Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: A+P94lHcwdtlj6R8mDaWxknHY1WtxDyWcZMzRva2yl0=
Subject key identifier: 2C:E6:82:BD:B5:6E:92:4C:B8:9A:6E:20:6D:73:D8:AF:25:9F:E9:1F
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019F94002193C0E0E420E29DEAC7ECE4BA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 195D
Signing time: Fri 24 Jul 2026 12:01:04 +0000
Manifest this update: Fri 24 Jul 2026 12:01:04 +0000
Manifest next update: Sat 25 Jul 2026 12:01:04 +0000
Files and hashes: 1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: gGlKavI+BKIe///t4WuCHqnqLaKTbNgwWZxuZKHlb0w=)
2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:21:93:c0:e0:e4:20:e2:9d:ea:c7:ec:e4:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jul 24 12:01:04 2026 GMT
Not After : Jul 25 12:01:04 2026 GMT
Subject: CN=2ce682bdb56e924cb89a6e206d73d8af259fe91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:a3:0b:e7:ff:13:03:c1:10:29:8f:1a:fa:
f3:80:ff:1b:5d:d3:25:45:86:52:4b:cd:0c:5b:72:
93:d6:07:24:c4:2f:0b:ef:1b:09:bf:00:66:53:4c:
ff:90:a3:d6:52:ce:c5:a9:1e:85:e8:4c:1e:3a:88:
df:89:60:9e:60:22:04:34:21:5e:b2:ea:ea:44:a5:
52:24:f0:36:9b:b4:84:67:71:00:9e:52:9c:d2:ef:
61:fd:37:67:6c:c0:36:46:79:04:60:e6:b3:a6:41:
d7:bd:ee:05:08:52:51:5a:85:c8:87:7b:d6:ac:26:
2b:ab:a8:9d:62:2d:63:32:3d:90:5a:e3:eb:3f:a0:
40:0f:a3:f6:ae:9c:ed:76:7c:9c:fd:fc:ec:28:5c:
30:2a:a3:47:d5:26:2d:87:c2:05:a0:1e:de:39:fc:
cb:c3:46:67:6b:6d:b7:15:ac:3c:b5:30:3a:46:94:
30:88:df:98:1e:cc:f3:d1:05:15:0e:42:2b:a9:0d:
74:e9:7a:51:ba:a1:51:6f:9b:61:fd:bf:05:f0:5d:
24:93:7d:9e:32:85:65:1d:ae:d3:bb:8a:ac:49:c0:
ca:74:9f:9d:9d:12:02:6a:6d:cd:cd:f9:50:4f:30:
91:63:b9:19:85:5a:f0:f4:1d:79:7a:a4:d5:7e:99:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:82:BD:B5:6E:92:4C:B8:9A:6E:20:6D:73:D8:AF:25:9F:E9:1F
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4b:a0:ed:33:05:82:fa:98:8f:a5:5f:80:b6:a4:a9:40:ef:
cd:17:c7:e3:9e:be:20:84:43:a7:22:81:8c:74:ac:8a:5c:1f:
65:cf:f4:23:a6:a5:74:21:5f:b7:1c:e3:20:db:bb:df:53:9e:
62:8a:51:37:09:31:9f:72:af:e5:d7:dc:ef:0a:e5:48:d4:02:
b1:f3:8c:60:14:74:a4:ff:1a:78:30:87:ac:29:3d:a6:5f:f6:
d7:1a:b6:79:e8:d6:9f:2c:cb:6c:ae:1e:25:24:b7:92:cf:a8:
82:43:6e:96:3b:95:81:7b:0f:db:ea:bb:fd:9a:23:a7:70:80:
83:76:7f:fd:df:93:34:11:35:bb:2d:4e:3f:66:19:66:7e:eb:
3e:72:31:6a:d0:1b:6f:77:25:0a:02:cc:66:af:53:e9:94:c7:
bd:74:fe:1a:e9:00:aa:07:ad:1a:38:4c:05:75:17:06:98:7f:
8d:a9:24:04:80:f6:b9:0b:ea:26:40:45:78:74:8f:cf:c1:c0:
97:10:63:8d:ed:13:8d:3b:66:e5:7d:41:fd:89:9f:c4:b7:1c:
54:90:af:63:00:a2:89:1c:a2:cb:18:3f:a4:14:de:f3:04:3d:
d8:35:c1:fa:6d:fe:ec:3c:e3:00:8c:fc:b3:fa:0b:de:49:75:
c5:11:a5:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACGTwODkIOKd6sfs5Lp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYwNzI0MTIwMTA0WhcNMjYwNzI1MTIwMTA0WjAzMTEwLwYDVQQD
EygyY2U2ODJiZGI1NmU5MjRjYjg5YTZlMjA2ZDczZDhhZjI1OWZlOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZyjC+f/EwPBECmPGvrzgP8bXdMl
RYZSS80MW3KT1gckxC8L7xsJvwBmU0z/kKPWUs7FqR6F6EweOojfiWCeYCIENCFe
surqRKVSJPA2m7SEZ3EAnlKc0u9h/TdnbMA2RnkEYOazpkHXve4FCFJRWoXIh3vW
rCYrq6idYi1jMj2QWuPrP6BAD6P2rpztdnyc/fzsKFwwKqNH1SYth8IFoB7eOfzL
w0Zna223Faw8tTA6RpQwiN+YHszz0QUVDkIrqQ106XpRuqFRb5th/b8F8F0kk32e
MoVlHa7Tu4qsScDKdJ+dnRICam3NzflQTzCRY7kZhVrw9B15eqTVfpmGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzmgr21bpJMuJpuIG1z2K8ln+kfMB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREug7TMF
gvqYj6VfgLakqUDvzRfH456+IIRDpyKBjHSsilwfZc/0I6aldCFftxzjINu731Oe
YopRNwkxn3Kv5dfc7wrlSNQCsfOMYBR0pP8aeDCHrCk9pl/21xq2eejWnyzLbK4e
JSS3ks+ogkNuljuVgXsP2+q7/Zojp3CAg3Z//d+TNBE1uy1OP2YZZn7rPnIxatAb
b3clCgLMZq9T6ZTHvXT+GukAqgetGjhMBXUXBph/jakkBID2uQvqJkBFeHSPz8HA
lxBjje0TjTtm5X1B/YmfxLccVJCvYwCiiRyiyxg/pBTe8wQ92DXB+m3+7DzjAIz8
s/oL3kl1xRGloA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:23:09 2026 by rpki-client