Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File: MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier: CWNUTKEcm2R2MAh4Cpj8eb4v4Bre4pZhAxXi7HphGb4=
Subject key identifier: 5F:B6:D2:0C:92:A3:AC:70:B1:A6:2C:80:6D:58:13:1E:D7:C9:ED:FA
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial: 019D273A9E83302BAD528CDC839527ABBD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: OdnUEeOaf6dYlsiguuTkcA3VjikYRLnwDag0rIiKjOE=)
2: Rbnn8vOqhEtpTSEQt713qR9tMnI.roa (hash: qBesz6qk+N2ewTuXp6/Sp8ImseGY5f2ykMjdMftaW6U=)
3: YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa (hash: 7ZhFcJC44FtwDb2JtFmtlCjeaUlzYjugxemZbkXkceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9e:83:30:2b:ad:52:8c:dc:83:95:27:ab:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=5fb6d20c92a3ac70b1a62c806d58131ed7c9edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:74:d1:7c:99:ca:e9:74:6e:60:c4:de:e3:
9c:79:94:85:30:29:71:44:33:5a:90:11:d1:4e:c6:
e6:43:55:56:1a:de:b8:81:66:40:53:54:d5:01:37:
f4:8a:20:cf:02:0c:c6:a5:a1:b9:a6:21:3b:f9:a6:
bc:00:41:d1:f0:04:bd:bf:87:18:39:3d:eb:37:bb:
a7:47:12:af:b8:6f:b5:3a:85:5a:e0:e6:30:9f:6f:
c1:d1:a6:56:f3:76:cf:d0:64:bb:b8:7c:ce:79:c0:
79:2d:22:35:ed:62:c9:23:18:71:0c:25:dd:45:12:
83:40:1e:ac:b5:84:cf:83:c2:2a:ce:32:5b:6d:52:
fe:e6:23:54:9c:74:92:9e:03:e4:f6:c3:d2:64:cb:
9b:fc:a8:a3:dd:ee:76:c2:06:5b:91:83:dd:b0:43:
a1:73:63:b6:a7:79:a9:f8:41:8b:af:8c:e8:05:af:
af:77:9e:a5:69:a7:0e:e5:2c:49:6d:71:a8:91:d5:
4f:53:9f:c7:c1:27:7c:2c:f7:ca:7c:14:d8:a3:c7:
5c:46:02:8a:5e:65:5e:53:d6:74:b4:5f:5e:99:62:
ed:5f:24:dc:76:71:e9:d1:bb:b4:80:f0:f8:9c:c3:
a9:d1:31:a8:e5:0a:a9:70:17:4d:15:16:9e:25:34:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:D2:0C:92:A3:AC:70:B1:A6:2C:80:6D:58:13:1E:D7:C9:ED:FA
X509v3 Authority Key Identifier:
keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:a7:50:90:5a:51:2d:3b:2b:e8:f1:c0:9e:9c:a5:2a:69:
15:d5:91:9c:31:af:6c:c5:c8:b3:1f:c3:94:43:fb:16:c4:68:
30:26:21:5e:41:23:16:87:a2:28:e6:b3:47:f6:39:cc:f2:7b:
9d:51:69:4a:76:3e:7b:fa:81:d2:1d:39:be:65:0c:87:1a:0c:
94:e1:e4:4d:30:76:65:88:ef:3e:a6:fb:e6:a3:9e:c4:f6:ab:
8d:78:87:b8:7f:54:06:16:20:00:b4:6d:fe:7f:94:f9:36:a0:
a4:fa:03:44:66:7e:05:e0:ce:d9:aa:60:f9:68:26:33:d8:82:
b5:de:bc:67:42:89:b8:0c:87:a2:6a:7b:29:ed:54:0a:e6:3e:
bb:a4:56:bb:3d:dd:ec:dc:22:18:84:74:33:7e:3b:af:c6:bc:
ce:3d:c8:76:b9:2e:f7:0e:99:f9:15:93:06:87:ab:0f:5b:71:
34:df:19:a4:fa:eb:de:94:69:80:c1:7a:61:f0:1b:2e:3c:04:
1a:5d:a0:85:6e:77:a2:d3:bb:81:49:25:7e:02:4b:f6:32:70:
fc:67:11:79:fb:78:a7:bd:70:70:6f:5a:b6:c4:5b:ca:2c:79:
ba:92:3b:77:a4:f9:e9:d4:ca:07:da:6a:3e:36:ec:0f:85:fa:
31:ef:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:15 2026 by rpki-client