Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: yNjIOMQjBmzTYocBQei0rMDfUkYMmBB9nFlZT+LLp4I=
Subject key identifier: 9C:1A:5A:7F:2B:89:0C:F8:80:3D:13:2B:BA:DB:97:49:3E:2E:49:DA
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019E1F47D73888115A1E3659B8A34FEEA01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 189C
Signing time: Wed 13 May 2026 03:01:01 +0000
Manifest this update: Wed 13 May 2026 03:01:01 +0000
Manifest next update: Thu 14 May 2026 03:01:01 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: MQ+SKvg+jq/zX3Y41WeG2vPEpos8sfjj+CHGUyuj8is=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d7:38:88:11:5a:1e:36:59:b8:a3:4f:ee:a0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: May 13 03:01:01 2026 GMT
Not After : May 14 03:01:01 2026 GMT
Subject: CN=9c1a5a7f2b890cf8803d132bbadb97493e2e49da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:7f:cc:bb:19:40:69:21:03:fd:f1:f4:05:
1a:e2:76:c4:fc:df:d9:62:df:56:d4:4e:b3:a4:48:
cf:5a:79:32:b5:7d:fb:86:c0:98:10:1b:55:f1:f2:
47:e8:c7:23:01:22:52:40:ad:33:0f:59:d0:37:43:
bb:4f:75:d9:c0:c3:34:1d:42:0c:93:34:0d:7f:31:
7b:ff:67:8b:da:37:18:37:b0:17:ce:06:ca:5f:f6:
7d:07:f7:ec:1a:14:d4:98:75:db:a0:f1:d5:bc:5d:
bc:a2:f8:b9:a1:f9:9c:36:bb:a5:6f:4c:97:f8:31:
50:f2:e6:38:b5:3b:a2:a8:c1:a8:54:8d:9b:db:0c:
e6:56:1b:97:bf:26:90:63:2b:0a:07:0c:d9:a2:38:
1f:b2:77:d0:92:ed:a3:56:83:15:d1:d0:07:cc:67:
8a:b0:60:ac:bd:53:91:ea:73:3f:9a:b7:7c:cf:a0:
af:15:08:7f:a9:08:cb:c7:96:36:4c:4b:ca:22:2f:
4d:a1:c2:cf:d0:42:17:0c:3d:73:29:87:97:e3:e5:
0c:82:08:e9:8b:14:be:6c:c0:fe:f0:e8:7a:be:da:
65:d8:53:96:fe:72:51:0c:f6:51:e5:8d:8f:a8:56:
88:b9:ae:88:ac:94:e5:c1:e1:59:df:58:e9:88:f2:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:5A:7F:2B:89:0C:F8:80:3D:13:2B:BA:DB:97:49:3E:2E:49:DA
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:7c:3c:5d:2a:78:bd:06:81:56:e5:b5:23:a9:7d:76:1a:
dd:7c:8b:0f:13:ed:13:f1:4f:44:58:96:e8:bb:09:b5:88:81:
d4:6e:35:31:68:26:d6:aa:6a:53:a1:1d:7d:bc:44:6e:4d:5f:
09:ef:3a:b9:c6:55:4c:d2:21:56:00:79:33:82:c9:6d:a7:c5:
f6:96:3f:af:6d:19:52:e2:d3:58:e3:c7:c1:8a:9a:40:0a:fc:
3a:f0:23:e6:bd:a7:7b:97:03:55:eb:85:5d:50:0f:b3:5a:60:
97:69:84:98:d9:d9:56:93:cf:3b:51:f7:7e:1d:49:d9:40:ce:
4e:62:a6:d3:ae:e7:bf:df:ad:9b:7e:80:c3:77:9f:f4:f3:6e:
2f:e8:d6:ac:1b:58:66:5a:07:59:8f:62:ca:38:54:60:ad:ba:
e8:21:91:6e:95:67:90:c2:08:47:4f:6b:f4:99:f3:81:1c:32:
56:d0:2e:86:d1:a3:42:67:ec:e4:c4:1b:2e:4d:ed:18:19:ef:
d5:87:56:e6:7a:ac:3a:a8:fc:9c:b5:cc:ca:7e:84:87:03:4b:
43:8d:bd:a8:79:28:65:02:b9:be:07:bc:63:96:5f:22:54:2a:
8b:cd:86:f0:6d:b0:ee:7e:2b:51:09:ff:3b:37:f3:18:de:ea:
a8:8c:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:33 2026 by rpki-client