Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: DfPBu+lQPLMqC8kPoFWMaPEwOF/LBdjfCYgn3ZrAVo8=
Subject key identifier: 72:FC:49:3C:A5:10:13:4C:FE:0B:E3:27:98:A2:9F:B7:21:A0:30:A2
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 019D270415655AFDA172111FF461DF532084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0CF2
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: AbVQaKQEw8WVeNiGif6x9RD1dvY.roa (hash: o6ZCXdoQRyBHIynvo2/Nzx+Ep3zCN6VCUl5Zpi2zpAs=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: yXS1vFE+Iq1dreCYnxgnJ3JTklHm8h+5AoeXM5KMZvA=)
3: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (hash: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:15:65:5a:fd:a1:72:11:1f:f4:61:df:53:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=72fc493ca510134cfe0be32798a29fb721a030a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:83:89:b9:8d:9d:5e:45:d2:c8:07:4f:6a:
88:10:f1:0d:dd:eb:4b:d1:05:f8:34:51:2b:ea:ed:
aa:4b:10:8b:12:c3:69:7c:71:f3:57:16:b8:8d:b0:
c9:65:3c:8b:e5:11:48:c1:91:99:43:4d:e2:0b:33:
84:a1:53:7d:07:72:87:c4:96:9c:b4:7a:fc:72:d2:
b8:bc:13:d3:fe:92:19:f8:32:8e:7f:9f:d6:13:7c:
01:55:d5:5e:c3:22:9c:14:41:81:c5:cd:b7:02:b7:
27:cf:ea:fc:7c:bf:2d:a2:08:6a:95:21:6b:ed:3e:
07:32:ef:af:ab:dc:2f:ac:4e:91:81:cf:00:3f:c2:
af:22:7b:f2:02:83:7c:ec:91:4d:70:be:ee:83:a2:
de:da:12:7b:37:72:89:fd:0a:69:41:a4:5d:84:b4:
7d:cf:25:a8:ba:43:b1:06:dc:50:a7:4d:bf:43:82:
66:d3:f9:53:25:b8:98:8e:04:98:a5:03:05:26:cc:
e9:0f:9b:ae:f3:92:0a:2f:c8:24:eb:c3:65:c5:35:
7c:d8:d1:f7:2c:63:2e:b9:6f:93:ca:67:79:3d:8e:
93:f3:95:58:57:f7:33:52:6b:92:15:75:4f:67:c2:
f8:d5:97:78:13:1f:fa:21:d4:64:ee:51:6b:9d:d4:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:49:3C:A5:10:13:4C:FE:0B:E3:27:98:A2:9F:B7:21:A0:30:A2
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:5b:80:b2:15:37:97:f0:da:05:7b:50:1c:83:a8:93:98:
b8:20:ea:f0:7c:6b:2d:d3:b0:ef:5d:16:07:32:3c:f5:94:ef:
11:b2:b2:42:59:ff:54:0b:1e:d3:dc:4d:fc:87:9f:2c:0d:15:
14:66:b4:8f:54:fb:b9:4f:f0:29:d3:b3:a1:a5:b6:a8:44:68:
cd:d2:d0:cc:86:7c:94:c3:20:34:4d:7a:c8:81:e5:9e:d7:56:
71:9a:2c:dd:d0:b9:4a:42:8a:02:c4:dd:1b:9d:a5:1d:57:9a:
cf:f4:92:e3:72:d7:c3:bd:71:82:46:a4:e8:77:42:ac:98:08:
11:d6:86:61:cf:53:cb:62:3c:30:31:27:f6:6c:04:bc:c5:f8:
1a:7d:6f:8d:57:5d:2c:7f:35:a1:b5:a5:de:ef:ea:78:10:a2:
53:20:76:f6:44:df:41:f9:c5:50:09:5f:64:f1:0c:dd:2e:3f:
f0:fd:7a:53:ff:b3:2b:f0:78:43:c0:41:b0:01:8e:ef:0e:c2:
36:c2:09:31:72:9e:60:b9:71:2a:6d:16:79:70:bf:14:23:8a:
d3:2b:03:5e:f5:08:3f:ab:79:26:94:4c:15:e5:08:27:06:78:
34:9a:2d:1a:95:96:b9:a4:6d:5a:3f:44:65:b6:b2:47:5b:d1:
9f:6d:84:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBVlWv2hchEf9GHfUyCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm
ZTJkOGMwHhcNMjYwMzI1MjIwMTEyWhcNMjYwMzI2MjIwMTEyWjAzMTEwLwYDVQQD
Eyg3MmZjNDkzY2E1MTAxMzRjZmUwYmUzMjc5OGEyOWZiNzIxYTAzMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxqDibmNnV5F0sgHT2qIEPEN3etL
0QX4NFEr6u2qSxCLEsNpfHHzVxa4jbDJZTyL5RFIwZGZQ03iCzOEoVN9B3KHxJac
tHr8ctK4vBPT/pIZ+DKOf5/WE3wBVdVewyKcFEGBxc23Arcnz+r8fL8toghqlSFr
7T4HMu+vq9wvrE6Rgc8AP8KvInvyAoN87JFNcL7ug6Le2hJ7N3KJ/QppQaRdhLR9
zyWoukOxBtxQp02/Q4Jm0/lTJbiYjgSYpQMFJszpD5uu85IKL8gk68NlxTV82NH3
LGMuuW+Tymd5PY6T85VYV/czUmuSFXVPZ8L41Zd4Ex/6IdRk7lFrndTxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL8STylEBNM/gvjJ5iin7choDCiMB8GA1UdIwQY
MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt
Mzg5YTMwOThlYzJhLzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh
LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKatbgLIV
N5fw2gV7UByDqJOYuCDq8HxrLdOw710WBzI89ZTvEbKyQln/VAse09xN/IefLA0V
FGa0j1T7uU/wKdOzoaW2qERozdLQzIZ8lMMgNE16yIHlntdWcZos3dC5SkKKAsTd
G52lHVeaz/SS43LXw71xgkak6HdCrJgIEdaGYc9Ty2I8MDEn9mwEvMX4Gn1vjVdd
LH81obWl3u/qeBCiUyB29kTfQfnFUAlfZPEM3S4/8P16U/+zK/B4Q8BBsAGO7w7C
NsIJMXKeYLlxKm0WeXC/FCOK0ysDXvUIP6t5JpRMFeUIJwZ4NJotGpWWuaRtWj9E
ZbayR1vRn22EBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:12 2026 by rpki-client