Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File: MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier: 39zih3GaBdK6FUspM6HwJ98y5O0aZ3MkUn39EBRulQg=
Subject key identifier: 60:B1:04:61:31:75:9D:4E:2E:02:DC:62:BF:D4:8B:DB:23:7B:C8:55
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial: 01A128B182031DC64D5C7505BF335140354A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 02:01:24 +0000
Manifest this update: Sun 11 Oct 2026 02:01:24 +0000
Manifest next update: Mon 12 Oct 2026 02:01:24 +0000
Files and hashes: 1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: AHx36vPB1LlDOi8c7KvYhj4YjY41Yp1cdnf1hgJINXU=)
2: Rbnn8vOqhEtpTSEQt713qR9tMnI.roa (hash: qBesz6qk+N2ewTuXp6/Sp8ImseGY5f2ykMjdMftaW6U=)
3: YqrPgcOdKcUHaUYq6pQlPoK6ux0.roa (hash: 7ZhFcJC44FtwDb2JtFmtlCjeaUlzYjugxemZbkXkceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:82:03:1d:c6:4d:5c:75:05:bf:33:51:40:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
Validity
Not Before: Oct 11 02:01:24 2026 GMT
Not After : Oct 12 02:01:24 2026 GMT
Subject: CN=60b1046131759d4e2e02dc62bfd48bdb237bc855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:6a:c3:47:a9:93:da:cd:a8:c3:11:db:b3:
08:58:10:08:4e:a8:9d:08:78:6d:b5:25:3e:af:d7:
10:dc:9c:03:d2:e0:39:8d:24:98:0c:62:a4:48:a8:
5e:41:6c:a7:23:54:57:8e:de:82:fe:0a:10:f0:cc:
b8:cd:fc:b8:e5:6c:ec:1e:fc:39:e8:59:6b:5a:04:
13:7e:ad:3b:fc:31:47:6b:16:cb:bd:8f:12:38:6b:
f9:cd:e0:fa:d3:63:41:40:0c:91:07:31:53:6b:96:
73:21:af:13:8e:a6:99:9b:4f:4a:4b:ae:39:64:7d:
ca:ad:09:86:37:1a:2e:46:34:72:ab:06:ab:26:c8:
f4:9b:ad:f1:18:c9:65:d4:e9:39:99:71:e2:b1:44:
54:17:d1:96:ef:e4:1c:26:48:62:ca:f3:0b:ab:67:
ab:c1:99:bd:cf:75:8f:be:31:9e:80:c4:16:68:4c:
ac:07:9e:8c:a0:33:73:ba:25:22:59:7d:97:08:63:
8f:7b:68:4e:2a:05:16:53:a4:d5:c2:ed:35:42:cf:
9f:d9:7e:9b:c2:12:13:17:f1:52:68:c0:c3:5b:f5:
28:64:8b:28:64:fe:e0:e3:d0:10:31:68:69:c6:9f:
e6:23:fd:c8:a9:47:17:dc:9b:7c:3e:13:02:f1:40:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:04:61:31:75:9D:4E:2E:02:DC:62:BF:D4:8B:DB:23:7B:C8:55
X509v3 Authority Key Identifier:
keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cb:66:77:4d:63:cd:5d:c5:f9:6e:c8:fa:d3:41:4f:36:46:
81:5b:43:3b:07:1b:d2:48:eb:84:c0:5a:57:94:9e:3e:2a:80:
3a:9c:fe:e0:d8:4e:b3:2e:b7:81:0d:34:05:ec:ea:a5:a5:6b:
ed:b7:6d:21:45:8f:dc:72:e2:93:0d:3f:26:b7:c3:95:f3:89:
e5:ce:90:6f:f1:70:e6:de:7a:de:6a:43:8e:c0:70:74:f8:32:
6b:6b:97:d3:69:5b:c1:88:c9:47:cc:08:97:34:1f:c3:c9:07:
96:b8:fd:93:ed:79:56:4a:59:63:dc:e7:73:cb:fe:93:ba:50:
d4:48:f1:b1:71:59:4d:0d:11:fb:5e:99:a4:58:15:19:2e:04:
90:a8:4c:79:c9:96:4f:ed:a9:b2:0b:0b:36:0e:b1:64:f6:b9:
36:c2:86:49:d4:5f:b3:24:e0:43:26:34:53:73:e8:e3:fb:c4:
95:7e:7d:f9:5e:87:c3:d8:a2:1e:fc:fe:5b:35:27:c4:2f:28:
97:ff:d3:00:8d:ad:c7:f0:b9:e3:9c:4e:22:4e:82:a8:6d:53:
a7:f1:f5:e5:c3:e4:ef:26:e8:bd:03:6c:3f:7f:e8:e9:96:71:
83:61:99:57:ce:63:0f:93:3b:42:d4:de:7e:b5:01:2f:81:77:
7c:f5:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:26 2026 by rpki-client