Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: 8qk+JImgbZw9dC0xtD90b/c9LFcDwN3QC+bYfXgaZqQ=
Subject key identifier: BC:5C:52:86:E4:69:3E:15:8F:05:FF:5D:89:CB:35:E7:EA:1E:8A:F1
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019F92ECEA38420BA717596CB28DF370BC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1A17
Signing time: Fri 24 Jul 2026 07:00:27 +0000
Manifest this update: Fri 24 Jul 2026 07:00:27 +0000
Manifest next update: Sat 25 Jul 2026 07:00:27 +0000
Files and hashes: 1: 3CQPBvwQSy9_cPU5cEP39d2nObQ.roa (hash: mHzia9yQ9jVnKOVKmS0n7GXa6oQoerRG/9Ani8Cxtyw=)
2: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
3: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: 2iukts138OnFpnCytLmN9lLBs9xZDYMbgXFghmeGKz0=)
5: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
6: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:ea:38:42:0b:a7:17:59:6c:b2:8d:f3:70:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jul 24 07:00:27 2026 GMT
Not After : Jul 25 07:00:27 2026 GMT
Subject: CN=bc5c5286e4693e158f05ff5d89cb35e7ea1e8af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:15:1b:ac:37:fa:29:9e:9e:46:11:98:7c:
a9:aa:0b:33:dd:4b:b9:73:58:01:64:11:28:27:bc:
ea:c2:7c:b6:a7:cd:53:63:5c:98:5b:ab:91:dd:f7:
11:14:69:ea:b8:4c:43:db:42:5a:00:56:c5:cd:9b:
5c:42:6d:18:2d:b3:af:bd:13:d2:06:ff:3a:17:d6:
ad:26:35:44:2e:6b:11:58:1d:15:ef:80:bd:bd:1a:
3f:6b:41:03:f4:e4:0f:0e:d1:37:d3:e8:24:b7:bc:
77:e6:a4:3e:d4:6b:be:b1:fe:c1:38:4a:9d:cd:78:
28:72:0c:41:99:ac:e7:19:13:29:dc:2a:48:3a:34:
72:42:46:14:1c:56:61:43:f8:bb:47:a5:cc:86:12:
4c:3f:1d:b5:98:29:eb:b6:d4:14:3b:56:ad:30:f9:
1e:95:43:80:af:09:ca:1e:fe:07:90:fa:11:4b:96:
12:09:42:5d:ad:64:37:ef:04:83:83:c6:d9:66:ff:
49:78:32:29:aa:1e:3b:34:7f:4e:7e:bf:86:b8:0e:
1f:00:d0:97:3e:06:9a:86:1d:3d:e9:9b:f3:fe:d2:
21:af:39:b9:be:16:50:85:b3:25:22:e8:f2:9d:26:
eb:0b:ac:80:a1:19:cd:d8:ad:0d:78:02:f5:21:eb:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:52:86:E4:69:3E:15:8F:05:FF:5D:89:CB:35:E7:EA:1E:8A:F1
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:e0:69:a9:e1:a8:5a:39:c4:e5:28:27:10:c6:47:75:fc:
10:5d:a3:b1:8d:24:0e:1f:6a:72:4a:12:47:5d:6e:79:30:32:
7d:11:53:26:9e:db:b6:80:db:7c:8a:04:f5:c9:98:bf:bf:88:
b5:e2:3f:bb:07:97:ee:ec:2c:39:e1:b6:ab:10:9e:59:85:99:
dd:de:d8:4f:f5:58:ef:b4:24:6a:fd:bc:ca:aa:86:b7:ae:c8:
cf:4b:1b:57:05:b5:d8:f8:cf:77:82:64:ff:e6:a7:fc:90:75:
47:1e:67:68:e7:30:43:0e:72:11:c1:0b:71:20:bf:12:8b:e6:
13:46:80:94:38:76:ba:97:43:9f:22:3a:1e:ce:a5:2c:22:34:
bd:38:13:87:a1:f9:48:a8:0f:86:ea:e5:46:c0:bc:b0:f7:4d:
b9:6f:4f:3a:8f:28:8a:61:2f:65:81:ab:17:da:1d:a9:09:2b:
37:7a:1a:b3:52:9b:ef:38:bc:05:dc:8b:b5:2e:51:29:c9:83:
91:d5:98:ff:22:01:d7:86:46:02:05:c5:1a:51:ca:2e:66:a3:
f2:28:19:5c:e9:a5:0e:d4:1e:8e:e8:41:0e:07:95:50:96:47:
50:18:10:c6:2e:ae:47:dc:e4:a2:be:98:72:77:05:b6:9b:57:
ce:3a:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:38 2026 by rpki-client