Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: jifIWQiU+fD446Od/9Yah0exdj1x5wdjeSVdT9+fRF0=
Subject key identifier: 26:E9:1C:BD:41:3A:AF:98:42:4F:34:C4:AB:44:C6:C7:C3:37:29:E9
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019D2628A33BDFE0ECB09031AC1FA23E071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 181B
Signing time: Wed 25 Mar 2026 18:01:30 +0000
Manifest this update: Wed 25 Mar 2026 18:01:30 +0000
Manifest next update: Thu 26 Mar 2026 18:01:30 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: GEtukjVqaHJU1nlzNQNnU2uk/VeLN1QtmclVJ8wVTEI=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a3:3b:df:e0:ec:b0:90:31:ac:1f:a2:3e:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Mar 25 18:01:30 2026 GMT
Not After : Mar 26 18:01:30 2026 GMT
Subject: CN=26e91cbd413aaf98424f34c4ab44c6c7c33729e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:da:34:29:ee:19:22:a8:f3:82:fd:f7:6e:
32:27:9c:7d:08:d8:49:62:eb:2c:e9:28:89:2b:b4:
b4:45:f0:65:65:63:63:d0:23:d7:99:ac:12:6e:50:
3f:4f:24:60:f5:bf:d6:64:c0:4a:29:f4:dc:e9:03:
ef:9a:ec:2e:89:e7:7f:3d:95:e5:8d:c4:fa:9c:74:
89:f6:22:6c:c4:58:bf:cf:6d:33:df:e8:83:ea:2c:
6b:8b:6b:2a:9d:c7:47:c0:d4:fa:c9:4d:44:76:fc:
3f:bd:8d:26:77:0c:5a:37:1f:ef:4d:e8:cc:81:b2:
00:8d:cc:6b:ef:c6:3e:0a:cf:0b:97:f7:19:b6:3a:
5b:7b:d0:47:45:0d:f5:34:9e:18:32:3f:57:e2:16:
43:71:ca:96:7d:d5:1c:a8:a4:f7:70:54:e6:1b:8a:
4b:b5:01:21:4f:51:e6:04:94:4f:16:f2:ab:f0:67:
9e:7b:49:b7:67:b1:89:f8:00:9a:f1:37:f3:12:77:
0d:1b:5e:d4:b0:71:04:d1:bd:bb:2c:ee:ea:f6:d3:
c3:65:22:aa:34:34:82:6d:d3:dd:24:b3:d4:87:d5:
ad:5d:c3:0e:07:17:30:7c:2b:c3:a2:72:80:77:c5:
08:cc:9e:14:f5:cb:31:b4:79:e1:b7:b0:5f:b6:97:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:1C:BD:41:3A:AF:98:42:4F:34:C4:AB:44:C6:C7:C3:37:29:E9
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:03:cf:79:81:5e:e4:ce:f6:e4:6c:da:39:43:5b:5d:3d:ad:
44:b0:45:8b:0a:a0:77:b9:7b:3f:17:e8:ab:d6:bf:a8:46:9c:
bf:1f:85:f1:40:fc:49:b9:fa:4e:a6:e8:e4:47:1b:e0:de:e6:
de:c8:fb:51:3c:ac:a1:4a:af:54:bc:d0:ae:6f:4a:38:ec:a8:
62:0a:bc:ba:aa:ff:03:47:79:84:d7:d6:b8:77:13:68:eb:32:
10:38:0a:7c:97:e5:13:ab:c6:48:cb:ed:62:a7:a4:90:5c:e7:
dc:ca:d5:29:96:1b:7c:09:f9:af:45:f8:19:39:48:62:bb:d6:
7d:1f:8e:47:88:44:ae:6a:f4:5c:14:46:4f:0d:d6:4b:d6:0b:
eb:c7:14:07:3e:b3:82:ee:b5:5f:3e:e5:72:21:89:f0:4c:9c:
24:1e:65:e9:71:b9:c3:81:b4:be:0f:8d:f5:b2:59:d6:fd:4e:
58:09:4c:94:10:dd:e1:a9:5c:12:c6:aa:7b:e0:03:ab:5d:c0:
3c:02:ea:b8:11:61:99:72:cc:3c:bc:c7:d1:11:76:26:6d:c4:
17:5d:6c:cf:24:37:08:45:1e:cf:47:3b:5d:ea:26:e3:c7:a8:
e2:78:30:7c:d0:7a:7d:f0:ba:23:70:57:b1:3d:ea:17:8e:95:
20:b8:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:31 2026 by rpki-client