Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: Mliks6T7Ljz5aSICi88VwkuictxsWszw/dR3HvwA5Hw=
Subject key identifier: C2:1D:03:29:6C:85:10:EA:15:59:A8:E7:20:A7:6B:E5:92:B6:10:F7
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019D29CE79DA752AFA6AB20D070FD8745E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 03D5
Signing time: Thu 26 Mar 2026 11:01:30 +0000
Manifest this update: Thu 26 Mar 2026 11:01:30 +0000
Manifest next update: Fri 27 Mar 2026 11:01:30 +0000
Files and hashes: 1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: x4jO0ko5Tg9GRH7EUB7a2pDppj2h/Jvkn54Diest0ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:79:da:75:2a:fa:6a:b2:0d:07:0f:d8:74:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Mar 26 11:01:30 2026 GMT
Not After : Mar 27 11:01:30 2026 GMT
Subject: CN=c21d03296c8510ea1559a8e720a76be592b610f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:94:fe:54:93:37:55:a8:76:68:2f:37:d1:
a7:b8:1c:a6:5b:36:e1:99:1c:e5:f7:3d:41:e4:29:
8a:a3:85:f3:f3:77:f1:ce:b4:fa:6f:f2:d6:54:d5:
c2:c9:8e:02:db:c9:4c:2e:92:b8:e9:ee:a7:d4:7a:
db:93:2a:f2:c2:c0:24:79:a3:4b:56:60:8d:36:bb:
c7:f2:5a:da:8f:b8:35:d8:49:e6:3e:5d:52:c3:b1:
a6:57:89:4f:4d:dd:43:e5:a5:44:af:d6:ef:57:a5:
e6:61:ab:4b:c3:85:cb:05:37:d0:3b:08:45:ce:e7:
5b:83:ff:71:07:64:49:e5:5e:85:84:33:19:26:12:
a3:cf:16:ba:f7:1d:14:82:23:b5:cc:3b:30:f3:cd:
07:6f:2a:85:19:9c:7a:3d:78:51:ee:14:ca:8b:f1:
3a:6e:7b:10:99:71:60:43:c9:69:bd:5a:88:2f:06:
d4:77:0c:9e:d6:ad:f2:f3:6a:60:4d:40:19:eb:57:
dc:52:1a:ea:e5:98:19:ea:d9:dd:a1:55:cb:5b:a8:
09:f5:88:d0:6e:dc:77:80:92:98:48:4f:df:91:cd:
13:d9:86:a3:ac:71:ca:84:e5:3a:04:a0:2d:83:24:
af:3d:90:c2:3c:3f:c1:a1:31:89:ac:68:1f:ae:ed:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:03:29:6C:85:10:EA:15:59:A8:E7:20:A7:6B:E5:92:B6:10:F7
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:94:74:bf:33:5c:17:d2:03:50:ce:63:af:d1:74:9f:75:
19:10:1a:9a:3b:e5:af:4e:13:ed:be:b7:63:fa:bf:9d:ae:11:
44:91:30:c1:04:1c:c0:e2:3d:28:b2:35:29:83:8e:5c:89:db:
41:0c:39:a8:9c:43:f9:41:e0:dc:90:21:05:42:be:8c:25:e4:
ba:a8:00:3d:96:eb:86:cc:58:85:d4:33:1a:35:74:2b:b6:db:
ce:06:a9:70:80:56:34:5e:55:35:57:bc:77:1b:1b:c0:36:31:
d3:c3:52:60:db:5c:7c:92:35:74:a0:89:dd:de:db:98:b8:db:
38:25:89:78:f0:f5:e5:df:46:93:d5:f3:e6:a2:a8:cc:01:e4:
d0:68:49:0b:bf:96:e6:fb:9e:16:af:aa:81:4f:de:b2:92:dc:
b7:14:99:04:2f:c3:9c:b5:75:97:26:36:ec:96:10:cc:23:6e:
f9:26:67:59:6c:6b:81:ac:b7:1d:dc:18:b2:56:03:09:04:b7:
fe:60:ee:11:c4:ef:f5:7f:ca:a2:7b:18:a9:ae:e2:ba:59:c2:
ae:d6:26:e4:04:2f:4b:4a:18:e0:33:5e:be:21:d0:95:21:bf:
93:8a:43:00:4c:3b:23:14:8a:85:80:27:c3:15:a0:b5:9e:16:
46:32:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:13 2026 by rpki-client