Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: ToEmyXo957ssrKhD8hgRyxcg/bL0APSb+bQr2tnOFRI=
Subject key identifier: 56:0F:3E:19:32:C2:DA:43:A9:B1:D6:61:A1:2C:E8:F7:01:55:BA:38
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019D25BACB8CFEDF21AB3BF1DF3DF40854DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0F69
Signing time: Wed 25 Mar 2026 16:01:31 +0000
Manifest this update: Wed 25 Mar 2026 16:01:31 +0000
Manifest next update: Thu 26 Mar 2026 16:01:31 +0000
Files and hashes: 1: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (hash: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk=)
2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: Rk6t+FSj+vrphxECFWhbjiaaiweUIDgzSF9munE7SjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:cb:8c:fe:df:21:ab:3b:f1:df:3d:f4:08:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Mar 25 16:01:31 2026 GMT
Not After : Mar 26 16:01:31 2026 GMT
Subject: CN=560f3e1932c2da43a9b1d661a12ce8f70155ba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:73:6d:f8:14:99:1b:7a:2e:fa:27:6c:e0:
54:92:b1:09:93:cb:2a:04:d1:18:49:13:e4:30:09:
e8:cc:af:a1:f8:ec:16:94:f0:c7:fc:7e:9e:c2:26:
5e:e1:af:82:e9:88:58:64:9f:1e:b9:25:a8:ae:94:
f8:5b:59:c6:a2:32:a3:be:77:9d:15:35:68:4b:05:
b5:5b:c5:ff:40:b1:62:10:03:f8:35:c4:7f:de:98:
1f:05:c3:18:a5:b5:6a:b8:3f:d0:c5:2b:fe:58:49:
8f:86:94:51:83:1c:ed:78:a4:e6:c2:5a:db:ed:5e:
c8:17:ff:47:82:f1:d9:51:de:f6:0c:4c:b4:a3:00:
de:59:b2:7c:7c:77:da:08:69:21:1c:0a:9a:64:87:
94:ce:84:eb:74:43:ee:f5:c7:10:0b:e6:f4:f4:1e:
00:c3:42:8a:e9:ef:c3:84:16:18:57:04:e7:0f:53:
e6:d0:01:b4:39:77:41:50:22:4c:00:a2:26:c1:d3:
4b:2a:28:da:44:15:de:23:ce:c1:f0:ec:74:9f:9f:
2e:54:fb:3e:a1:7a:4c:20:fa:c4:b5:da:26:0e:be:
f7:e7:1e:6d:21:fb:07:62:e7:54:95:f9:d5:c3:87:
9e:73:4c:8d:6b:7f:f2:5b:15:79:d4:b1:86:a8:0a:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:3E:19:32:C2:DA:43:A9:B1:D6:61:A1:2C:E8:F7:01:55:BA:38
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:ba:e1:e5:76:66:2e:85:94:18:f6:84:c0:ad:2d:c4:5d:
67:a1:2c:d5:d2:cb:fa:68:a2:30:00:b9:06:62:da:41:1d:09:
ba:3c:ab:0f:c1:a9:d7:ef:49:32:60:42:a6:3b:4c:ba:0c:14:
d9:c8:e2:6e:ce:1a:fd:52:82:67:5f:fd:2b:ce:1d:ac:27:bc:
b0:2c:b9:88:fc:ea:b4:58:20:20:61:ef:06:4e:e3:2b:0b:b2:
f9:6b:8c:3b:20:da:db:47:1b:a2:30:9a:0a:5f:e3:a4:d2:cc:
61:f9:fb:b6:14:10:67:27:17:5a:a5:d9:e8:50:d2:5e:e6:c3:
bc:f0:34:44:20:30:1b:f5:c9:69:ed:ec:b0:bf:9b:19:12:92:
95:b3:61:91:d0:20:eb:18:96:87:33:0f:39:83:95:4d:9b:68:
06:81:1d:14:a1:20:ef:6a:9b:f5:b8:1d:5f:7e:02:3b:f9:10:
99:05:9d:d8:77:53:36:de:34:ab:57:13:03:e6:1a:af:12:55:
c2:4f:cb:54:49:7a:f9:f8:4f:03:81:b1:86:ea:29:4f:17:18:
4b:90:2f:17:4d:13:4b:57:34:31:86:07:fc:ec:d7:21:4a:af:
8e:d7:87:26:6d:3a:1d:6a:1f:ee:e9:99:be:ea:dd:6e:86:37:
91:28:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:49 2026 by rpki-client