Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: /Ps90dVDPUPS/a9Ui5eUNakLnVO7ylZ/KWifL9mmLdg=
Subject key identifier: C1:A9:BB:F2:37:C4:62:9E:EF:D5:FE:F8:3F:29:76:37:1A:74:C5:48
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01A12240F4F5A3FDA9B9DC4E38E0AC73B171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1AE7
Signing time: Fri 09 Oct 2026 20:00:44 +0000
Manifest this update: Fri 09 Oct 2026 20:00:44 +0000
Manifest next update: Sat 10 Oct 2026 20:00:44 +0000
Files and hashes: 1: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
2: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: xsadZmv0a/UFJ0jdud91Fuk/A9lvfhNO0Inn2Ff3hDI=)
4: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
5: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
6: gpoqRt5We_0V7w8-mjWPRATSD40.roa (hash: DavIHiYGBCjYNTFkfpe9+EL42EgV1WDbQsWlNQR/UhQ=)
7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:40:f4:f5:a3:fd:a9:b9:dc:4e:38:e0:ac:73:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Oct 9 20:00:44 2026 GMT
Not After : Oct 10 20:00:44 2026 GMT
Subject: CN=c1a9bbf237c4629eefd5fef83f2976371a74c548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:11:66:68:10:d0:52:6c:99:3c:3b:a1:cb:
b0:1b:fc:a6:8f:00:a2:33:93:da:15:ce:3f:76:0e:
2a:77:52:5c:e3:69:3d:f4:fb:82:a6:35:46:6d:60:
2d:9f:50:ce:b4:e2:2e:d2:94:40:1a:cb:07:22:a0:
29:76:ae:90:8d:0a:30:cf:b8:5b:89:2d:fd:97:d0:
8c:f7:ed:be:56:54:db:3b:90:d8:91:e7:a9:0e:ba:
89:05:f1:6d:1e:59:b3:b2:e2:f7:c1:ac:f7:ce:10:
9c:de:f9:cd:d0:2c:37:68:bb:c1:c6:14:7c:4c:24:
28:69:ca:0a:83:e9:69:a1:c4:46:f8:a8:30:77:d5:
51:bf:74:fc:fb:9c:e7:b4:60:73:f5:06:10:ff:1d:
72:5e:94:f9:77:b7:40:de:04:df:cb:a5:a3:25:30:
23:f6:d5:6f:4f:38:18:a4:ce:8f:9a:27:4b:e6:90:
9b:90:db:65:dd:17:cb:3d:35:bc:ef:eb:c8:7a:db:
1b:ce:85:a5:dc:ae:a8:bc:26:2b:13:ca:f6:8b:d3:
0c:22:39:26:e3:f1:16:47:67:11:d2:7f:74:ac:0d:
50:c0:57:4c:7c:1d:60:0f:25:c3:d9:20:96:28:ec:
75:b6:2f:1d:2f:0f:9e:ff:e5:d6:61:62:00:3a:1f:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:BB:F2:37:C4:62:9E:EF:D5:FE:F8:3F:29:76:37:1A:74:C5:48
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:e5:a6:6c:b5:ac:1a:47:69:5e:5c:af:a7:42:2f:f3:7e:
96:84:40:24:94:a2:dc:ba:2b:93:49:92:1d:6b:6c:e6:bd:3b:
21:83:8e:21:43:a0:25:69:c8:a4:ce:1a:94:c1:f5:ff:03:5a:
b5:bb:b0:bd:83:a3:d4:2d:79:e4:85:dd:28:3b:d8:cf:5d:a5:
a7:6e:43:c4:50:43:0f:7a:8d:b0:c1:e4:9c:36:27:8d:35:77:
94:0b:c2:7d:43:b0:be:7d:b1:a2:05:3a:71:a5:46:d3:67:b8:
ab:59:ff:f8:f7:6e:46:71:c0:b7:a0:58:9f:0b:e6:de:4c:85:
19:d4:1e:8a:ee:44:b2:f7:91:7a:7e:28:b2:17:23:eb:2d:4a:
33:6b:bd:98:54:26:cf:b6:29:a6:e2:1a:f6:39:58:78:f9:4c:
b1:cf:d8:3b:d8:44:1a:70:94:5c:86:e6:f5:5c:b9:12:a3:13:
f0:61:9f:39:6a:53:01:be:b1:d1:47:e3:73:72:50:ff:ab:4d:
95:1f:7c:48:1a:42:0d:b2:80:4b:77:15:94:95:5f:e4:eb:fa:
db:45:71:5d:96:a8:2c:ee:c3:09:1b:3f:f2:44:00:4c:2a:2d:
fb:87:b0:ba:0b:fd:b9:02:dc:43:f6:35:eb:26:4d:ee:de:42:
bc:2f:0b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiQPT1o/2pudxOOOCsc7FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjYxMDA5MjAwMDQ0WhcNMjYxMDEwMjAwMDQ0WjAzMTEwLwYDVQQD
EyhjMWE5YmJmMjM3YzQ2MjllZWZkNWZlZjgzZjI5NzYzNzFhNzRjNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjwRZmgQ0FJsmTw7ocuwG/ymjwCi
M5PaFc4/dg4qd1Jc42k99PuCpjVGbWAtn1DOtOIu0pRAGssHIqApdq6QjQowz7hb
iS39l9CM9+2+VlTbO5DYkeepDrqJBfFtHlmzsuL3waz3zhCc3vnN0Cw3aLvBxhR8
TCQoacoKg+lpocRG+Kgwd9VRv3T8+5zntGBz9QYQ/x1yXpT5d7dA3gTfy6WjJTAj
9tVvTzgYpM6PmidL5pCbkNtl3RfLPTW87+vIetsbzoWl3K6ovCYrE8r2i9MMIjkm
4/EWR2cR0n90rA1QwFdMfB1gDyXD2SCWKOx1ti8dLw+e/+XWYWIAOh8rdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGpu/I3xGKe79X++D8pdjcadMVIMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTDlpmy1
rBpHaV5cr6dCL/N+loRAJJSi3Lork0mSHWts5r07IYOOIUOgJWnIpM4alMH1/wNa
tbuwvYOj1C155IXdKDvYz12lp25DxFBDD3qNsMHknDYnjTV3lAvCfUOwvn2xogU6
caVG02e4q1n/+PduRnHAt6BYnwvm3kyFGdQeiu5EsveRen4oshcj6y1KM2u9mFQm
z7YppuIa9jlYePlMsc/YO9hEGnCUXIbm9Vy5EqMT8GGfOWpTAb6x0Ufjc3JQ/6tN
lR98SBpCDbKAS3cVlJVf5Ov620VxXZaoLO7DCRs/8kQATCot+4ewugv9uQLcQ/Y1
6yZN7t5CvC8LCw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:38:24 2026 by rpki-client