Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: BoC2IoEb0rRNmnmRVtGqnqAedpoAgdIvz54DQJfINQM=
Subject key identifier: DF:94:13:5A:56:EC:C8:07:F5:6D:E9:64:88:0A:31:56:D1:6E:9F:F7
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 019D28F2B5EF224066434D1F17A300EC00D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:01:28 +0000
Manifest this update: Thu 26 Mar 2026 07:01:28 +0000
Manifest next update: Fri 27 Mar 2026 07:01:28 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: jFPMQVcbnV08Un4X+RdUE5kdKhSvIOOFD9DcPoy+PTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b5:ef:22:40:66:43:4d:1f:17:a3:00:ec:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Mar 26 07:01:28 2026 GMT
Not After : Mar 27 07:01:28 2026 GMT
Subject: CN=df94135a56ecc807f56de964880a3156d16e9ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:9c:38:e3:8f:1d:85:46:1d:92:cf:21:78:
d1:0f:98:cc:de:61:3e:ff:eb:bf:91:d3:b6:b4:aa:
fc:35:e3:f1:9c:28:6b:bb:f4:88:c3:98:b6:fb:70:
bd:8c:0b:13:82:80:28:2e:f0:25:e2:41:4b:29:d5:
39:f7:e5:37:7f:e5:2d:c9:7f:e4:76:3c:79:43:d3:
b0:a0:81:a1:ac:24:7a:e2:06:00:71:af:f2:45:0d:
8e:39:bf:82:b0:af:19:b6:dd:aa:a5:cf:45:19:96:
63:7c:c6:13:da:f5:f6:43:d5:bd:be:21:67:ef:df:
1a:d5:fd:e0:57:c4:4a:28:22:a6:aa:1e:b7:b6:63:
66:13:a3:bc:18:af:21:5d:2b:b2:20:05:9a:38:05:
97:49:e6:69:47:3e:de:e2:1d:34:31:47:d4:02:3f:
e6:74:a5:3c:72:60:dd:98:96:7b:4e:9e:5c:1a:9a:
19:37:e9:d8:64:f4:79:e1:08:6c:40:73:28:a6:79:
32:51:08:36:d7:3b:99:49:2b:cf:b4:d8:b9:b9:c7:
de:ce:42:ad:76:4a:ad:49:ae:42:7d:4d:7b:1d:05:
75:58:b6:a7:6e:66:98:cc:e4:d4:aa:6a:c0:a8:22:
cd:1b:31:d7:fc:15:f3:86:7a:7d:b0:55:bd:f8:d7:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:13:5A:56:EC:C8:07:F5:6D:E9:64:88:0A:31:56:D1:6E:9F:F7
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:62:4e:f1:8f:68:f9:23:ca:d5:10:ee:c8:74:52:58:8e:49:
b1:18:55:fa:27:78:0a:31:51:05:34:21:cc:b8:47:55:8f:2a:
70:70:ac:ef:53:6b:9d:63:b3:4a:be:6a:82:12:b2:1b:cc:9d:
d6:d1:1f:e3:b6:b2:2a:2d:77:63:0c:f0:96:d6:55:7a:33:e6:
4d:ef:e6:80:f2:ae:13:9f:31:3b:bd:26:b1:bc:44:eb:7e:f1:
da:c7:b9:49:7c:64:96:06:45:a8:da:76:42:b9:8d:e2:f1:34:
e2:f3:31:dd:2d:30:22:25:42:65:4b:c3:31:0c:d5:0d:d3:c1:
fc:09:72:e3:5d:98:77:6b:fc:a6:95:a4:2e:32:48:b9:4a:0a:
91:c2:01:bf:89:60:6a:f7:49:14:7d:7b:62:dd:38:d6:d1:29:
db:fd:45:ed:e0:a8:48:2a:3f:42:fe:f7:6d:0e:10:6b:46:07:
0e:c5:ca:6f:41:3f:10:be:af:41:25:5f:c7:6b:7c:09:8f:de:
fd:e7:c2:66:70:e1:3c:31:0f:05:40:44:e5:6a:63:6f:48:75:
45:77:40:31:58:9f:c8:26:52:ae:83:58:3f:d7:5f:8a:1e:67:
ae:b9:73:f2:2a:e6:bd:7d:59:53:31:83:6a:0e:05:d5:1a:b7:
02:d8:d4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8rXvIkBmQ00fF6MA7ADYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy
ZDUzMDcwHhcNMjYwMzI2MDcwMTI4WhcNMjYwMzI3MDcwMTI4WjAzMTEwLwYDVQQD
EyhkZjk0MTM1YTU2ZWNjODA3ZjU2ZGU5NjQ4ODBhMzE1NmQxNmU5ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXGcOOOPHYVGHZLPIXjRD5jM3mE+
/+u/kdO2tKr8NePxnChru/SIw5i2+3C9jAsTgoAoLvAl4kFLKdU59+U3f+UtyX/k
djx5Q9OwoIGhrCR64gYAca/yRQ2OOb+CsK8Ztt2qpc9FGZZjfMYT2vX2Q9W9viFn
798a1f3gV8RKKCKmqh63tmNmE6O8GK8hXSuyIAWaOAWXSeZpRz7e4h00MUfUAj/m
dKU8cmDdmJZ7Tp5cGpoZN+nYZPR54QhsQHMopnkyUQg21zuZSSvPtNi5ucfezkKt
dkqtSa5CfU17HQV1WLanbmaYzOTUqmrAqCLNGzHX/BXzhnp9sFW9+Nen+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+UE1pW7MgH9W3pZIgKMVbRbp/3MB8GA1UdIwQY
MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt
YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk
LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWJO8Y9o
+SPK1RDuyHRSWI5JsRhV+id4CjFRBTQhzLhHVY8qcHCs71NrnWOzSr5qghKyG8yd
1tEf47ayKi13YwzwltZVejPmTe/mgPKuE58xO70msbxE637x2se5SXxklgZFqNp2
QrmN4vE04vMx3S0wIiVCZUvDMQzVDdPB/Aly412Yd2v8ppWkLjJIuUoKkcIBv4lg
avdJFH17Yt041tEp2/1F7eCoSCo/Qv73bQ4Qa0YHDsXKb0E/EL6vQSVfx2t8CY/e
/efCZnDhPDEPBUBE5Wpjb0h1RXdAMVifyCZSroNYP9dfih5nrrlz8irmvX1ZUzGD
ag4F1Rq3AtjUyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:34 2026 by rpki-client