Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: wHaWhb/zKthUYZv+xXGayooCZSVErrSS8exXRqM64hI=
Subject key identifier: 52:60:4A:67:93:C1:D7:2A:7D:96:93:1C:19:3F:08:66:A8:2A:C7:52
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 019F95B7E23E08EED02E5FE74DE3D39C027B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 0642
Signing time: Fri 24 Jul 2026 20:01:23 +0000
Manifest this update: Fri 24 Jul 2026 20:01:23 +0000
Manifest next update: Sat 25 Jul 2026 20:01:23 +0000
Files and hashes: 1: C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa (hash: cpa4ey5flhFVWa6hOHqUoUQLhSQVEdjFj4vHoE37Kb0=)
2: HMfT7RXQv0cCzI6qjjbXpv0Dpvs.roa (hash: rpVCvThgsyRbmHi9yrVB1FHQ2vnW/yUkYGAfm5xLUFo=)
3: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: 8oU2R0T+u0JShEUdikH3Ql/iOk7nrUfRQf3P7WurAbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:e2:3e:08:ee:d0:2e:5f:e7:4d:e3:d3:9c:02:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jul 24 20:01:23 2026 GMT
Not After : Jul 25 20:01:23 2026 GMT
Subject: CN=52604a6793c1d72a7d96931c193f0866a82ac752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:8e:0c:2e:97:b2:6f:b9:59:80:27:d9:e5:
dc:d1:1c:45:31:10:29:59:3a:8e:c4:74:29:76:3a:
2f:b5:0a:4a:c0:9a:47:4b:28:43:89:9c:0e:98:6b:
3b:2f:d6:c4:39:15:31:af:60:20:4b:f1:ee:69:35:
46:63:ea:4e:55:c7:46:cd:b4:c5:c8:77:da:a8:e6:
fd:c5:5d:95:79:92:6b:22:86:b6:60:9d:b2:ed:fb:
6f:66:1a:90:6d:67:e6:e0:16:ce:33:b9:8b:ae:9e:
58:30:df:5f:58:22:c2:8b:61:fe:4f:ba:41:31:37:
07:6a:7e:80:ea:14:46:f9:b0:a3:15:b1:8a:e5:cb:
93:29:e8:7d:9d:97:41:a2:fe:38:7b:3f:8f:64:2d:
f2:9f:c6:f7:e3:3d:53:bf:a2:c2:2b:76:ea:c9:b7:
5d:1d:4f:c1:b9:f2:7a:ba:22:fe:f7:cc:50:45:ae:
1e:6e:e5:62:48:0c:cb:f5:1a:ea:94:cc:c3:57:d0:
74:fa:8f:2e:eb:07:44:1f:a5:12:81:9c:b7:47:0f:
c6:68:c0:d1:aa:aa:6d:13:43:57:6f:85:8b:be:7c:
09:3d:ae:56:42:c3:65:3b:bd:d0:e9:2b:41:0f:1f:
a6:42:d4:54:b1:bc:f2:37:1c:c9:84:b2:ef:cb:68:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:4A:67:93:C1:D7:2A:7D:96:93:1C:19:3F:08:66:A8:2A:C7:52
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:01:1f:8d:97:87:0e:a8:5e:fd:25:2b:44:18:e0:36:cc:
d4:36:c9:03:a9:26:ee:4e:d6:41:ab:da:2d:21:00:0d:8e:9d:
65:f9:07:fc:0a:79:81:b1:f9:5c:9a:64:c9:7b:50:98:4d:38:
38:ab:35:cd:0e:be:ee:59:f3:d6:4d:d3:02:cf:62:eb:03:a3:
e3:bb:9b:f6:f9:37:0f:ca:f8:1f:35:c6:98:fc:ae:f9:4a:85:
ec:bc:80:a1:e7:57:61:50:d2:bf:cf:07:41:95:74:ed:31:7d:
06:ba:54:de:fb:de:1f:c2:7c:f8:bc:20:ca:4c:a9:f1:a2:1e:
2a:28:ef:b6:9d:b4:aa:fa:ef:7c:ef:f1:f9:c1:55:98:0c:0b:
20:34:ff:f5:5e:cb:d8:16:69:f3:fe:28:a9:10:b5:19:e0:9e:
74:d2:ba:91:a5:7b:0c:dc:db:8c:06:02:c9:6f:17:7c:ca:34:
e1:6b:b7:50:16:af:e7:4e:85:ad:9c:47:a6:95:89:58:66:3f:
a2:1f:17:eb:03:e1:5c:78:bd:2f:39:3e:00:16:d0:dc:44:a1:
32:3b:46:8c:cf:57:15:d2:53:a6:88:13:01:3b:10:10:0c:ff:
db:87:7e:bd:2c:d3:a4:2f:60:c3:bb:9e:a0:84:10:99:16:70:
90:82:ec:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt+I+CO7QLl/nTePTnAJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4
OTZiOWMwHhcNMjYwNzI0MjAwMTIzWhcNMjYwNzI1MjAwMTIzWjAzMTEwLwYDVQQD
Eyg1MjYwNGE2NzkzYzFkNzJhN2Q5NjkzMWMxOTNmMDg2NmE4MmFjNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ6ODC6Xsm+5WYAn2eXc0RxFMRAp
WTqOxHQpdjovtQpKwJpHSyhDiZwOmGs7L9bEORUxr2AgS/HuaTVGY+pOVcdGzbTF
yHfaqOb9xV2VeZJrIoa2YJ2y7ftvZhqQbWfm4BbOM7mLrp5YMN9fWCLCi2H+T7pB
MTcHan6A6hRG+bCjFbGK5cuTKeh9nZdBov44ez+PZC3yn8b34z1Tv6LCK3bqybdd
HU/BufJ6uiL+98xQRa4ebuViSAzL9RrqlMzDV9B0+o8u6wdEH6USgZy3Rw/GaMDR
qqptE0NXb4WLvnwJPa5WQsNlO73Q6StBDx+mQtRUsbzyNxzJhLLvy2ihDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJgSmeTwdcqfZaTHBk/CGaoKsdSMB8GA1UdIwQY
MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt
MTI4YjVjM2QwNTNhLzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh
LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK0BH42X
hw6oXv0lK0QY4DbM1DbJA6km7k7WQavaLSEADY6dZfkH/Ap5gbH5XJpkyXtQmE04
OKs1zQ6+7lnz1k3TAs9i6wOj47ub9vk3D8r4HzXGmPyu+UqF7LyAoedXYVDSv88H
QZV07TF9BrpU3vveH8J8+Lwgykyp8aIeKijvtp20qvrvfO/x+cFVmAwLIDT/9V7L
2BZp8/4oqRC1GeCedNK6kaV7DNzbjAYCyW8XfMo04Wu3UBav506FrZxHppWJWGY/
oh8X6wPhXHi9Lzk+ABbQ3EShMjtGjM9XFdJTpogTATsQEAz/24d+vSzTpC9gw7ue
oIQQmRZwkILsjw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:41 2026 by rpki-client