Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: Dy/tkHZkYDoBiw7d9ZltVW+UGCtFfqjR4yXHggIqj7s=
Subject key identifier: AE:D8:7D:83:F3:68:9B:FB:89:5A:92:A6:1F:F0:3D:A2:76:5F:19:5B
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 019D371B36ECF9116D32BB43FF8B4B08E067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: M23Q2ed9RnWA+NrCIiceO0vqTdBUkbOf0+r8pxXV8s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:36:ec:f9:11:6d:32:bb:43:ff:8b:4b:08:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=aed87d83f3689bfb895a92a61ff03da2765f195b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:61:ab:3d:78:84:70:52:ae:df:f9:b6:78:
cd:20:cc:d7:d3:93:44:ca:a7:b4:e5:6f:93:9e:1f:
9a:ac:40:c2:47:22:8b:ae:5e:94:5f:fd:98:ed:99:
e6:3c:8d:af:e1:a6:ab:10:88:42:94:c6:9b:a0:40:
06:67:35:2e:21:47:fc:d2:06:fe:fd:ad:97:a6:b2:
13:4f:a9:4b:e3:e6:ac:38:1b:a6:1d:3d:ff:5d:92:
dc:73:f2:1d:3b:ff:9e:3a:51:98:37:8d:bb:14:23:
be:c7:db:a4:79:3c:35:1c:fd:05:ff:74:c9:40:43:
5f:66:7c:2f:54:95:e9:e6:9f:4d:cb:b9:e3:fe:bb:
b4:6b:01:7d:61:5c:b6:f1:d4:aa:43:5f:84:bd:b4:
de:dc:43:c1:f4:a3:44:9a:09:ef:11:7b:68:28:11:
c3:10:60:be:22:c2:c1:61:b0:3d:b0:6e:a3:bd:28:
41:ae:3b:8d:8b:4d:72:b2:9e:dd:4b:57:60:35:d1:
f7:16:3e:69:c2:96:23:6d:0b:e4:dd:d8:c1:6f:13:
52:57:95:89:f6:4a:b2:9a:4e:d0:90:3b:c4:15:0e:
f7:4e:ed:c2:ab:59:5f:d8:51:da:4a:9a:0b:e0:99:
7e:89:6c:03:29:79:ed:7a:4c:8d:6d:cb:bf:0a:07:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:7D:83:F3:68:9B:FB:89:5A:92:A6:1F:F0:3D:A2:76:5F:19:5B
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:ff:18:cd:16:29:15:61:85:04:63:cd:86:33:89:94:c9:
50:e5:02:c6:cf:f7:ea:f8:74:46:26:ee:68:e3:a5:9f:4f:1f:
1c:69:6e:a0:7c:d3:5e:d9:25:de:02:b1:63:31:4e:21:68:79:
85:61:cd:81:c3:80:05:fe:fa:84:5d:f4:0a:00:04:7d:5e:3c:
ec:1c:2e:7e:66:ba:09:f1:29:03:9a:84:65:27:0f:4c:cf:7f:
57:75:28:c5:77:e3:49:54:f3:53:05:9e:04:d2:7c:bb:91:ee:
d1:44:0b:c3:aa:01:c9:7e:11:10:94:a6:3e:47:69:45:7f:cb:
e0:92:e9:fd:a1:a6:f4:08:cd:93:b1:3d:aa:be:6d:70:3b:27:
e7:8c:27:d5:14:72:59:e8:cd:96:4c:07:45:eb:a2:02:3a:75:
8a:75:83:1d:af:97:2c:89:72:f6:fc:63:de:46:9e:4f:aa:7f:
0d:01:db:2e:f9:1a:d0:1b:37:fe:08:47:b7:36:a1:77:4f:ef:
4d:a1:ea:0c:01:51:58:2f:12:2b:45:2a:ad:c9:b8:da:cc:2d:
f3:2d:5f:8e:6f:3a:2e:72:03:3e:1f:e6:2c:1a:34:4e:47:99:
b8:0d:c2:8e:a4:9e:a6:d4:f4:ab:a9:3d:d5:64:dd:46:e8:98:
6e:ee:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:06 2026 by rpki-client