:59:
72:29:b4:ee:73:aa:26:db:83:69:eb:13:08:c7:1c:
af:ba:53:d7:61:0b:d3:6e:28:6f:4a:c7:23:83:6c:
5f:d4:c6:9e:4f:92:57:4b:78:4c:74:7a:f6:24:24:
8a:f0:48:67:8d:93:93:97:83:b2:8a:7f:de:2b:3f:
59:bc:f4:df:62:c2:1f:ce:03:09:63:20:ba:7c:09:
48:71:43:6d:c5:b7:d3:11:ae:8e:3d:73:46:b5:33:
90:ce:56:e0:8c:00:d7:d2:34:1b:56:b3:1e:c4:3d:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:0D:55:72:5E:70:E8:84:A7:E9:A3:4F:C0:FE:6F:D5:3D:C9:3A
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:17:e9:8a:9d:c4:2a:08:79:98:e7:32:db:df:e2:54:ca:
6c:88:a7:d1:96:f9:db:10:ed:02:1e:33:df:5e:6a:0a:e8:4f:
d1:05:fa:c9:7c:7a:66:a6:d6:da:43:fe:17:2d:05:3f:06:51:
93:cf:1e:a3:f1:e2:f8:5f:8b:ef:8b:ce:b0:f2:00:8b:b2:49:
89:40:fe:21:63:25:99:3b:26:4a:d7:91:ff:ed:4d:b2:a3:84:
ae:ec:e9:c1:03:df:72:5f:8a:d2:d2:b0:53:e0:40:3c:b9:18:
6f:71:d5:4d:25:6c:bb:c1:c9:14:94:3f:3d:20:39:69:1f:3b:
d8:11:58:ec:90:9f:ef:ab:2c:cb:2c:7e:b8:4f:a2:a0:17:7e:
ae:6e:e8:0f:d2:bc:b5:bf:11:b8:88:c6:d4:f5:1f:42:7b:e3:
db:8c:9e:63:90:b9:b0:4e:62:34:96:f2:3f:91:0e:82:93:19:
94:b2:39:70:f3:87:e5:a5:b9:85:b4:2b:0a:d0:1a:35:c4:3d:
e0:bc:59:8e:8d:e2:27:18:9a:c9:19:71:3d:ac:17:ae:fa:60:
f9:c6:a4:d2:45:2b:1b:4e:12:af:69:5b:0a:40:af:3f:87:50:
33:1c:a9:d6:d7:33:a4:c6:bd:c3:31:ce:3b:ff:57:fc:87:e4:
0b:06:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:19 2026 by rpki-client