Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: ZldsgwfRQ66ZqA9/hYmZQGQTiOjlb5WBelKXu3uXCck=
Subject key identifier: F0:33:D5:F0:0B:BC:B4:AB:66:55:05:BB:2E:45:B3:7F:26:F5:CA:7E
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019E1F477FE9BD6D50FA6A6E1AC97595B9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1956
Signing time: Wed 13 May 2026 03:00:39 +0000
Manifest this update: Wed 13 May 2026 03:00:39 +0000
Manifest next update: Thu 14 May 2026 03:00:39 +0000
Files and hashes: 1: 3V_tc1VzoiWK-sjOXpgAIRxNRto.roa (hash: nDebzFUErSWza+ioan4kmKHt89UK+APHM9KMAH7YVy4=)
2: EBeni4pRP0nfIWaoObl7rqIDxP0.roa (hash: RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=)
3: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: jiKLANAm2myu3BN9R2RAHVwaqFCQMXefD2W8QnRFTTI=)
4: QP3K5CO3QpkKtU8-zftATbopp3w.roa (hash: XdFv/OYKJHuBMEUZpOTIQ4KgaoA0cL9feVSv0vcJu1Q=)
5: SrGT_1oNdL6zLGvQklQTzPbpafE.roa (hash: Prm6r3KgEX89oHzkr1fzZMgv8zxP93fJKcmpip4fPII=)
6: eL4d8R0XPXOB08vdB-uDqIZexg4.roa (hash: vcYlrcvZrfJt1r/9g7R9mGWxXMvFlZGH/WtZB2y0BDM=)
7: kJ-0390pMyeu9zSL9Uf7in-Aw2Q.roa (hash: KMWMkUFXEoHmMKezDEO3/QBBoNUsTTb/dAM8aKHwmn0=)
8: wLzSs2dPdRRWgA6exvCL5X-7yw4.roa (hash: n5giWzLva6AwNMrFYo/SZx0WnLNJlcTvoDCsWYhzTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:7f:e9:bd:6d:50:fa:6a:6e:1a:c9:75:95:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: May 13 03:00:39 2026 GMT
Not After : May 14 03:00:39 2026 GMT
Subject: CN=f033d5f00bbcb4ab665505bb2e45b37f26f5ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:d6:27:5c:78:f0:2b:88:01:dc:1a:18:41:
c5:7c:81:a9:f7:2b:f3:37:c9:d1:97:0c:40:3b:bb:
f9:8f:9a:94:06:14:d1:84:cf:38:62:1d:57:e8:79:
8c:2c:c1:e1:2c:17:ef:51:2a:97:5b:bf:11:50:c5:
6c:78:7e:28:2b:14:eb:14:33:dd:d2:2d:aa:47:4f:
0a:a5:35:3d:7a:12:fa:44:9c:cf:86:0d:bb:d4:d7:
fd:ed:d8:c3:a4:f3:f8:80:a4:95:6a:31:fc:7a:79:
e1:ed:56:25:e1:73:90:d8:e5:18:d2:9b:fb:d7:e3:
34:00:15:13:99:a5:61:0f:5d:26:5b:ef:ac:07:3d:
95:bf:7c:02:a3:51:c6:e1:ec:13:cd:1c:52:08:4e:
5c:ef:e5:c4:56:12:b5:25:61:f3:7f:4e:d4:d9:60:
c6:93:3d:3b:33:eb:ba:f9:8c:50:9f:a4:b6:af:f0:
42:38:40:59:e7:f9:06:d3:0d:24:9b:5b:79:df:5a:
e7:f0:37:bf:4c:0e:20:b8:5f:ad:c6:d4:f2:54:17:
94:ea:30:2a:c7:d7:ae:eb:0b:b9:4e:13:bb:59:50:
7e:7a:11:85:af:ad:5f:6a:c9:82:c3:dd:c9:a7:bc:
33:fe:11:ab:b2:94:9e:06:a3:9e:1d:ff:75:f9:94:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:D5:F0:0B:BC:B4:AB:66:55:05:BB:2E:45:B3:7F:26:F5:CA:7E
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:47:ab:3b:1d:b5:8d:65:96:88:c1:d2:07:1b:03:28:e8:35:
60:36:17:2f:13:8a:e8:41:ba:56:fd:8a:02:b8:58:11:03:59:
4c:f1:04:06:99:5c:5e:f6:e0:9e:5b:c3:6f:63:fe:db:d7:e9:
3a:a5:a5:5e:a4:62:a8:4f:ff:20:9b:0d:00:3a:58:5f:56:4d:
1a:c3:2b:dd:04:41:b2:a4:a5:e8:bd:9d:e0:dd:9b:70:87:10:
c7:47:a1:73:3b:62:83:2b:d3:5b:17:12:45:59:59:3c:58:d1:
eb:70:bb:48:a3:5f:4d:fb:7a:95:e3:92:6e:12:03:e4:20:b0:
51:1a:10:75:ba:e5:c9:9c:bd:e8:36:65:82:9d:c8:9f:31:31:
63:48:f8:9b:f3:ab:82:4b:9f:a8:27:24:7a:59:25:15:09:2e:
b1:21:00:76:0e:6a:08:1d:7b:a6:d0:6e:55:47:3f:42:61:b5:
da:14:cb:21:25:51:09:75:4f:72:a3:4d:f7:96:cb:a2:68:aa:
e0:86:35:c0:5b:22:e2:82:8f:ac:5c:32:2e:60:ae:20:d7:e5:
55:b6:d8:ca:3a:d5:56:9e:50:e6:4e:b6:a2:1d:bc:99:0d:16:
74:47:56:0d:ef:4e:3b:1a:1f:32:b3:bb:40:67:82:5a:f2:8f:
6d:fc:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:11 2026 by rpki-client