Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: cYDbBENxB7HVEm41ISbvO2jAUBuaLA3ypzHEYItiOMw=
Subject key identifier: 76:C4:A9:4B:02:EB:19:09:4B:6C:F9:47:42:76:EC:D0:CA:0E:31:72
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019F921140AC57D1E8FE66A547E3E9BFBA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 068D
Signing time: Fri 24 Jul 2026 03:00:31 +0000
Manifest this update: Fri 24 Jul 2026 03:00:31 +0000
Manifest next update: Sat 25 Jul 2026 03:00:31 +0000
Files and hashes: 1: 92BWX1zbWyo4TMOfNb_tzSoWbCY.roa (hash: c0Yuqp+qbpUBM3UZdmZmEFvrAfboFIavdSOeFXW5BoI=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: R9SFBaqc8ck9wc/7ywWyJ1kOuSUrZETkkUpOa87oEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:40:ac:57:d1:e8:fe:66:a5:47:e3:e9:bf:ba:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jul 24 03:00:31 2026 GMT
Not After : Jul 25 03:00:31 2026 GMT
Subject: CN=76c4a94b02eb19094b6cf9474276ecd0ca0e3172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:59:cb:8c:bc:2d:6a:8f:03:40:10:73:3c:
20:6b:64:24:c9:d6:57:b4:38:6e:8b:b5:7a:99:ae:
0e:fd:39:cf:f1:96:5f:e3:3d:f1:2a:23:81:68:48:
24:ee:32:a9:db:02:7b:51:2d:7a:8f:3d:5d:0c:80:
48:94:6f:e4:aa:94:1d:fb:62:3d:b1:29:c3:ee:21:
d7:fe:04:24:8e:29:84:74:88:c3:ac:67:89:3e:8d:
0e:8d:60:c5:50:61:68:98:cd:81:38:8e:67:be:1e:
9e:db:ec:64:dc:af:a7:bc:92:70:b6:3c:b1:9b:36:
11:8a:75:83:aa:7f:60:06:07:73:d4:72:b4:64:28:
d0:20:3a:98:a1:d2:ae:1d:38:0f:e7:6e:21:5f:3e:
9f:b8:93:10:cf:41:74:2a:52:df:eb:c2:d4:98:e6:
ef:bd:e5:c4:7b:f1:2f:97:65:c7:a2:74:1f:74:2d:
e0:43:9e:66:1a:ac:17:76:43:be:f4:83:30:7c:96:
58:9e:d7:40:0a:bf:bf:b7:f5:5f:cb:50:76:b5:65:
90:cc:d1:01:91:dc:b9:c4:e7:15:f3:23:60:45:dc:
b5:1e:02:a6:5b:93:bd:38:2f:98:49:b9:29:bc:00:
00:33:cb:00:64:46:d6:29:88:8b:df:dc:2e:30:4a:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:A9:4B:02:EB:19:09:4B:6C:F9:47:42:76:EC:D0:CA:0E:31:72
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:cf:1d:69:35:cb:9e:3c:c7:c6:71:f8:35:36:ca:82:e1:
b7:ad:56:c2:1d:30:8a:f6:47:c6:51:09:3b:f2:33:d5:1c:35:
bf:0a:8c:71:48:0d:a2:29:2d:6d:3e:24:12:57:61:75:dd:6d:
4b:57:c7:c9:4b:6b:37:e2:e2:27:e3:4f:e6:a3:41:e4:dc:21:
e8:d8:05:6d:e5:93:f1:ee:7c:6d:40:4f:55:43:ea:2a:32:80:
87:27:9d:3c:6b:9b:6d:65:bf:41:9d:86:97:3d:74:21:5e:92:
08:f5:3c:8d:bf:ff:2a:72:7f:79:ae:2b:81:63:b3:2e:40:84:
73:af:40:c3:e0:87:65:a8:81:92:d0:8f:c3:49:ce:05:c8:60:
22:70:5c:d7:c8:0c:c8:25:f3:3f:9b:d2:6b:59:df:ec:a7:d1:
5e:f9:c1:31:2e:72:e1:b0:17:50:10:74:03:38:f2:42:e4:2a:
f0:54:65:eb:98:bd:bb:e5:9f:2a:39:07:62:be:36:83:27:ce:
90:85:83:24:7d:21:f8:30:ac:5d:99:32:36:39:48:02:f5:4b:
35:21:e5:54:dd:f7:f7:57:03:8f:d4:05:26:07:bb:0e:b5:da:
ec:92:d5:80:40:5d:d1:a7:4d:6b:ea:1c:93:30:ca:7e:2d:54:
65:5f:44:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEUCsV9Ho/malR+Ppv7p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx
YzgwMTMwHhcNMjYwNzI0MDMwMDMxWhcNMjYwNzI1MDMwMDMxWjAzMTEwLwYDVQQD
Eyg3NmM0YTk0YjAyZWIxOTA5NGI2Y2Y5NDc0Mjc2ZWNkMGNhMGUzMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiRZy4y8LWqPA0AQczwga2QkydZX
tDhui7V6ma4O/TnP8ZZf4z3xKiOBaEgk7jKp2wJ7US16jz1dDIBIlG/kqpQd+2I9
sSnD7iHX/gQkjimEdIjDrGeJPo0OjWDFUGFomM2BOI5nvh6e2+xk3K+nvJJwtjyx
mzYRinWDqn9gBgdz1HK0ZCjQIDqYodKuHTgP524hXz6fuJMQz0F0KlLf68LUmObv
veXEe/Evl2XHonQfdC3gQ55mGqwXdkO+9IMwfJZYntdACr+/t/Vfy1B2tWWQzNEB
kdy5xOcV8yNgRdy1HgKmW5O9OC+YSbkpvAAAM8sAZEbWKYiL39wuMEp0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbEqUsC6xkJS2z5R0J27NDKDjFyMB8GA1UdIwQY
MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct
NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw
LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT/PHWk1
y548x8Zx+DU2yoLht61Wwh0wivZHxlEJO/Iz1Rw1vwqMcUgNoiktbT4kEldhdd1t
S1fHyUtrN+LiJ+NP5qNB5Nwh6NgFbeWT8e58bUBPVUPqKjKAhyedPGubbWW/QZ2G
lz10IV6SCPU8jb//KnJ/ea4rgWOzLkCEc69Aw+CHZaiBktCPw0nOBchgInBc18gM
yCXzP5vSa1nf7KfRXvnBMS5y4bAXUBB0AzjyQuQq8FRl65i9u+WfKjkHYr42gyfO
kIWDJH0h+DCsXZkyNjlIAvVLNSHlVN3391cDj9QFJge7DrXa7JLVgEBd0adNa+oc
kzDKfi1UZV9Eow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:17 2026 by rpki-client