Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: sb4sPmvo3q39BqE/2bG9wE9UXQv/6m6xc6v6k8Z6sjM=
Subject key identifier: 46:2F:5C:06:73:68:EF:73:01:57:FF:EF:3E:C3:D5:92:66:F7:3D:49
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 019D29616E82960B6D00F4C86CAE9DB2EF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 094D
Signing time: Thu 26 Mar 2026 09:02:24 +0000
Manifest this update: Thu 26 Mar 2026 09:02:24 +0000
Manifest next update: Fri 27 Mar 2026 09:02:24 +0000
Files and hashes: 1: BsUK6q4arJHbcNcyqOOvwteXiS0.roa (hash: mH5FcSTjVNeSVMSPqpSkXYdFczl7hZ5yzWhcRGubmnk=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: ZrCPx0tjz/l+UF6ovrYAuYvp/MFKMjAHxn/nJ31tZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6e:82:96:0b:6d:00:f4:c8:6c:ae:9d:b2:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Mar 26 09:02:24 2026 GMT
Not After : Mar 27 09:02:24 2026 GMT
Subject: CN=462f5c067368ef730157ffef3ec3d59266f73d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:08:58:b0:aa:b5:64:e2:f4:e9:65:f6:cd:
db:00:9f:98:36:7f:75:88:3f:1c:4f:21:cf:1f:7f:
de:19:9d:24:f5:aa:af:9c:5c:dd:a7:49:d7:0a:1e:
5f:fe:c0:fa:39:51:cf:e0:21:58:a3:8c:3f:72:0a:
f7:9f:7d:32:bc:95:65:16:55:d4:18:5a:db:18:77:
63:fe:87:ef:db:a2:70:a4:6b:e6:79:83:36:bd:8b:
ff:4f:84:bc:20:53:57:1b:5b:0c:97:a6:4c:ab:22:
19:b6:79:5c:0b:40:7a:ad:46:74:7b:11:ba:32:9f:
aa:de:d0:ea:79:ff:28:d7:03:4f:68:26:d3:13:3d:
5d:ea:e5:dc:3a:37:12:62:95:08:b3:a9:aa:f9:d4:
e4:b9:5e:9a:77:ad:d3:3e:48:35:8d:d2:e2:4f:99:
f1:09:62:c0:85:5c:76:ad:e9:70:c2:5f:0f:49:a8:
b9:ca:be:bf:5a:c8:ba:bf:b0:8b:a5:80:e7:61:a6:
00:0a:33:9b:16:7d:b0:e6:ee:b7:76:b3:ee:c9:f1:
59:84:7f:cd:b3:55:33:fc:46:4d:54:aa:a1:f8:5c:
21:72:93:26:e7:56:93:c1:9b:1f:43:62:ea:c6:2a:
02:fb:2a:19:f8:7e:ed:7a:78:56:f2:bc:fb:cf:7a:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:5C:06:73:68:EF:73:01:57:FF:EF:3E:C3:D5:92:66:F7:3D:49
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:dd:5c:1e:50:bb:a2:c2:79:69:8a:ca:af:04:e9:0f:74:
ec:b9:c1:c7:c6:f4:d2:9e:59:2f:70:1a:44:9d:5d:05:d3:50:
ee:84:d7:27:bb:4e:c6:4b:fa:f8:b6:e5:39:0b:ec:dd:54:7b:
a4:92:13:5c:c8:c4:63:5b:60:8b:06:26:93:f2:43:3a:38:8d:
fb:90:a9:ed:ba:93:9d:cb:3b:8e:0b:ac:74:90:9e:53:08:19:
1f:5b:c0:df:53:96:5f:8c:60:4c:d7:53:32:12:11:43:de:5f:
cb:24:46:66:e0:3c:d7:4a:c0:d7:5f:7d:b9:b0:22:e1:19:a3:
32:c0:38:2d:bd:95:f2:09:17:62:7f:09:d2:23:89:83:be:d6:
f5:15:a0:c7:1e:b9:ac:cf:d4:87:5b:d9:68:6a:7c:b6:09:60:
b3:45:f0:37:94:9f:8d:bc:10:dc:20:e7:6a:5f:7c:8b:ba:ae:
bd:48:b8:d8:2c:16:61:cb:93:73:24:51:76:f5:d8:17:61:70:
d0:5e:c6:a2:4f:7e:94:79:ba:d3:08:2e:4b:12:b2:69:b8:0f:
16:35:38:c1:ab:f6:b4:e0:fa:b6:a3:1f:11:e9:8a:71:4c:c3:
55:0b:b9:93:b2:f8:1d:4f:7c:d2:9c:a0:96:21:b7:04:33:45:
44:e1:e8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYW6ClgttAPTIbK6dsu9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODVlMDVkODA1OTJjNmNmMTEzMjBlYjUwMjljYWMwNGE0
ZDliYjQwHhcNMjYwMzI2MDkwMjI0WhcNMjYwMzI3MDkwMjI0WjAzMTEwLwYDVQQD
Eyg0NjJmNWMwNjczNjhlZjczMDE1N2ZmZWYzZWMzZDU5MjY2ZjczZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFoIWLCqtWTi9Oll9s3bAJ+YNn91
iD8cTyHPH3/eGZ0k9aqvnFzdp0nXCh5f/sD6OVHP4CFYo4w/cgr3n30yvJVlFlXU
GFrbGHdj/ofv26JwpGvmeYM2vYv/T4S8IFNXG1sMl6ZMqyIZtnlcC0B6rUZ0exG6
Mp+q3tDqef8o1wNPaCbTEz1d6uXcOjcSYpUIs6mq+dTkuV6ad63TPkg1jdLiT5nx
CWLAhVx2relwwl8PSai5yr6/Wsi6v7CLpYDnYaYACjObFn2w5u63drPuyfFZhH/N
s1Uz/EZNVKqh+FwhcpMm51aTwZsfQ2LqxioC+yoZ+H7tenhW8rz7z3qLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYvXAZzaO9zAVf/7z7D1ZJm9z1JMB8GA1UdIwQY
MBaAFIaF4F2AWSxs8RMg61ApysBKTZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAt
NjhlZjI0Y2Y1ZWY5LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAtNjhlZjI0Y2Y1ZWY5
LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJfdXB5Q
u6LCeWmKyq8E6Q907LnBx8b00p5ZL3AaRJ1dBdNQ7oTXJ7tOxkv6+LblOQvs3VR7
pJITXMjEY1tgiwYmk/JDOjiN+5Cp7bqTncs7jgusdJCeUwgZH1vA31OWX4xgTNdT
MhIRQ95fyyRGZuA810rA1199ubAi4RmjMsA4Lb2V8gkXYn8J0iOJg77W9RWgxx65
rM/Uh1vZaGp8tglgs0XwN5SfjbwQ3CDnal98i7quvUi42CwWYcuTcyRRdvXYF2Fw
0F7Gok9+lHm60wguSxKyabgPFjU4wav2tOD6tqMfEemKcUzDVQu5k7L4HU980pyg
liG3BDNFROHogQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:35 2026 by rpki-client