Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: EoG393n22Pz4ibH9FOmvMR5nPYBvjGUAkpIX+9GYwzQ=
Subject key identifier: D6:99:7A:74:AF:B8:58:CA:53:BB:BB:2E:B8:8C:BE:1C:EF:8F:3E:44
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 019D2884830D12A8857B6D2F99E30867E080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0FDC
Signing time: Thu 26 Mar 2026 05:01:06 +0000
Manifest this update: Thu 26 Mar 2026 05:01:06 +0000
Manifest next update: Fri 27 Mar 2026 05:01:06 +0000
Files and hashes: 1: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: S3ijYm32ZJlk3wUd1b4xHgxxag82W+9w9NbSHBAFndY=)
2: XWBsB_cZ5qidLCmlV0HYPquJmRY.roa (hash: K9lGKjaA0sTZUshIhYC2Vc0Nnn9645Zh7HW4fKMC9/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:83:0d:12:a8:85:7b:6d:2f:99:e3:08:67:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Mar 26 05:01:06 2026 GMT
Not After : Mar 27 05:01:06 2026 GMT
Subject: CN=d6997a74afb858ca53bbbb2eb88cbe1cef8f3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:af:7b:80:53:04:a6:63:b7:b6:dd:b2:a3:
cf:1a:1c:ca:d2:46:2d:13:0c:62:af:47:34:97:5b:
c3:be:d3:47:06:20:c4:90:99:e8:44:30:27:e4:5b:
dc:2e:0a:7a:e2:31:7b:ff:26:0a:d3:71:86:62:af:
64:93:fd:2c:fd:7d:17:20:5f:81:ff:3e:0e:90:a7:
44:be:f7:20:49:8c:8b:47:21:af:62:2d:aa:3b:11:
82:8e:71:1d:e7:6e:81:14:9c:3d:e7:00:e6:42:f9:
40:5e:5d:ee:60:82:89:57:72:b9:f6:21:45:80:21:
a9:64:1d:ab:6e:cb:b0:10:d6:ed:65:02:83:4b:43:
0a:80:15:9c:49:94:4f:66:48:f6:d7:8e:9f:4e:08:
e3:4f:19:08:87:9e:d1:75:88:ab:39:22:12:97:81:
0a:bd:37:b9:a9:ff:c4:be:38:a7:a6:3a:73:6f:6a:
e6:7d:44:c0:0e:f6:72:ce:a3:cf:13:25:38:61:f1:
7b:3e:64:53:3a:bb:3a:98:d1:80:7d:e5:d0:0d:db:
26:b0:01:cf:dd:63:ba:5e:46:a9:43:06:b0:dd:10:
15:cd:d2:52:b1:a0:76:11:84:55:9c:85:2b:e4:96:
ff:a4:5d:6f:1c:66:0b:0e:da:2e:83:4e:95:38:b2:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:7A:74:AF:B8:58:CA:53:BB:BB:2E:B8:8C:BE:1C:EF:8F:3E:44
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0d:47:b8:a1:61:47:d1:e5:b0:61:de:20:30:f0:42:b0:03:
95:d9:68:3e:5c:2c:14:37:3d:d0:c5:cc:c4:94:18:e4:66:a2:
95:4f:f6:d6:74:2e:b3:cf:e9:fb:d9:b3:aa:f3:82:34:7b:a1:
e8:a5:99:3f:a5:f0:86:03:d6:02:5e:27:77:6b:78:c0:e0:0b:
94:bc:48:df:c9:22:0d:39:3f:5f:b2:58:cd:45:c4:26:22:19:
d8:41:77:8e:c1:25:85:99:3a:1e:e4:4f:90:f3:4f:22:d4:03:
e4:c9:ed:29:2b:67:75:35:4a:cb:87:7c:f3:4e:9b:8b:ee:c4:
d8:25:4f:45:d4:5d:1b:0f:56:65:72:cb:00:2d:0d:43:6d:dc:
d6:b8:4a:39:d4:6e:c7:81:90:c2:c3:48:af:5c:f8:11:1b:9e:
c1:7e:60:2e:e0:a9:9c:92:87:0e:68:1c:a0:5b:93:50:d7:06:
8f:e7:de:8d:22:b2:cc:ec:f3:32:b6:e5:29:1c:a1:a5:3c:24:
57:2c:8e:49:df:6b:66:fb:14:d6:0a:5a:b1:69:31:28:15:46:
6a:d7:1e:44:0d:ae:56:00:be:44:ad:2b:00:73:e1:35:87:ff:
a1:e3:73:7a:d2:05:08:11:62:3e:ec:52:42:bc:7d:a5:c1:ba:
62:c8:30:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIMNEqiFe20vmeMIZ+CAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx
NGVlZDcwHhcNMjYwMzI2MDUwMTA2WhcNMjYwMzI3MDUwMTA2WjAzMTEwLwYDVQQD
EyhkNjk5N2E3NGFmYjg1OGNhNTNiYmJiMmViODhjYmUxY2VmOGYzZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU+ve4BTBKZjt7bdsqPPGhzK0kYt
Ewxir0c0l1vDvtNHBiDEkJnoRDAn5FvcLgp64jF7/yYK03GGYq9kk/0s/X0XIF+B
/z4OkKdEvvcgSYyLRyGvYi2qOxGCjnEd526BFJw95wDmQvlAXl3uYIKJV3K59iFF
gCGpZB2rbsuwENbtZQKDS0MKgBWcSZRPZkj2146fTgjjTxkIh57RdYirOSISl4EK
vTe5qf/Evjinpjpzb2rmfUTADvZyzqPPEyU4YfF7PmRTOrs6mNGAfeXQDdsmsAHP
3WO6XkapQwaw3RAVzdJSsaB2EYRVnIUr5Jb/pF1vHGYLDtoug06VOLKEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaZenSvuFjKU7u7LriMvhzvjz5EMB8GA1UdIwQY
MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut
NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz
LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZg1HuKFh
R9HlsGHeIDDwQrADldloPlwsFDc90MXMxJQY5GailU/21nQus8/p+9mzqvOCNHuh
6KWZP6XwhgPWAl4nd2t4wOALlLxI38kiDTk/X7JYzUXEJiIZ2EF3jsElhZk6HuRP
kPNPItQD5MntKStndTVKy4d8806bi+7E2CVPRdRdGw9WZXLLAC0NQ23c1rhKOdRu
x4GQwsNIr1z4ERuewX5gLuCpnJKHDmgcoFuTUNcGj+fejSKyzOzzMrblKRyhpTwk
VyyOSd9rZvsU1gpasWkxKBVGatceRA2uVgC+RK0rAHPhNYf/oeNzetIFCBFiPuxS
Qrx9pcG6YsgwkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:20 2026 by rpki-client