Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: Mkmyi+iIKNMyrmMz4v+QesAx85pRdDO7javXG0D1JOc=
Subject key identifier: C3:37:CB:CD:D2:AF:61:0B:CF:36:E6:68:97:9B:08:11:D5:75:22:D2
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019D284D39B69EB57562358452304C353454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0F6D
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: SJxV8qwXIqgfghjoiDki/2A90qHMLH2946BdCumAr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:39:b6:9e:b5:75:62:35:84:52:30:4c:35:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=c337cbcdd2af610bcf36e668979b0811d57522d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:72:21:92:f4:7f:5d:d9:d8:17:e5:c2:50:
74:88:21:41:57:5b:d4:fd:ca:c7:1e:35:d2:0e:c9:
07:9d:88:cf:31:7a:76:9a:ed:07:36:d0:0c:a7:37:
2d:17:79:ce:6c:d2:de:11:10:d4:a5:2a:ec:53:27:
15:08:64:9c:f7:5b:95:16:4a:49:92:11:dc:01:f8:
75:0a:09:48:24:31:a2:9d:e4:e3:2f:f0:81:71:e0:
76:0b:9a:35:16:b3:57:07:a0:66:3a:68:90:35:db:
d3:8c:a9:60:ed:d3:09:15:c1:81:d3:a3:bc:62:ba:
f0:35:f5:15:50:97:46:02:f2:ce:26:71:74:82:a7:
67:99:e5:67:fc:70:4a:dd:89:78:b5:e1:f3:3a:af:
13:6d:77:4c:97:d0:6a:b7:e0:1b:5e:fb:e5:e0:27:
ff:11:98:1f:bd:01:75:65:7d:d9:03:cb:39:16:bb:
ed:a0:a5:e7:ec:4c:c3:0f:9e:2b:e9:67:39:cc:3c:
e0:b2:88:af:bf:f9:47:eb:36:f1:21:df:80:ac:71:
7d:44:7a:a3:3f:1d:ad:9a:9a:98:15:e0:09:83:8e:
0f:a6:b4:f1:19:94:61:79:f6:ae:04:78:8c:4e:fc:
f2:e9:b9:6e:b3:55:aa:eb:48:ca:f8:99:e4:de:25:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:CB:CD:D2:AF:61:0B:CF:36:E6:68:97:9B:08:11:D5:75:22:D2
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:43:ef:86:6e:0c:2d:8e:0f:d0:d1:3f:80:c6:f3:bd:6c:
e0:67:1a:83:ed:f8:59:fa:0a:7a:45:38:13:ee:2c:73:61:6d:
5a:07:9a:d2:6e:17:eb:9c:e6:0d:d5:ca:a3:d6:7c:50:88:47:
fc:cc:2d:bf:b2:59:a9:af:3b:31:fd:d0:24:1b:9b:73:35:ac:
e9:a3:8d:bb:3e:1c:b7:6a:e3:a7:00:ef:d9:b0:86:fb:7a:4a:
15:c0:bb:60:0a:c3:95:d3:22:72:58:1d:f9:de:4d:92:85:cf:
5e:38:05:d4:e1:4b:f7:20:1b:98:4a:63:9e:ef:0b:51:aa:81:
dd:5f:fb:3e:e7:55:06:c2:bf:d4:64:3a:d2:48:5f:87:fb:be:
71:9c:5f:81:69:38:26:99:68:f1:30:1e:cc:e2:19:07:c5:b9:
fa:77:23:2d:49:c9:36:20:61:98:21:fa:e8:32:5c:98:27:4b:
6b:84:dd:a7:05:e0:5f:15:6c:00:92:89:a2:3e:2f:8d:a0:15:
88:b0:8a:01:56:91:ca:71:aa:37:c0:96:2e:40:5b:24:43:40:
ac:77:a3:e2:98:f8:58:de:8a:db:18:a5:2f:9b:e3:15:21:6e:
11:ff:b7:e3:37:91:c8:cb:a6:42:7e:b9:6a:67:48:8c:56:d0:
6b:c8:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:08 2026 by rpki-client