Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: c9EOqrA/mBOLMgFBDeD8jUkN6Q27q3Qz31h/rIvGvOY=
Subject key identifier: D4:EA:37:1D:B3:75:A6:00:9D:8C:A1:D1:0C:BA:1B:E6:3B:69:63:A0
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 019D2695BF912A945E8ED9F4B2673467FBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: HQl/lG0ERRJ85PstZsAjmCOVu4Usea5hzew+LsWgVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bf:91:2a:94:5e:8e:d9:f4:b2:67:34:67:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=d4ea371db375a6009d8ca1d10cba1be63b6963a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:9d:f3:78:b1:1d:c9:dd:8d:49:3b:d2:de:
18:ef:ac:b4:08:fb:52:00:4c:1c:f9:97:b9:16:7f:
a9:44:91:ae:d0:13:83:2f:3f:8d:74:11:44:6b:d2:
60:ef:07:51:df:5d:a2:5b:2f:8e:a5:05:b6:80:b9:
a0:fb:a5:b0:73:d6:3c:3d:cf:67:33:46:95:30:7c:
60:e2:bf:0d:5e:56:ee:e5:c7:c8:f6:23:10:c1:f8:
4b:35:8e:3b:e8:a0:86:fa:ed:e0:a5:e4:74:2c:a5:
53:62:c5:fa:fe:c0:dd:29:51:46:8e:7e:7c:8a:8a:
22:3a:6e:2f:3c:62:22:e2:23:4b:54:6a:1c:a0:14:
2d:bc:04:d6:80:6c:e5:fc:56:22:54:26:f8:3f:d7:
67:29:27:71:37:a7:60:5b:7c:41:d0:ad:4f:49:d1:
94:95:05:5d:2a:53:4d:63:f9:ac:90:e1:25:b4:7f:
48:68:54:0a:f1:da:63:1c:7f:fc:cc:18:d7:63:25:
3f:23:24:f9:62:2c:87:af:ce:4e:bb:42:7f:6a:c7:
1c:72:4d:21:28:41:ad:4c:74:7b:9e:9f:70:84:d5:
63:6b:43:b4:a6:79:72:5c:a6:83:21:19:b0:20:7a:
fe:68:11:5e:b0:7b:10:34:ce:41:0d:48:65:9b:56:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:37:1D:B3:75:A6:00:9D:8C:A1:D1:0C:BA:1B:E6:3B:69:63:A0
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:99:ef:90:f0:0e:c2:53:42:75:22:1a:92:13:21:43:f4:
26:ae:df:30:95:e9:4c:06:f4:6b:1c:b8:8d:cd:d5:c8:5b:6a:
79:b1:6c:e4:c8:4f:8f:31:b2:fc:96:c8:1c:d8:96:9b:a6:6a:
e0:d5:1c:af:b5:7a:05:20:3c:c0:90:ea:73:87:67:b2:9c:a3:
af:cf:24:5b:5e:3e:37:d0:6a:b1:be:5e:4c:16:2b:27:86:b2:
bc:1c:17:15:ac:59:03:d0:2d:49:ad:d5:cb:7a:19:3e:07:a7:
e4:60:01:93:44:36:f6:a0:ad:fc:f4:7d:57:b0:f4:a9:57:2c:
93:40:bd:17:16:a6:80:69:0b:9f:9c:94:59:e8:9e:5f:02:87:
80:49:3d:34:6f:9b:6e:23:31:aa:d2:21:e9:24:c9:7a:98:d4:
1b:7f:08:4d:72:42:91:c3:ce:f4:8b:a1:63:51:6e:4b:30:aa:
6e:de:b8:64:44:af:42:e9:ee:52:8c:0c:62:3c:2c:38:a6:13:
1e:56:2f:fd:ef:50:51:d3:90:b1:b5:1e:79:d2:2c:06:ed:13:
a1:7e:17:3f:50:2d:aa:23:94:e6:e4:5c:ab:97:52:0c:59:bb:
92:37:22:9b:a9:6b:ff:20:17:87:2b:03:91:2e:56:70:35:08:
8e:b8:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:05 2026 by rpki-client