
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: bN8f+OuTio055/Uf3krOHvx83hNbldhUgYztJGAWLrA=
Subject key identifier: 1C:2D:F0:DF:0A:98:BA:94:B9:20:26:01:7E:51:65:8D:C1:9C:0D:69
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 01A10737F304A08CBF05062DC2B781DFCBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 14:01:09 +0000
Manifest this update: Sun 04 Oct 2026 14:01:09 +0000
Manifest next update: Mon 05 Oct 2026 14:01:09 +0000
Files and hashes: 1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: 0oTbxBlXayEEuu0CG46B5StzKM94cUOpOuDudMKV7Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:f3:04:a0:8c:bf:05:06:2d:c2:b7:81:df:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Oct 4 14:01:09 2026 GMT
Not After : Oct 5 14:01:09 2026 GMT
Subject: CN=1c2df0df0a98ba94b92026017e51658dc19c0d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:2e:d7:f1:aa:e2:9c:e2:22:77:ff:ef:ff:
f7:02:ec:b5:74:9c:0f:48:15:0a:98:f0:f4:98:20:
f3:86:55:23:83:f4:19:3f:84:f7:83:54:44:1b:8a:
58:87:64:dd:de:dc:7a:e6:8d:40:d3:36:bf:a7:2c:
da:e1:8d:79:f3:97:31:78:38:eb:2a:7c:dd:37:da:
8f:8c:b8:a8:a4:79:2f:6b:1d:cc:61:67:88:a7:0b:
d1:dd:fb:2a:1f:86:f5:4a:a1:89:cc:61:1a:e4:b8:
1f:6f:c6:ca:06:e3:eb:08:57:72:5c:c8:54:26:a7:
79:d6:94:87:25:80:7a:b9:af:21:3b:45:9a:a6:dc:
2a:5b:b2:5c:f6:09:77:ae:3c:0e:cc:70:72:48:c4:
f0:57:cf:94:ab:17:d5:d8:b1:00:1c:ac:ce:07:15:
37:d2:4d:93:6f:8a:2d:82:02:85:d4:84:96:0a:1c:
02:f8:21:13:e2:d0:ec:84:46:f2:4c:91:28:07:a0:
01:5b:5d:3c:cb:36:50:7f:35:a2:f7:4a:fb:62:b5:
d3:2f:a9:ac:25:2a:29:30:bd:ac:26:ef:5f:35:a4:
42:60:91:38:d6:83:f3:c1:a3:bc:fe:6b:72:dc:be:
a6:bb:48:c2:d7:4b:09:0b:4a:8b:99:48:23:04:a7:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:F0:DF:0A:98:BA:94:B9:20:26:01:7E:51:65:8D:C1:9C:0D:69
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:54:fd:29:74:1d:aa:96:cf:28:96:5c:b9:74:8f:5c:db:
a4:a6:09:58:76:77:91:22:d3:c7:66:3c:cb:24:5f:5e:d9:ae:
35:b7:1a:15:51:b0:f3:24:49:a2:51:1a:ae:b3:1c:c7:6d:ec:
45:6e:80:f8:13:23:9f:2a:63:fd:23:40:ad:dd:39:18:9b:31:
46:0f:ea:33:35:57:6f:83:c1:fb:87:46:81:45:f9:d6:04:b1:
4f:24:1a:53:ff:99:0a:67:70:3f:9b:37:f4:25:fb:69:f3:b0:
c3:aa:49:0c:b4:a2:a8:3b:d5:66:f5:91:25:24:f4:08:e6:09:
79:0c:14:21:37:7a:e5:2d:d1:83:0b:1f:81:9a:47:de:54:3a:
e8:1f:d7:69:f1:49:ff:fc:c9:3b:e1:23:ca:a1:ba:07:83:81:
3b:5c:b1:a8:58:21:a0:44:12:6c:bd:4e:1d:51:cf:e2:35:d5:
e1:39:55:5c:fa:be:b1:9a:85:48:de:c8:1b:d6:cc:d3:fc:e2:
2d:5a:47:11:71:07:a1:1b:ac:c6:da:8a:65:f4:9a:da:c2:cc:
e5:16:6b:f3:58:21:c5:77:34:00:f6:1a:0b:77:b6:8a:ed:7f:
91:7c:b4:27:fa:1b:e8:d4:1c:92:fc:92:b7:7d:49:3d:0c:26:
2c:4e:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:33 2026 by rpki-client