Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: sWK7obSRhYp1JCW3pOmqgu1SC1EdqcrSkRyF/UXUl7Y=
Subject key identifier: 58:BF:5A:A3:D3:42:9C:CF:EE:37:D7:A5:3E:C5:46:1A:22:E1:D4:2E
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01A0EC2F085E8DC895AA1E107E884FBEEC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0FBF
Signing time: Tue 29 Sep 2026 08:01:40 +0000
Manifest this update: Tue 29 Sep 2026 08:01:40 +0000
Manifest next update: Wed 30 Sep 2026 08:01:40 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: qCCQZ9w+trF9CjBTVn6ADq9+ZR1bB6454HTWiE3Epvk=)
2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:08:5e:8d:c8:95:aa:1e:10:7e:88:4f:be:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Sep 29 08:01:40 2026 GMT
Not After : Sep 30 08:01:40 2026 GMT
Subject: CN=58bf5aa3d3429ccfee37d7a53ec5461a22e1d42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:3b:72:a3:27:e7:09:c1:14:a9:32:c6:0a:
be:81:5f:6b:9f:7f:c8:8c:53:6d:0b:a6:50:79:53:
ae:51:c1:7b:7a:43:21:c7:80:f2:85:10:26:3d:06:
59:cb:8d:b9:cf:67:26:61:cb:6a:0f:95:66:29:ef:
49:fc:fc:59:4a:56:d0:1e:60:01:8c:df:d9:02:dd:
aa:b5:e8:bf:6c:40:b3:35:59:d6:b7:24:85:30:98:
d9:3f:ea:5d:d8:b1:c8:cd:c8:39:9a:32:5b:82:19:
8f:d9:3b:54:1e:51:37:4a:22:31:dc:aa:c0:be:cb:
f2:3c:91:e8:61:22:6b:0f:b7:e8:e3:65:4a:32:db:
55:90:a9:92:17:52:54:85:ec:9d:77:9b:9e:a8:6d:
0a:be:d0:5c:66:2c:5f:67:de:73:24:4d:92:82:ce:
45:3a:8a:c5:ef:c0:3e:5d:a6:2b:37:55:b5:d2:2c:
66:33:ae:a0:75:b9:34:20:39:85:79:63:1b:3d:94:
8f:93:a0:79:39:1a:9c:25:63:ad:1a:58:eb:c8:8e:
46:65:5b:7e:30:4a:0c:26:05:f0:35:df:9f:4b:62:
fe:7b:85:a4:d1:97:cc:48:9c:e2:02:ce:b9:42:32:
83:c1:f7:34:e5:33:0f:7e:99:9e:25:10:3b:48:a8:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:5A:A3:D3:42:9C:CF:EE:37:D7:A5:3E:C5:46:1A:22:E1:D4:2E
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:90:7d:27:fd:9c:fa:16:3e:18:99:e3:ab:5f:a6:f1:1f:7a:
6d:50:a7:43:7f:28:4a:1e:9e:cb:3c:8e:c1:ee:17:a4:05:b0:
a4:2e:2e:18:83:20:7e:e6:8f:74:95:db:2a:d3:c5:ec:73:71:
74:66:96:23:95:75:dd:65:3e:39:4e:0e:30:1f:8e:28:0d:32:
9d:b0:e8:c5:64:18:86:fe:04:ac:5a:48:f4:77:07:58:55:a2:
2a:77:3d:90:1a:7a:03:75:b0:26:5b:39:dd:b5:e4:a0:68:23:
95:b6:f8:bb:a8:6f:85:4f:d9:a3:8d:3b:6b:b5:f6:26:b0:5a:
53:0b:c7:a4:50:1c:e1:18:b1:5d:c9:6d:49:da:5f:9c:7a:1b:
78:28:22:b3:7b:68:78:6b:48:06:d2:0d:77:51:da:90:d6:2e:
47:3b:91:0d:6f:c6:c0:70:76:31:7b:ec:f4:65:18:c1:25:b0:
9e:50:dc:98:b1:3f:cf:15:71:0d:d2:00:99:44:8d:f1:f0:c2:
2d:06:b7:59:c9:b5:59:5e:78:0b:1d:69:fc:90:e0:b0:e1:7d:
fa:3e:31:39:25:f0:24:c4:43:17:bc:4c:63:92:0b:02:d9:05:
2d:82:67:4f:ce:64:f4:9a:73:fe:9b:82:94:66:f9:3b:b9:6f:
26:a0:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:43:00 2026 by rpki-client