Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: 1XdpJEsE2if64qPMy4SOqiC6vK1Vz+l8oDathfEcKQE=
Subject key identifier: 7E:43:43:8A:E6:A0:54:B0:73:EC:62:0D:A4:84:FA:2A:88:E4:87:DB
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 01A0FD2245B76BFAFBC79A76641D85DE03C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0749
Signing time: Fri 02 Oct 2026 15:01:16 +0000
Manifest this update: Fri 02 Oct 2026 15:01:16 +0000
Manifest next update: Sat 03 Oct 2026 15:01:16 +0000
Files and hashes: 1: 92BWX1zbWyo4TMOfNb_tzSoWbCY.roa (hash: c0Yuqp+qbpUBM3UZdmZmEFvrAfboFIavdSOeFXW5BoI=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: LoXqQOS6RpvwOj+WTqb4K20cGRy3q1okSnq9OU/b51Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:45:b7:6b:fa:fb:c7:9a:76:64:1d:85:de:03:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Oct 2 15:01:16 2026 GMT
Not After : Oct 3 15:01:16 2026 GMT
Subject: CN=7e43438ae6a054b073ec620da484fa2a88e487db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:e2:0e:64:58:28:a2:a8:f2:b2:bc:74:57:
94:5d:ac:76:ed:d0:6a:f0:37:dd:e5:ba:b6:81:43:
55:3e:20:13:bf:6f:f6:9e:c1:ed:38:94:7b:46:90:
e5:5b:89:ec:70:61:9d:82:68:7e:55:40:4b:eb:ba:
56:49:04:3b:f3:e5:81:98:c8:b2:bc:d3:50:7b:8a:
47:ef:54:9e:6f:e4:49:05:e8:88:79:9f:37:61:7f:
6d:0b:b9:2a:a0:38:d0:81:9a:af:b1:f6:40:31:5f:
95:ff:8e:64:b9:fa:f2:88:ea:95:a4:81:40:a6:16:
c3:04:41:ba:a8:03:c4:63:f9:9a:fc:d6:68:78:85:
00:93:24:41:56:a9:d6:fe:e7:31:5e:c5:6c:b5:45:
1d:ad:37:b4:25:45:55:11:06:79:31:51:aa:b5:42:
0e:c5:87:36:c8:81:c0:fe:c4:66:0f:85:7e:34:61:
c1:f9:d6:31:4b:b5:90:01:82:bf:53:2b:d8:d2:3d:
90:88:bc:f1:41:99:7c:20:8c:fa:28:76:b8:38:1b:
e6:04:c4:6f:4a:ab:99:6c:a3:dd:54:61:fe:c5:e4:
71:3c:4b:75:df:e5:ec:b7:db:34:9d:d0:41:91:8c:
ce:20:60:bf:f1:83:8b:4b:65:77:ad:1f:f6:ab:33:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:43:8A:E6:A0:54:B0:73:EC:62:0D:A4:84:FA:2A:88:E4:87:DB
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:b8:60:bb:42:68:9d:9f:23:f2:92:bc:ae:7b:de:21:26:
84:4e:01:2a:44:b5:f3:0f:56:cc:b2:09:c1:7f:43:0f:6c:52:
4d:60:6c:a7:cf:9a:12:57:b4:ff:7f:0b:30:f2:32:eb:03:5d:
ba:ef:03:9f:6a:47:be:cc:31:b7:93:28:e1:cb:35:93:a9:fb:
21:b0:43:9e:69:76:75:56:2e:9f:05:90:6d:c2:1a:aa:ca:5c:
a0:97:9a:8c:e0:70:27:68:b0:3a:35:c5:5d:8a:3c:6f:74:42:
1a:fe:c9:b7:a7:4d:cd:3a:f7:28:45:40:92:dc:06:56:4e:1c:
7a:65:3e:ae:d0:87:1c:bb:1e:bc:39:68:e9:01:0f:20:86:21:
0b:46:06:c2:dc:ec:59:33:ef:9e:3d:d4:ed:13:65:cd:f4:e0:
89:fd:91:79:0b:c7:86:ce:83:c2:f4:f8:c1:14:86:fa:e7:93:
f7:cc:5f:b5:56:35:25:69:00:6a:7c:5f:18:3c:a9:c3:99:b0:
75:9c:74:42:69:01:67:86:7a:5a:6b:84:5f:40:67:61:4e:f1:
e1:cf:cd:eb:85:c8:88:11:e8:ae:de:94:31:eb:ef:4c:c9:33:
ab:21:6c:33:4c:79:bb:71:9e:02:c8:46:49:a0:65:3c:fb:e7:
89:e7:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:02:04 2026 by rpki-client