Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: 4LFrPNroUu5injfBG6cEhs37yQS4xVPlJDU4+0Dczww=
Subject key identifier: 3C:66:7E:A9:1C:91:B1:42:B0:54:6F:06:92:FE:9A:04:EA:25:E2:E4
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 01A106CA5FCF510A9C7E752B87A2D89E0E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1A1D
Signing time: Sun 04 Oct 2026 12:01:28 +0000
Manifest this update: Sun 04 Oct 2026 12:01:28 +0000
Manifest next update: Mon 05 Oct 2026 12:01:28 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: ww2yvNL+MbfMHEKvcTXHPODr7zF7pck28DczVaU+8tc=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:5f:cf:51:0a:9c:7e:75:2b:87:a2:d8:9e:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Oct 4 12:01:28 2026 GMT
Not After : Oct 5 12:01:28 2026 GMT
Subject: CN=3c667ea91c91b142b0546f0692fe9a04ea25e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:48:6b:f0:49:9b:34:4e:30:96:96:da:7d:
eb:fc:fc:c9:17:56:db:ef:c2:6c:40:9c:5b:77:aa:
6e:c3:bb:58:b5:4b:a9:bb:bd:27:ff:7e:f7:72:6f:
ff:07:c8:07:63:14:49:7b:1e:26:dc:76:0a:3f:c0:
aa:2a:a9:01:3c:fb:55:06:95:89:6d:8e:5f:14:60:
b5:4d:31:ef:9e:71:77:58:2c:d1:6f:22:3d:6e:cf:
ef:c2:9d:f3:e7:1f:cb:94:69:8d:35:a2:e5:76:2d:
7e:23:2f:aa:0b:51:8c:d9:f1:8a:9b:03:d1:a6:97:
04:42:3c:7c:0e:73:ff:f6:e3:23:16:08:8b:1b:5f:
c4:4a:aa:36:0d:4e:0a:bd:92:d1:6e:9e:fd:31:dd:
42:d1:44:a2:fc:62:9f:15:de:8d:0f:2b:24:f2:f6:
63:09:49:d8:ad:3e:a9:c8:68:cf:ad:c0:23:a0:15:
f4:3b:3b:b2:4d:2f:48:c7:e3:6d:e2:97:59:58:22:
6e:4b:1e:e0:03:c1:41:39:ac:6b:0b:b9:6d:f8:01:
7a:cf:96:8d:1e:47:bd:ec:77:68:61:b0:ee:1b:72:
ef:25:fd:fe:2c:60:05:f0:87:c0:98:e3:fe:0f:c1:
d2:5a:90:6f:93:e1:ab:4b:4b:04:2e:1a:d8:c2:61:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:7E:A9:1C:91:B1:42:B0:54:6F:06:92:FE:9A:04:EA:25:E2:E4
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:79:90:d7:e6:ba:60:08:91:24:96:0a:b2:b9:6a:74:e3:
cc:45:e5:51:2b:e7:d4:29:b2:0b:6e:23:02:2f:3c:d5:84:02:
d2:0b:fe:df:c9:91:6d:d6:a1:dc:ea:ec:01:ac:1d:3d:c2:e8:
ea:2e:8c:3b:b5:17:de:ec:f9:95:86:89:09:45:0a:8f:63:d2:
ff:6c:61:f3:9f:70:ec:ba:f8:8a:51:d0:20:7d:6b:94:55:a4:
db:a4:36:ad:61:87:58:e9:1f:b5:7e:7d:26:45:cf:54:37:92:
e6:d9:40:4a:e5:2e:af:0f:d3:a2:0b:e7:4b:0e:2b:6d:ac:8e:
d9:33:e4:67:69:82:94:36:b4:ff:6c:58:88:e5:15:b3:42:48:
a8:a0:42:19:ee:ab:8d:26:39:df:d2:a9:60:d6:50:de:c3:73:
16:9c:18:2b:43:37:48:d9:db:1d:06:fc:ec:96:74:8d:94:0d:
1d:42:45:65:fd:4e:8f:3a:9c:ef:e4:27:c5:08:0b:4e:c9:39:
f5:54:49:e7:89:85:fd:6c:2e:6a:f9:48:37:85:43:4b:1a:3d:
1f:07:70:73:72:10:e4:f1:8b:27:73:4f:c7:28:4b:0b:88:0f:
00:b5:77:38:23:5d:60:bc:23:73:49:83:4f:a1:2c:17:e2:94:
91:41:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:35:37 2026 by rpki-client