Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: p57+x6BxcPBFpYalSYBcu3dK2IXvHz6qseks1LAEQNI=
Subject key identifier: 1D:4F:5D:69:CC:D2:B9:92:03:33:8C:00:05:7D:A8:DF:42:FE:B2:9B
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01A0DB047836CD016AA859C233C6DE9E7498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1AC1
Signing time: Sat 26 Sep 2026 00:01:38 +0000
Manifest this update: Sat 26 Sep 2026 00:01:38 +0000
Manifest next update: Sun 27 Sep 2026 00:01:38 +0000
Files and hashes: 1: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
2: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: S+EYo7aUfoDW+yhE5zdYKYjijxOVuz4kW4JDQ16Ygb0=)
4: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
5: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
6: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
7: ltWQIbVSsWD0YaRvvL1lUUftqVM.roa (hash: IKV8fDWgcwQI5DFcwu0bq2ldD2bFd7MscF59oggxfFA=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:78:36:cd:01:6a:a8:59:c2:33:c6:de:9e:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Sep 26 00:01:38 2026 GMT
Not After : Sep 27 00:01:38 2026 GMT
Subject: CN=1d4f5d69ccd2b99203338c00057da8df42feb29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:ee:ce:b3:f4:7e:e1:e6:2b:1b:d8:82:e2:
e4:1e:8f:67:b6:9f:10:b4:24:11:68:a4:d1:51:1e:
3f:ee:28:a4:10:66:c7:9d:6a:6b:aa:62:c3:7e:31:
5d:04:95:21:c7:e8:1a:df:40:29:23:01:78:41:d7:
4f:2a:03:a2:d9:be:3a:9f:bf:49:43:37:e2:25:d1:
ef:d0:35:1b:70:ee:bf:c3:97:42:0f:34:98:2f:d2:
48:a5:64:3e:c9:e1:d8:53:52:0a:dc:96:63:49:e6:
90:e7:bd:90:6d:89:d0:2c:23:9a:f9:44:ea:02:cc:
02:c5:a4:18:f3:90:72:db:0c:b8:a8:13:b1:60:a2:
0a:bf:86:20:f0:cb:2e:24:bb:28:dc:0d:a8:d5:8e:
c6:b5:a4:7a:e9:a3:0d:6c:73:22:59:41:ab:27:0b:
a2:50:ac:1c:a7:21:d2:72:91:67:37:a7:2b:50:4c:
9a:eb:76:ac:78:3b:d1:f5:7d:b5:47:7d:d5:29:b9:
b2:22:1d:c8:95:01:cf:6e:ab:e2:f8:5a:13:79:61:
2e:a6:d5:43:c7:ed:11:5c:8f:55:f8:8a:4d:c1:09:
b4:75:35:84:15:61:42:68:61:9b:95:33:24:00:06:
47:c7:92:fd:b9:52:86:a8:c7:f7:27:af:92:1d:a5:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:5D:69:CC:D2:B9:92:03:33:8C:00:05:7D:A8:DF:42:FE:B2:9B
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:f9:5f:fb:d7:ae:0d:f2:0b:5a:fc:bb:9f:9d:4d:1e:7b:
75:be:76:a2:ae:c3:2b:20:ef:65:80:9a:99:da:1a:88:22:74:
e2:7f:a1:d6:3b:62:be:3e:26:8f:32:2c:61:e6:d6:6c:2f:13:
83:3f:f2:cb:b7:48:19:bd:0a:50:88:fc:71:52:0d:60:62:18:
42:17:a3:63:c5:97:f8:d8:62:3f:51:74:2a:3c:c9:bd:c1:42:
d5:84:a5:e2:27:b5:39:b2:40:e0:e9:70:38:32:49:d2:ad:45:
4d:16:82:49:0f:e4:03:90:03:3d:01:26:e5:a6:39:56:e8:3f:
ed:82:c6:04:b6:ab:a9:35:3b:09:61:10:00:1e:09:06:7c:8a:
64:72:4d:92:a6:93:2e:43:34:1c:ba:fa:21:a4:aa:1e:71:a0:
66:9a:16:df:b6:f6:6b:1e:8a:1b:2c:6d:b5:a8:02:c0:b7:cd:
e2:05:60:0c:58:7b:f6:3f:3d:67:44:41:6c:de:e8:0d:34:18:
a8:f7:0e:0c:b5:da:74:eb:46:0c:56:6b:02:69:33:11:7f:be:
1a:8f:63:ad:03:e9:d7:59:57:8d:75:a3:5d:93:45:35:57:e1:
cf:dc:a1:85:17:31:22:41:72:be:47:fd:5a:b8:b6:30:20:da:
44:65:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:24:55 2026 by rpki-client