Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: 53+WuE/QamLmWT4K78dejX2bFQYPdrnTGUwdOsu2ow4=
Subject key identifier: EA:34:CC:7A:7C:E2:13:AA:02:9F:ED:6F:2F:17:FD:17:85:D9:2B:AE
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019D27A92ADF9B8AACC0398E4E4631CD60CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 054C
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (hash: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: tcCooVqXMdNvBTwantdTz2v/F8TCDRO/h+d3H3cvb88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2a:df:9b:8a:ac:c0:39:8e:4e:46:31:cd:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=ea34cc7a7ce213aa029fed6f2f17fd1785d92bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:e2:f4:5a:eb:4b:a5:3e:d2:2d:e9:cf:2a:
7e:87:a4:c4:28:c2:d0:90:09:a9:82:9e:50:de:97:
02:9c:2d:d6:8f:43:4c:9b:40:71:2b:7d:8f:c4:58:
e7:74:68:9e:81:e9:95:61:e0:fe:a6:b9:26:17:f1:
12:5a:89:a8:c3:ed:5a:24:44:0a:53:2a:af:ad:3a:
67:c5:53:e4:f3:07:34:46:ac:a2:11:64:46:b8:0a:
28:1a:72:57:d9:a5:e6:1f:90:cb:16:ae:39:7e:cf:
1c:34:38:b1:b7:08:3f:b9:17:28:c7:9d:e0:b1:03:
78:b6:2e:c1:06:1e:d2:bc:a3:8d:e3:16:60:e3:c6:
58:e8:51:5d:46:02:a8:a7:ab:50:a8:04:0c:ee:46:
13:83:a0:c8:25:01:60:b2:4a:ae:8a:58:52:cf:8c:
f0:6c:89:30:71:5b:44:b5:08:14:20:30:c9:b3:d2:
fd:f4:27:f0:f7:49:5d:59:c8:2f:ff:39:b9:5a:90:
49:60:5c:9a:dc:05:07:c4:e9:2a:bc:c9:b0:b7:3c:
c6:eb:8e:a4:81:b0:fe:b3:f2:7e:0a:70:dd:e5:e6:
0d:0f:b5:0f:f2:0c:1f:50:aa:1b:4d:4a:08:6a:2b:
34:f9:66:b6:fd:51:ef:10:c5:2f:66:f0:20:5d:05:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:CC:7A:7C:E2:13:AA:02:9F:ED:6F:2F:17:FD:17:85:D9:2B:AE
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:70:67:30:a0:37:34:bc:45:18:a1:92:f8:d2:27:f6:fe:77:
c6:e9:ce:01:88:35:a0:cf:87:b0:d4:b0:cf:3d:3c:21:49:46:
99:5c:26:8e:51:5a:63:c3:35:59:02:19:a5:83:7f:1e:20:3d:
31:b7:ad:5d:9b:6a:74:75:d3:fc:68:14:69:68:18:ba:9d:02:
f8:73:1d:a2:5c:5c:4f:d1:a6:b4:aa:eb:28:4d:07:00:82:1d:
35:a9:f5:1c:22:fc:72:b7:37:ce:a6:57:92:83:84:f4:6c:d9:
aa:2d:b3:5c:af:1c:89:f1:da:97:55:f6:ca:0f:80:b6:54:93:
07:99:21:92:8d:c8:9a:7c:f0:2f:29:4c:a7:a5:8c:91:9c:40:
7d:c4:f8:68:05:ad:81:08:0b:45:f7:ff:b0:e0:4b:47:a8:66:
2e:02:47:9d:2e:41:38:3c:2f:d6:43:07:0d:e4:8a:29:ff:64:
95:06:75:6f:c6:12:89:28:cf:67:00:e7:8b:f7:bc:d6:e8:ed:
28:cf:7a:e0:d5:f7:45:e8:d7:d6:89:6e:dd:77:44:69:8c:a4:
25:b6:78:18:72:9c:29:fa:a9:a3:8f:ea:b2:7f:66:6c:d7:8c:
7d:14:93:19:5f:10:86:ba:c8:a2:e7:98:3e:54:c9:33:52:e3:
8a:c8:5e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSrfm4qswDmOTkYxzWDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx
YzgwMTMwHhcNMjYwMzI2MDEwMTMxWhcNMjYwMzI3MDEwMTMxWjAzMTEwLwYDVQQD
EyhlYTM0Y2M3YTdjZTIxM2FhMDI5ZmVkNmYyZjE3ZmQxNzg1ZDkyYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfbi9FrrS6U+0i3pzyp+h6TEKMLQ
kAmpgp5Q3pcCnC3Wj0NMm0BxK32PxFjndGiegemVYeD+prkmF/ESWomow+1aJEQK
UyqvrTpnxVPk8wc0RqyiEWRGuAooGnJX2aXmH5DLFq45fs8cNDixtwg/uRcox53g
sQN4ti7BBh7SvKON4xZg48ZY6FFdRgKop6tQqAQM7kYTg6DIJQFgskquilhSz4zw
bIkwcVtEtQgUIDDJs9L99Cfw90ldWcgv/zm5WpBJYFya3AUHxOkqvMmwtzzG646k
gbD+s/J+CnDd5eYND7UP8gwfUKobTUoIais0+Wa2/VHvEMUvZvAgXQUIJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo0zHp84hOqAp/tby8X/ReF2SuuMB8GA1UdIwQY
MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct
NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw
LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXBnMKA3
NLxFGKGS+NIn9v53xunOAYg1oM+HsNSwzz08IUlGmVwmjlFaY8M1WQIZpYN/HiA9
MbetXZtqdHXT/GgUaWgYup0C+HMdolxcT9GmtKrrKE0HAIIdNan1HCL8crc3zqZX
koOE9GzZqi2zXK8cifHal1X2yg+AtlSTB5khko3ImnzwLylMp6WMkZxAfcT4aAWt
gQgLRff/sOBLR6hmLgJHnS5BODwv1kMHDeSKKf9klQZ1b8YSiSjPZwDni/e81ujt
KM964NX3RejX1olu3XdEaYykJbZ4GHKcKfqpo4/qsn9mbNeMfRSTGV8QhrrIoueY
PlTJM1LjisheRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:25 2026 by rpki-client