Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File: Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier: wds3A2NyEX65Ub2WDlg4sVwDhaAWk/r8aiAYl94FnK8=
Subject key identifier: 20:4D:F1:C9:DE:38:67:2F:0E:27:8A:08:0F:CF:45:65:FF:E7:E8:9A
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 01A0D9BBB3F48DCF138F256658F07BFF3D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 18:02:32 +0000
Manifest this update: Fri 25 Sep 2026 18:02:32 +0000
Manifest next update: Sat 26 Sep 2026 18:02:32 +0000
Files and hashes: 1: 82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa (hash: vPPab/KGHpKzLrTGlISXYHb0sr+wSckNgKD9qG+MfNw=)
2: 91Petc5RKlCy-MU2C9Yy6lq65ZE.roa (hash: 7hccwNO3UaWQ0JhtP5+TQ+OksNzm3EM6wDMxIQgrpWs=)
3: Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa (hash: OdcRK/goVMIA15OAEFTVRxq9FJ0mb0HCbom4lfXuy2g=)
4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: lz+wVOHSN6uAxOPKb8zE/rpjKyyQyp+vjwtTCIFAcxk=)
5: eFYkjuueS374d8jpHQ-eRsXYtoI.roa (hash: gwcFI/s7qhCO6ggsOku9CNe7VDcyLuX60cmBFUEOOW0=)
6: eMnVSFyA0FcmLp27QsfFm-htCa8.roa (hash: ahn930ULQdRk7bLieW7xo5TzMTWeAfDz6m9yfZyj0gU=)
7: fp1sLUeIRXFqhsdIFZLdl0__7pM.roa (hash: zYsrMGDZPKYtnkQ+At/0eP5XyC5n7qFFGT9wnz8DZQg=)
8: hgQSUnJubAL4-EZRnXtz-EERDh8.roa (hash: /WEvukiM8zuCEI80FycN6ubUk7Q1iYXiN7WF7p6NooQ=)
9: qLbWT3bB3iBT0TukjMBJAvhaDQM.roa (hash: 8q/NtwWEs+6Q/29xk+gdVzq969Ht7BEuC13rSHEA0yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:b3:f4:8d:cf:13:8f:25:66:58:f0:7b:ff:3d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Sep 25 18:02:32 2026 GMT
Not After : Sep 26 18:02:32 2026 GMT
Subject: CN=204df1c9de38672f0e278a080fcf4565ffe7e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:23:bf:65:b9:62:a3:66:a5:83:2e:35:3d:
f4:17:18:80:5c:ac:d1:77:4a:d5:db:b1:57:f8:7d:
73:b8:55:43:32:d3:6e:75:dd:1b:a7:5e:c8:1a:db:
ce:b8:0b:b3:d2:41:f2:98:73:73:76:f5:4e:44:27:
01:c8:7c:74:5e:69:36:64:49:fb:2d:f9:d5:53:81:
9e:03:f9:31:31:8d:bd:c3:f3:79:d2:77:4b:5e:91:
d7:f0:16:96:bf:98:6b:72:2b:f7:9c:c5:23:e3:62:
4c:7c:ae:e8:dc:05:08:7e:db:e1:64:11:ff:e3:81:
62:6b:fb:74:ca:7b:2b:ea:ed:e9:5a:af:20:a5:87:
66:bd:59:58:cc:e1:85:d6:25:c5:83:f2:d3:90:58:
3c:80:91:1d:5e:b1:76:52:ae:fe:3f:64:e1:8f:2f:
b0:06:76:8c:99:bb:62:db:e5:e5:9a:e1:af:df:57:
d4:c9:0a:67:f3:32:ea:70:21:1c:db:b9:56:82:de:
b6:ac:ed:d9:cf:d0:7a:61:05:df:d0:34:ac:02:1d:
36:f5:a1:37:cb:9d:3f:a4:ae:c2:75:d8:a2:61:fe:
89:6a:af:16:49:a4:8c:96:86:f6:18:fd:e1:7f:d9:
0c:70:b4:c4:f1:29:f2:45:dd:9d:b9:06:c9:8f:89:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4D:F1:C9:DE:38:67:2F:0E:27:8A:08:0F:CF:45:65:FF:E7:E8:9A
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:d0:48:31:a4:92:69:28:0f:ac:b9:39:49:9a:b7:84:be:
5a:35:59:22:3c:ec:2b:d0:cf:fc:fa:10:99:08:cc:1d:48:f1:
1c:8b:55:28:8f:b0:e5:aa:81:88:f9:ff:1a:e7:ca:57:f3:be:
c2:8a:8f:3e:3e:49:35:54:55:4c:54:90:bd:d7:cc:30:e3:dd:
15:16:4d:cb:04:fd:5e:05:2e:a2:db:4c:76:74:6d:c8:31:eb:
10:45:a1:f1:25:8e:4e:b4:bf:27:88:a7:3d:e5:11:08:a8:c6:
ae:2b:80:fc:e8:12:69:59:cc:02:ce:2a:e3:48:82:28:9d:95:
32:b1:7d:3a:bf:a3:ac:03:ea:e9:63:bc:ab:7c:93:80:09:4f:
d4:58:b2:06:c5:c6:1e:f5:c9:99:ed:c8:29:b8:90:76:12:5d:
6b:35:f9:c6:e6:08:1c:c3:0a:93:15:cb:88:d1:71:70:f9:47:
e9:47:c3:51:23:6b:9a:47:e7:1b:47:d1:48:c7:bb:02:5b:a4:
8e:e7:74:9c:40:a4:a7:bb:ee:2c:88:a8:05:26:1e:7e:2f:61:
e6:0c:fd:ac:90:93:ab:ee:98:c7:1c:93:0c:b0:71:bd:43:0c:
cb:d6:d1:2a:30:db:c9:25:74:6e:79:b4:c8:56:72:ef:81:fc:
a8:5f:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:46:42 2026 by rpki-client