Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: uyT/89QlXLmf7Qod5yQy++VLVNicH0yx6+uHRuvu5jQ=
Subject key identifier: E6:A4:DA:1D:B5:92:E7:3A:EC:0E:4D:E5:AB:B1:C0:59:3F:9F:93:18
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 019D322C2A3A2181841CB9311C8B7467CFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 02:00:48 +0000
Manifest this update: Sat 28 Mar 2026 02:00:48 +0000
Manifest next update: Sun 29 Mar 2026 02:00:48 +0000
Files and hashes: 1: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: SEegQJDTqopTZNrtKaw9zepuU4mnl7uyay+Umclz3OA=)
2: yck28xcl3jczXgwL4uHBsdkr9eA.roa (hash: e+2vyfKfLKulD+WhEKHkneTjPq/LBArHRIYQYPU8rjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:2a:3a:21:81:84:1c:b9:31:1c:8b:74:67:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Mar 28 02:00:48 2026 GMT
Not After : Mar 29 02:00:48 2026 GMT
Subject: CN=e6a4da1db592e73aec0e4de5abb1c0593f9f9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:50:1a:3b:7f:fd:ee:23:98:73:b2:38:d5:
fc:07:79:51:c2:c3:95:e9:b3:82:4e:6b:b7:e1:ab:
74:28:b1:1a:66:53:62:44:45:02:ed:56:1c:36:19:
5e:88:bc:9c:9f:d3:6e:83:a6:bb:25:e1:8f:66:8b:
4b:93:06:75:0d:24:de:e7:1f:a1:a7:18:f1:85:1f:
66:9b:f3:5e:0d:ff:4d:c3:19:49:6c:96:f8:5f:cd:
ec:b4:9e:5a:b3:fd:c5:09:3e:d1:ed:5f:d7:e3:00:
60:2a:46:e6:0f:fb:25:41:96:4b:8c:82:3b:f7:0b:
f3:61:6d:15:b9:82:7b:f0:f6:ac:c3:7d:f7:f9:09:
9f:d7:5f:f4:c5:25:90:5b:a4:fc:77:24:47:20:e4:
b0:5a:be:5c:b8:0a:61:b4:36:b9:d3:95:6e:15:ec:
f8:06:ef:1b:19:e7:8a:c6:f7:9b:04:59:e7:ea:2b:
b0:0b:6a:38:4c:4c:0e:47:44:f3:d3:9b:9a:0b:46:
b4:67:b8:33:18:24:6d:e3:59:18:3f:65:92:51:81:
d6:43:44:33:90:65:e7:de:2f:33:1c:88:75:d1:27:
c1:9d:28:de:12:8d:5e:e8:a0:83:81:11:df:74:43:
0b:5c:2a:89:31:00:2d:d0:54:84:c9:45:83:3e:da:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:DA:1D:B5:92:E7:3A:EC:0E:4D:E5:AB:B1:C0:59:3F:9F:93:18
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:de:ec:e5:cf:aa:1e:02:cf:22:2f:89:d6:fa:3c:f3:38:ac:
f8:65:6f:6b:50:b9:c3:94:53:9a:4b:4d:62:ba:18:75:d1:74:
ce:bf:e1:4b:c6:e7:61:ab:46:35:89:37:3f:25:c4:e0:a9:f8:
0a:19:18:38:e6:8c:c2:2f:72:3a:a6:3e:02:5a:ed:8c:b1:37:
a6:15:ce:c0:ac:ae:5e:e8:93:a8:fe:fe:7e:66:0e:9d:f0:55:
bb:0a:c2:f8:74:fc:a2:86:84:23:da:c2:f4:1d:69:b6:ff:83:
1d:ff:28:4e:a3:cb:20:f1:9a:4a:bd:f6:02:8f:a6:76:15:b0:
23:90:c1:30:95:14:cc:f4:c2:f5:12:ba:4d:ec:0e:2b:7e:e1:
70:2e:17:e7:4a:cc:98:1b:ee:03:47:6e:c4:c4:49:91:56:63:
bc:8c:eb:60:f5:b1:ff:91:83:55:23:ff:c6:b7:e1:83:b1:0e:
67:97:a9:80:c6:f5:05:19:e6:4b:bc:15:96:45:95:2d:9e:00:
15:31:04:11:40:1c:b0:42:28:bb:40:5b:82:28:04:cf:ca:79:
70:21:c0:8c:07:9b:73:e5:34:ba:80:cf:fe:a0:0c:be:dc:d7:
a5:a9:53:ce:bd:86:76:93:e6:76:1f:73:58:6c:4f:71:47:40:
e6:14:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:20 2026 by rpki-client