Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: c2L4UHhIbiP1YXvw7dw9eeA3iaiRFscpCv2c0+VZ19w=
Subject key identifier: 59:A0:DA:17:A9:CE:52:E3:DF:ED:B2:EC:6F:67:8C:E6:52:E3:BE:F9
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019D288477DE5A6973B77BC0C6FA4E252AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0DCC
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: 0/ZpBfMqV4/862a0bMJtvx+jlOZnQa4E/qFryg4KP/4=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:77:de:5a:69:73:b7:7b:c0:c6:fa:4e:25:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=59a0da17a9ce52e3dfedb2ec6f678ce652e3bef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:0d:fa:a4:30:5d:86:54:e2:ec:99:0c:ad:
60:4e:1b:c1:02:cc:be:f1:04:1f:a0:bc:98:0b:b3:
c5:8c:ef:61:b1:a7:70:b2:af:08:12:fc:7f:53:3a:
7a:8e:e4:20:a6:d1:da:36:d2:e8:89:a9:d4:1e:8e:
62:bb:88:ea:10:f1:51:23:69:18:3f:d8:b5:71:0f:
4e:0d:90:47:d4:51:69:5b:30:e7:47:17:47:8d:ce:
ac:a5:33:ba:91:4d:e0:af:ac:15:e7:16:8f:b5:6d:
d8:40:75:d3:ed:83:ff:b6:1f:ba:a2:6a:8f:0b:fd:
af:a9:95:06:db:ab:a3:8a:c4:d7:69:0a:c0:83:20:
df:0e:ef:28:78:a3:c2:02:fb:fe:be:fb:88:e9:76:
ea:40:1d:3f:bc:98:ef:a5:24:c9:aa:a6:08:b7:e8:
bb:0a:08:07:bf:08:9b:b6:15:2b:2d:eb:2b:4c:e2:
0c:12:43:f5:2f:d0:ee:0f:92:94:56:b6:29:92:c2:
8a:f6:aa:91:a4:db:a7:8c:19:5b:c5:2e:d1:17:9d:
54:95:d8:9b:e3:5b:86:ac:98:fa:02:6a:bb:29:27:
9c:79:61:da:16:56:c4:fd:db:f2:b4:75:81:46:d4:
71:b2:a6:df:27:f4:26:58:3b:f0:52:9e:cb:2e:85:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:DA:17:A9:CE:52:E3:DF:ED:B2:EC:6F:67:8C:E6:52:E3:BE:F9
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:10:c3:70:45:e2:60:31:a0:4c:83:96:57:ff:9b:92:83:be:
8f:0d:89:8d:0b:d6:0f:cd:67:ba:cb:e2:ea:35:05:26:44:7e:
c1:52:28:8a:95:07:bd:44:d2:4d:4f:a7:eb:ef:a5:81:1c:2a:
3c:cf:94:13:e2:8d:48:7a:47:01:80:7e:3a:bc:8c:c4:1e:7c:
09:f1:9c:1b:1e:d9:f9:86:a4:a9:02:c6:a9:b1:4c:07:25:fb:
10:3c:75:1e:48:04:6a:fd:60:81:a1:5d:46:a0:31:87:18:07:
ab:56:59:6f:0c:a8:08:a1:49:4a:60:ee:b5:49:cb:c1:05:79:
d5:fa:f7:3a:cb:1b:f1:a7:c1:6c:02:a3:1b:35:a9:1b:57:9d:
7a:c9:65:46:9f:22:9f:45:c1:b6:f3:bc:51:69:4d:0a:66:d5:
c0:31:96:1a:d2:d0:b3:e6:4b:68:21:c4:e2:f8:3a:bd:bb:ce:
c7:e5:ac:79:9e:d5:21:76:f7:2a:cf:5a:fd:54:59:79:c2:79:
9c:67:74:cd:fc:30:42:70:d3:44:33:bd:1b:be:a2:66:20:2e:
06:11:29:0c:fe:21:75:b7:18:f1:b6:9d:a5:fa:04:6a:29:99:
20:28:55:cd:fe:0d:2a:3d:b0:a7:13:b4:6b:21:fa:0d:e2:ea:
ce:46:9e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:51 2026 by rpki-client