Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: bQoBaE/oOw1HrQlwxXhETNIe6atYx4kEDQ9lAhoS0Nk=
Subject key identifier: 66:AA:B4:6A:94:27:85:4B:C4:42:9E:F7:75:C3:C2:16:E8:B9:D5:1B
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 01A185D18F791CAFC7AC2BD524EAF8CD2EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 04:01:05 +0000
Manifest this update: Thu 29 Oct 2026 04:01:05 +0000
Manifest next update: Fri 30 Oct 2026 04:01:05 +0000
Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 8IfVKY/jtW/NgHqsZmEYQ+g4HXwd8uIest1SaJJzHd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:8f:79:1c:af:c7:ac:2b:d5:24:ea:f8:cd:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Oct 29 04:01:05 2026 GMT
Not After : Oct 30 04:01:05 2026 GMT
Subject: CN=66aab46a9427854bc4429ef775c3c216e8b9d51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:91:48:32:60:0f:a7:fc:ef:43:fa:91:16:
7d:04:74:bd:a7:9b:c3:fe:4f:07:5b:b3:24:8a:7c:
bf:af:07:7f:88:cc:a2:c9:45:05:93:cc:91:0c:a3:
41:8e:ed:35:23:31:3b:60:fd:88:93:8e:51:ce:ac:
97:d1:6c:39:c1:e4:c7:67:ab:82:ea:92:94:c2:0b:
fe:7e:70:3f:14:56:7d:28:ba:0b:5d:41:4f:55:35:
83:ba:4f:2d:00:6a:d3:c3:63:0b:e9:fb:56:2a:e5:
bd:dd:d3:b0:27:d0:b7:aa:3d:5f:28:d5:86:fd:55:
8e:e9:00:95:74:2e:5d:4d:87:01:b4:ef:37:62:37:
19:b0:d4:9c:5d:e1:08:39:9a:f3:6a:b6:cc:22:23:
9c:9f:ca:a7:a5:b2:17:1d:80:ad:e1:a6:15:72:5b:
f7:3f:f4:d7:11:fc:17:20:91:93:55:b6:1e:cc:36:
f5:93:24:a1:ed:56:23:0f:ee:b9:b2:40:be:8c:bc:
7b:bb:95:9d:49:81:b0:6b:fb:c8:05:74:71:4b:80:
4b:77:cb:ec:ba:31:1f:f3:3f:d4:a2:ae:69:87:c4:
b9:3a:85:7e:83:53:1a:25:75:01:a1:bd:a4:a5:b0:
22:ce:a2:38:a0:ad:28:96:26:1d:f2:eb:fb:f6:0c:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:B4:6A:94:27:85:4B:C4:42:9E:F7:75:C3:C2:16:E8:B9:D5:1B
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f8:1f:c0:17:f8:ae:88:f5:dc:15:bd:87:fa:3b:a8:6f:11:
1d:2a:90:0c:6c:c8:d0:62:9a:be:64:f2:71:de:f2:81:86:54:
a6:36:4f:4b:0b:58:5e:85:e5:23:80:bc:e0:19:d0:24:48:d3:
d9:2f:69:a9:b0:14:2f:d3:46:e1:52:92:cd:21:2c:99:c7:fe:
05:69:b8:d6:fe:7e:ee:b5:64:5e:90:1d:8e:9e:15:8e:58:0a:
0c:7d:0b:5d:2d:de:37:e6:e0:cb:39:91:cd:96:e9:4b:e9:6f:
b9:91:47:4c:c7:cc:5c:f1:e0:d3:0b:8e:af:bc:21:4d:d3:cb:
80:75:5d:5c:78:28:69:b7:2d:96:d5:6c:74:aa:07:14:20:e4:
53:7c:4d:e0:6a:3e:a9:1e:12:78:14:79:8e:ee:7b:67:b5:a7:
f7:52:fb:3f:b2:00:d5:65:d2:33:a8:60:54:60:8f:01:b2:5e:
d5:9a:3d:6b:f5:54:9d:60:98:da:64:1c:8d:df:2a:fe:23:6e:
a6:3e:ce:48:a2:55:48:38:63:01:85:cc:4f:1e:fd:ed:bb:c1:
b4:9d:12:f2:a4:1f:dd:4f:24:4c:df:e0:e1:cf:8e:cc:b2:0c:
b1:00:ed:8f:5a:c1:57:a9:c5:60:d9:1f:17:7e:83:eb:1e:7b:
b4:12:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:03 2026 by rpki-client