Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: 3lpybHC5xH72c2AiuqoK3WPcoW92GR8HinfyfkRxBFc=
Subject key identifier: 4C:4A:CF:17:DC:1E:8C:F8:A4:02:5F:77:8B:39:31:4B:72:A7:0C:80
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 01A1DB7001301F12C8B395F600EAC6D84834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 11DC
Signing time: Sat 14 Nov 2026 19:01:52 +0000
Manifest this update: Sat 14 Nov 2026 19:01:52 +0000
Manifest next update: Sun 15 Nov 2026 19:01:52 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: QiRqdMLssvatpScNfkjGngb0d1iDxn2An+nIi6MC9tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:70:01:30:1f:12:c8:b3:95:f6:00:ea:c6:d8:48:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Nov 14 19:01:52 2026 GMT
Not After : Nov 15 19:01:52 2026 GMT
Subject: CN=4c4acf17dc1e8cf8a4025f778b39314b72a70c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:50:c4:61:c8:16:f4:64:39:ce:f8:7e:5a:
52:9f:59:fb:85:b2:a5:81:68:c8:87:62:4d:51:80:
ab:d7:0d:58:a8:01:d4:cf:5f:48:ca:1d:d8:d0:a3:
1c:6d:8d:cd:8a:20:3d:91:1a:00:3a:a5:af:c3:e7:
6b:d9:3b:9f:5d:a3:2a:3a:4d:67:ef:6d:1b:6c:b0:
44:1f:7d:b1:97:30:f1:2a:29:3d:e7:0f:9f:a3:c9:
93:b8:91:23:8a:cf:58:4f:99:f4:e9:05:b9:57:56:
24:38:c9:4c:1b:e8:1d:43:2a:45:80:f4:03:e7:b5:
12:97:6b:08:f5:3c:45:a1:c9:e0:18:16:f5:4a:df:
dd:1c:48:c2:80:0a:1e:64:df:76:59:e2:d6:bc:d6:
36:a8:5f:aa:f0:8f:88:f4:5f:d0:4c:92:c1:f3:f9:
c6:78:5f:73:04:96:9a:de:27:94:d6:38:b8:01:57:
30:46:88:cb:51:35:e4:be:6c:8e:ae:d2:f6:71:64:
e8:64:03:47:d7:78:dd:fc:8b:8d:51:10:13:33:fd:
e2:1e:a0:b2:63:cf:fd:93:a2:63:11:9f:b7:40:02:
97:d1:66:6c:d9:cf:5c:d3:05:ab:7c:94:b1:fe:28:
32:29:70:66:27:83:f4:4f:af:15:63:d4:da:86:b3:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:CF:17:DC:1E:8C:F8:A4:02:5F:77:8B:39:31:4B:72:A7:0C:80
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:76:2b:b4:91:47:8b:d2:0c:ad:43:df:d7:60:3c:d6:f5:
8e:a5:36:a8:1c:13:45:24:ed:e1:74:fe:0f:35:06:cd:d8:81:
19:18:d4:c7:c8:fa:f8:9a:76:ca:c0:2d:69:7e:49:02:27:c4:
90:18:90:88:7f:f8:6a:f4:36:52:7e:d2:4d:ba:cb:d6:5c:f6:
ba:96:84:8c:25:06:d2:f6:e4:46:40:d9:b9:36:9b:36:c8:29:
14:98:9e:de:23:a0:e2:77:79:47:d8:ea:a1:6f:52:5a:94:61:
bf:69:e2:36:e7:de:11:92:70:da:4f:ef:92:94:eb:4d:24:5a:
42:1b:6a:8d:21:37:db:c2:70:b5:7f:27:59:e9:a7:f7:63:53:
8d:d9:3b:bc:12:fb:10:81:a9:db:aa:16:3b:f8:ec:19:26:84:
fa:66:f2:13:19:65:2d:a2:04:61:29:03:8d:70:9a:56:b9:c8:
f2:50:f6:16:91:11:85:e9:32:da:a3:99:37:2e:7c:05:ba:c5:
92:42:ef:c9:ed:52:b4:73:c5:69:8d:87:66:1e:53:87:22:83:
fe:8f:91:9b:0d:15:e4:40:4b:e8:33:45:7d:ba:06:5a:48:a5:
d2:22:75:91:db:c4:66:1f:4e:6a:e5:f3:37:9a:3d:36:5b:49:
f7:bf:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:09:04 2026 by rpki-client