Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: casb54RVeDGloYHECztuZSY0osdWcuLrNYyoUxLtkP0=
Subject key identifier: BE:9C:E9:E1:66:1E:30:53:D1:F2:B3:FD:C9:6D:3F:55:54:0F:48:A2
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 019D27A876AE0E6C0E03FCEC5C8E1518C410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: SDmLwfxlODq3wwldjK4Z9i47O0dD35Vinhgfdbx5Pm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:76:ae:0e:6c:0e:03:fc:ec:5c:8e:15:18:c4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=be9ce9e1661e3053d1f2b3fdc96d3f55540f48a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:54:1d:57:9c:b8:ee:73:43:d5:05:1e:48:
a0:b8:dc:1e:ef:92:50:8f:85:61:68:1c:20:b3:c2:
72:c1:47:03:18:fe:fc:3e:ab:c0:ee:e4:92:66:38:
bb:0b:66:2b:fe:a4:37:82:35:47:56:6a:e2:f6:e7:
37:ce:e0:23:23:e8:06:ac:b6:11:5a:60:36:05:c8:
04:7a:9f:d6:4d:68:9e:4a:1e:2e:03:11:47:83:ab:
ad:98:00:db:64:b9:34:9e:36:99:65:ec:68:ba:90:
09:d6:35:62:0d:b5:6b:71:59:a0:53:1a:74:50:6b:
0d:9f:63:a5:48:af:ee:86:d2:4a:08:86:eb:10:a8:
ce:c0:fa:1c:ba:9e:50:11:91:3c:ed:5c:50:ec:d7:
ab:98:cb:57:44:d6:26:c7:1e:bf:87:c4:44:65:53:
f2:a9:a3:98:60:eb:c1:1a:2a:71:75:2f:fb:4c:78:
1b:a2:ba:f7:ce:7e:c8:df:9c:6b:4e:0b:52:f5:c0:
11:2e:b8:9f:f5:87:7f:f3:05:61:be:84:95:aa:60:
dd:55:c9:fc:73:89:e4:c5:de:4d:d4:53:ff:f5:2d:
1a:b4:7e:3c:f2:8e:8f:7e:42:bf:2b:5e:d1:d0:f9:
2b:a0:f8:7b:8c:e5:66:cc:76:fc:66:91:a0:87:0b:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:E9:E1:66:1E:30:53:D1:F2:B3:FD:C9:6D:3F:55:54:0F:48:A2
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:fa:14:47:94:3b:6d:56:1d:1c:79:95:98:30:3b:ec:3d:
99:0e:74:98:b5:1a:01:ff:ae:b2:d0:4f:d4:5f:f3:aa:cf:b3:
10:e5:3a:11:46:5d:08:14:d7:14:6f:4b:35:c9:5d:04:2c:08:
3d:35:cf:7e:ea:5e:1a:dc:a4:25:0c:f7:c8:d5:07:5f:9c:84:
37:37:a4:96:8b:26:b4:37:4f:69:49:18:56:44:5f:64:84:e0:
f3:c7:c4:57:72:28:03:94:2d:8e:10:4f:5d:a4:15:8e:c8:98:
6a:b3:a7:45:ee:c0:53:e5:ec:06:02:32:20:2e:85:0c:06:cb:
ab:d4:be:7a:1d:a1:ac:e2:30:09:ea:c6:1a:72:cf:51:92:56:
e7:9b:fe:52:b5:c1:37:1f:04:be:e5:71:ea:33:85:3b:32:92:
3e:f8:5a:86:30:57:52:2f:df:bd:b8:93:82:85:c0:6c:90:2c:
a6:79:5c:58:4d:f5:c2:3f:ca:ce:0f:8a:d8:93:8e:f1:03:1d:
ae:5b:7a:10:01:27:a7:6e:02:cd:a0:26:45:1a:75:04:7e:36:
3e:94:06:43:42:c6:16:af:5b:5b:bc:e7:21:b4:c3:d4:a9:e1:
fa:2a:cc:5d:5b:7e:2e:29:5f:98:a6:60:71:18:55:27:99:dd:
58:ff:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:42 2026 by rpki-client