Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: F9pltMaqMWh6ErL+2Mgv4QmV6gYEDkg3B/o0+itnSns=
Subject key identifier: 42:99:93:6A:01:21:BF:D9:47:8E:9A:32:06:DA:2F:C4:34:6A:6C:29
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 01A0D8A88BB756C3DD9EB2F21B738E9522C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 1156
Signing time: Fri 25 Sep 2026 13:01:59 +0000
Manifest this update: Fri 25 Sep 2026 13:01:59 +0000
Manifest next update: Sat 26 Sep 2026 13:01:59 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: m35wvCsiLmPkkgxvzkqgVVT7pv80DsobvqFJsv2/dDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:8b:b7:56:c3:dd:9e:b2:f2:1b:73:8e:95:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Sep 25 13:01:59 2026 GMT
Not After : Sep 26 13:01:59 2026 GMT
Subject: CN=4299936a0121bfd9478e9a3206da2fc4346a6c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:05:62:27:10:f9:d5:35:ce:06:22:82:42:
9f:0f:2c:6b:cd:d0:f5:83:c2:57:02:c4:b0:5e:a2:
7f:86:7e:26:ac:71:3d:9e:0d:92:45:2d:db:49:29:
6d:89:d7:3f:bd:ee:cf:1c:e9:1a:6c:ab:83:b4:8d:
0a:7d:45:1c:15:3b:02:7a:b1:7f:50:49:82:c3:99:
81:73:7d:04:03:8d:a0:89:f0:8d:03:ba:ef:c1:8c:
93:72:c0:12:df:a4:59:a0:fe:a2:81:3c:4e:08:9a:
53:f1:e6:a6:a1:31:23:04:78:2e:75:84:54:0b:0b:
90:a7:fe:86:15:f6:6a:b8:a0:e3:7d:18:50:9d:0e:
55:d7:45:37:eb:b3:21:ef:2d:2d:fd:d7:64:ec:4b:
3d:41:8e:3d:d4:9d:f7:3b:64:76:9f:fe:fd:50:62:
bb:d6:1c:18:c9:33:94:a9:7d:49:3f:d6:b5:4d:e1:
03:cf:02:fe:87:b6:2b:01:f3:e5:9b:dd:d1:fa:bf:
e8:10:db:23:13:62:46:f0:99:21:1e:07:e8:f7:37:
98:1b:33:a0:05:26:12:91:16:53:7a:6b:0c:9f:b9:
c6:a0:36:7c:fc:a5:01:71:15:ba:0e:16:62:63:88:
d4:05:b6:49:9a:29:57:3f:b4:b2:32:45:c2:7a:00:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:93:6A:01:21:BF:D9:47:8E:9A:32:06:DA:2F:C4:34:6A:6C:29
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2a:fc:83:10:a6:02:36:5a:6d:15:3e:cb:9f:a9:16:1c:cc:
8f:95:f2:39:86:31:18:96:60:28:a3:a9:22:10:f4:9a:93:22:
6c:66:16:4a:b1:90:38:b8:76:e9:ac:6c:93:46:88:d2:6c:d3:
2d:63:e9:3a:27:da:ef:43:18:9a:c2:50:a8:51:01:4a:c3:37:
5c:ee:1a:6d:8b:3d:f4:4e:39:43:5a:74:bf:b3:ef:b9:59:ba:
03:df:0c:a9:ba:1d:34:ad:98:81:83:ed:d1:91:af:73:92:8e:
94:67:0b:ea:ae:cf:05:ba:ba:2c:07:1c:80:c5:50:fa:ce:88:
f9:fb:51:2f:2b:87:e1:5d:a2:cc:35:82:97:3b:3c:04:64:a2:
9b:fb:53:8c:d5:7b:2d:6c:55:ab:45:6c:c0:66:59:b0:2c:9b:
b2:7a:a8:60:4b:02:64:9c:77:98:f9:90:d6:23:a2:e6:d8:4d:
db:63:b1:19:76:2e:f2:f1:4d:f4:fa:2f:82:ef:c4:52:30:d0:
95:95:20:9e:a1:1d:d6:e5:69:82:90:66:5f:74:6f:09:c5:95:
f2:4e:5a:50:23:86:8c:9e:6f:3c:59:fd:cd:2d:02:38:6b:40:
a1:76:53:72:8c:c6:39:bf:d6:56:2a:45:fa:b5:b1:26:81:a1:
09:2b:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:32:33 2026 by rpki-client