Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: nR0UBXRnx4KerZALol390eiKKD6iuB53YryusziCNko=
Subject key identifier: 30:38:C4:AB:0E:3D:29:79:A7:31:E7:11:B0:28:6E:43:13:F1:4A:52
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 019D2703F0468340569FB4001A63CFBD8D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 152E
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: 0RIr0GYKn10OTk96UZfF+X4lbVX0n8Tt2vtGAlHqgCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f0:46:83:40:56:9f:b4:00:1a:63:cf:bd:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=3038c4ab0e3d2979a731e711b0286e4313f14a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:0f:ec:a2:5b:b6:c0:96:45:a7:62:64:df:
75:21:a8:09:1a:a6:4c:13:eb:d0:1b:49:4c:e0:e3:
88:40:c3:c3:2f:aa:b2:24:78:fd:da:a5:c1:61:dc:
8d:1e:f6:8c:9c:0b:b7:99:ed:f0:0b:50:9d:e8:42:
34:ea:f5:4f:da:c2:70:92:4f:79:2f:8b:67:76:b1:
e1:d4:ed:b3:39:d4:3b:23:91:3a:2f:fd:9a:57:b7:
57:c6:54:f8:da:21:a5:de:5b:81:ca:e3:1d:0d:32:
81:a5:13:23:3e:ee:a6:88:f0:aa:7c:5e:b5:0c:62:
3a:17:73:70:a2:46:d6:6b:1d:31:4e:b2:cb:71:23:
df:8a:4f:f9:6f:17:d2:74:78:22:5a:36:07:ad:dd:
39:be:1b:f9:1a:eb:dc:5c:70:55:d8:84:d7:16:9d:
e8:a8:2f:f7:ed:74:7c:a9:38:22:06:61:4f:c0:7f:
c5:71:ca:90:dd:a6:fc:21:ea:79:6f:36:0c:f9:a4:
46:bd:e7:fe:c6:e6:9c:9a:bc:07:2a:d3:db:89:99:
54:e2:86:0c:19:1d:ff:9a:4d:85:4e:1a:be:58:68:
60:e8:8f:e9:6d:17:2d:c7:4a:c4:37:8d:19:2f:85:
4b:f7:10:8e:4f:64:ee:03:b0:c1:f4:7c:3e:e7:44:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:C4:AB:0E:3D:29:79:A7:31:E7:11:B0:28:6E:43:13:F1:4A:52
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:74:6a:54:18:dc:9f:a3:10:fb:ce:b4:c5:e5:19:69:05:6c:
9a:f4:9a:10:10:39:2e:d0:ae:e5:55:6e:45:0b:2c:73:cc:0b:
8c:1e:0e:cb:d3:f7:d5:8e:ec:0d:a4:63:d5:84:78:a0:e7:92:
b9:d6:de:05:2a:de:bb:a8:9f:49:1c:f3:61:d5:f0:75:66:78:
62:77:11:77:e9:c5:60:7f:74:d9:87:e0:23:69:58:a6:cb:98:
88:44:7b:8e:1f:82:bf:8d:46:fa:9b:9b:0c:e2:40:c8:f3:21:
43:b6:65:d0:e8:6a:3c:e4:5f:f1:13:63:00:ef:4a:f9:02:c1:
47:74:78:28:a2:67:51:63:22:ed:43:d2:df:ef:20:4b:62:3a:
15:19:31:81:6c:f8:ca:2d:38:c0:4d:9e:9b:f6:64:60:32:4a:
c6:a6:d9:35:37:10:77:1e:25:0e:6e:e6:95:af:0b:93:cc:7f:
3d:6b:a0:57:60:8b:a7:35:65:97:60:20:b8:dc:f7:76:01:e3:
bd:36:0a:42:a7:02:b2:71:23:9c:f4:9e:6a:d1:6c:38:69:73:
b8:c8:8a:6b:f9:d1:ca:2b:59:da:98:2b:d7:6e:d3:9c:29:c7:
a5:07:3e:24:40:70:87:fc:73:23:c1:42:c0:b7:cf:d5:e5:10:
33:39:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:49 2026 by rpki-client