Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: ho6eb+X5KvUUIulyb6ug+yhMJ+LflCsIHkVZKos2aC0=
Subject key identifier: 16:21:71:80:77:3D:55:FB:BF:15:75:36:7D:13:1C:6A:2B:2A:A9:81
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019F27DAE28F7A0EB94074A6716EB20D62BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0656
Signing time: Fri 03 Jul 2026 12:01:23 +0000
Manifest this update: Fri 03 Jul 2026 12:01:23 +0000
Manifest next update: Sat 04 Jul 2026 12:01:23 +0000
Files and hashes: 1: 92BWX1zbWyo4TMOfNb_tzSoWbCY.roa (hash: c0Yuqp+qbpUBM3UZdmZmEFvrAfboFIavdSOeFXW5BoI=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: BO5Ih9Naf5loYpEfQd3VUISmf3FzVfPe3j/ExEbNJMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:da:e2:8f:7a:0e:b9:40:74:a6:71:6e:b2:0d:62:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jul 3 12:01:23 2026 GMT
Not After : Jul 4 12:01:23 2026 GMT
Subject: CN=16217180773d55fbbf1575367d131c6a2b2aa981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:00:3c:1a:38:86:4d:c8:46:f6:15:fb:68:
e8:f1:70:63:90:bb:9b:a5:71:50:d8:95:d0:82:9c:
99:f5:5f:69:e1:2a:58:d5:ba:b1:3c:4c:48:f2:9d:
8d:75:73:48:35:bd:2b:af:7e:13:cc:28:f2:f6:9f:
c5:89:02:f2:ba:3d:a2:5a:94:3d:69:88:2e:1d:c4:
ad:c6:a8:7b:b8:09:2a:16:a2:b8:50:33:a0:43:a7:
92:a0:82:42:00:64:40:9f:cf:71:51:d5:b9:8f:d4:
09:b3:90:fd:7b:24:ba:da:77:20:83:8c:0e:90:f7:
21:7a:08:63:7f:bf:7d:b5:01:e8:67:42:e4:4d:b7:
7e:d0:43:94:79:97:b3:36:54:8e:b2:3e:f4:c5:44:
95:05:e4:8b:d2:94:bd:fe:6e:c5:25:b4:3f:26:5e:
23:55:f9:fd:f0:f7:72:e6:0f:64:b7:07:c8:2d:7f:
10:bb:c3:e5:46:60:2a:f9:ae:2c:8e:48:98:22:3f:
52:09:0a:16:b5:75:7d:1a:a4:45:9b:04:fd:4d:34:
3b:da:ed:56:0f:8b:27:3f:5a:e7:33:3f:a6:96:e4:
c9:60:11:59:29:71:7b:b6:de:ab:64:c9:d6:6d:e7:
bb:c2:fa:e7:bf:af:de:bc:72:97:3d:46:64:9f:89:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:71:80:77:3D:55:FB:BF:15:75:36:7D:13:1C:6A:2B:2A:A9:81
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:08:65:fe:6c:02:9b:fd:39:86:85:50:bd:67:23:8f:9f:f2:
17:ad:44:fe:0d:75:80:d9:71:1f:30:76:5d:c8:7e:29:91:57:
f0:a6:71:b5:2b:37:bc:a4:93:12:95:a1:95:3c:f1:80:b0:bb:
00:f5:da:65:68:38:90:b4:25:29:d5:31:d0:73:07:00:f2:d4:
2e:89:3b:46:6c:d4:ea:c7:6f:0d:c1:b4:a1:58:22:3f:11:c7:
3d:3f:ff:e8:96:3b:a4:77:95:29:ff:33:e7:94:eb:30:da:76:
1a:29:1d:c7:a1:70:23:43:f5:3c:52:d9:5e:4f:04:96:82:f1:
a6:73:8a:63:b6:a1:31:c9:e5:32:b1:1a:c9:58:01:f9:26:39:
4a:f2:ec:ff:e6:f0:91:cd:b9:c7:1f:86:9e:75:0c:2e:a3:8c:
00:17:92:11:7c:d8:3f:8f:65:90:b9:54:b4:36:de:d3:15:8e:
5b:20:08:37:09:42:d6:6d:63:9e:90:33:3a:f1:33:8f:26:d2:
5c:0b:3c:cd:0e:9f:c4:89:f5:02:16:22:9d:63:64:36:24:a2:
b5:80:85:b1:03:53:46:59:72:d7:4c:16:13:3a:89:e1:5f:53:
87:8b:1e:40:fd:db:00:1d:7f:94:0b:ef:77:1a:33:20:a1:86:
bf:4f:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:27 2026 by rpki-client