Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: 1UiBo0SodskQBTQBhTs/UkIYJTNpqYXUnbVstQ0ZL1k=
Subject key identifier: 04:E0:16:FB:FD:00:6E:02:28:E8:1F:57:A7:37:07:AB:E0:C7:7C:5F
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019E1ED9BD795D8CD3E63648DE482D15759C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 05CC
Signing time: Wed 13 May 2026 01:00:46 +0000
Manifest this update: Wed 13 May 2026 01:00:46 +0000
Manifest next update: Thu 14 May 2026 01:00:46 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: 2lqKUrAC+AeSZxz9OvHPwHJJajeNK+NexIp7pQRphoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:bd:79:5d:8c:d3:e6:36:48:de:48:2d:15:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: May 13 01:00:46 2026 GMT
Not After : May 14 01:00:46 2026 GMT
Subject: CN=04e016fbfd006e0228e81f57a73707abe0c77c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:20:5c:65:85:ed:c6:36:33:72:a3:cb:38:
5a:2d:2b:1d:7a:07:b6:ad:96:73:ee:40:62:af:8d:
21:48:b3:27:c0:ec:ec:51:49:8d:43:dd:19:1c:cf:
c4:bc:4c:86:d4:36:f8:5f:ee:8d:65:bb:b8:0b:6b:
ac:97:c6:97:43:b8:0a:46:a4:93:29:a1:3b:3b:42:
28:62:da:c3:fe:2c:7b:52:3e:47:84:9d:93:c1:29:
04:0c:0f:9f:68:57:bc:97:d0:1e:cc:6a:36:86:a8:
52:ed:12:95:bf:66:00:d2:25:69:80:10:2f:c1:79:
39:28:d8:9c:a3:de:11:c7:07:aa:a5:d8:04:00:6b:
1b:fe:e5:52:7e:c7:70:5a:2a:2d:82:90:b0:a0:f1:
12:b3:e4:fa:66:eb:71:91:4d:01:f3:93:16:47:b4:
26:03:df:e8:0a:98:77:08:64:6e:5c:6e:87:34:f9:
49:50:77:86:2f:eb:38:be:60:c5:99:d6:82:9e:1d:
cd:0c:93:b9:6b:10:fa:3f:18:b9:18:de:3a:16:25:
ef:88:03:12:75:36:14:3d:4e:da:37:e2:ce:0c:24:
5d:11:78:9e:e9:c3:14:53:6c:96:d2:44:6f:bb:e7:
d4:f2:5e:95:93:12:a3:16:e2:7c:47:20:06:d6:c2:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:16:FB:FD:00:6E:02:28:E8:1F:57:A7:37:07:AB:E0:C7:7C:5F
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f3:80:55:98:8e:b4:7c:78:3a:b8:55:7f:0d:5b:5a:4e:b1:
ec:00:b2:22:0c:8c:63:7f:71:68:62:67:52:0a:a6:4d:72:23:
ce:12:14:d8:0b:a3:56:48:13:32:aa:38:d1:3b:e7:11:18:52:
c8:43:3e:4f:b0:98:a8:d6:76:af:0d:ff:df:c2:50:c8:4c:f2:
d0:1e:a9:9c:ce:af:31:51:7c:57:14:0f:f5:a8:50:49:60:36:
22:d3:3f:11:bf:27:54:61:c7:ec:0c:0b:81:1b:9d:fd:d0:ee:
b3:37:6e:bb:fb:5f:04:aa:8b:f0:74:2a:c9:19:88:13:cb:e1:
e3:aa:36:7e:7a:1f:2e:d1:10:05:2f:14:cd:9d:cd:c0:07:81:
ac:f2:60:33:48:0c:df:96:32:1f:fc:26:ec:ab:14:1f:cb:bf:
b2:75:e1:f8:1d:a2:d7:aa:b1:d3:5d:1b:e1:30:12:33:12:44:
b6:da:8a:1d:e6:bb:26:33:6f:91:c1:c9:ba:57:7e:d6:09:c3:
0d:b5:94:12:e5:a6:ef:16:e0:d4:3c:5d:c9:98:af:31:cb:66:
51:53:5d:75:6e:26:5f:d8:1d:4e:85:24:c3:4a:f7:cf:c5:14:
0a:b7:a9:32:56:64:bb:58:e3:65:ef:4c:fb:fd:9c:b1:b6:9b:
de:2c:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:56 2026 by rpki-client