Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: LamO4hjn3yqadeTBslum6W3dLOUb0/pOCgm/OL7ci9w=
Subject key identifier: AE:AC:EF:A3:8E:A5:3C:95:AF:03:B8:A2:08:7F:92:56:F4:4C:8A:5C
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019D390A2B010B67509576A52C0822E61B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0F73
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (hash: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk=)
2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: bNMBoi/XhPUrphCBjmmdkytnL/eQP8FAz/RLk0GPhfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:01:0b:67:50:95:76:a5:2c:08:22:e6:1b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=aeacefa38ea53c95af03b8a2087f9256f44c8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:1c:13:38:cc:65:5a:b0:65:52:22:5a:6c:
5a:3d:f6:08:40:a4:e9:e7:e6:8e:83:b7:28:35:06:
d6:aa:68:6b:33:86:2c:ff:75:73:3c:a1:6f:20:c4:
3c:db:f9:78:ac:15:28:08:94:a6:78:d4:f5:63:e0:
bd:78:88:00:5b:b0:ac:64:1b:08:87:01:bc:f3:4b:
b9:01:aa:c3:b7:2e:f6:8e:c3:1b:d7:44:cb:fe:93:
0c:6b:25:7b:4f:0f:76:a1:7e:bd:a3:bc:15:19:b7:
f4:78:b0:50:15:fa:ae:5c:e0:c0:a5:ad:fb:43:e2:
6d:ed:df:66:80:92:46:d2:5e:0a:0b:2c:6c:72:e0:
20:e7:2e:e2:22:db:b9:73:bc:f3:a0:75:c5:f8:df:
10:55:ae:2e:8c:98:cd:c3:56:45:67:d9:b0:da:c8:
81:78:f7:09:1c:2c:0a:1c:73:f0:ff:2b:79:fc:28:
92:4a:f0:51:2a:b2:93:bd:ae:e8:7e:45:05:11:bc:
b2:0d:6f:32:ee:d6:af:01:a8:7c:d1:2a:9d:73:31:
f7:80:4b:5e:32:8b:92:5d:d1:46:63:5e:f0:30:91:
74:46:07:ac:1d:6c:2d:11:ba:6e:b6:cb:a5:63:b6:
88:51:91:2c:aa:80:f7:41:23:ea:40:78:83:c1:29:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:EF:A3:8E:A5:3C:95:AF:03:B8:A2:08:7F:92:56:F4:4C:8A:5C
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:dd:5c:c7:e0:fe:94:1a:0e:a4:14:6c:d4:83:8f:35:ad:
d8:14:99:5b:c0:e0:1f:11:f4:61:3f:db:99:f2:d4:87:8f:f8:
4e:df:08:f7:22:3f:82:a4:1f:aa:53:80:d6:c9:76:e1:4e:20:
a8:3b:e7:d5:1c:13:75:91:ed:40:4a:11:00:81:1d:eb:22:22:
c2:22:37:e6:8a:f0:19:b2:c5:fb:36:26:5e:c4:fb:95:b5:11:
1a:4d:65:10:b2:28:d7:b5:76:7e:ce:fa:a9:a5:0e:48:7f:cc:
50:d6:81:ee:e1:89:8a:70:2f:eb:64:1b:ad:dc:ed:61:9d:83:
7a:7a:7c:50:53:b4:13:51:25:82:81:9c:d8:1f:04:ae:35:cc:
e8:a7:6c:7f:03:fe:2c:3e:a7:46:9f:a4:46:60:af:0d:f0:e1:
d5:90:17:20:13:c0:84:6d:55:58:f1:3c:ff:e2:60:24:fe:a1:
33:44:0a:b2:84:5f:5a:d3:89:04:ce:c0:df:31:e1:4a:af:5e:
ae:86:ad:41:45:78:c2:f8:4f:3c:10:f6:aa:5b:87:d4:9d:c8:
38:44:60:39:46:de:9d:a2:de:56:e3:41:38:a0:d6:c1:fb:26:
3a:b9:01:1d:a3:26:e8:6b:b3:5e:e9:b5:3f:68:04:62:c4:8f:
78:15:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:57 2026 by rpki-client