Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: n2UrFef7kxtazpjaJuMEAzO2kVCMfgwzWzg+8iv5Bb4=
Subject key identifier: BE:76:B3:E3:8F:73:AF:71:62:D0:76:F1:0F:B4:34:89:11:AD:81:8D
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019E1E360E178286B69277C70E0C48057D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 22:01:59 +0000
Manifest this update: Tue 12 May 2026 22:01:59 +0000
Manifest next update: Wed 13 May 2026 22:01:59 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: cX/BsKrMXl8EfXG8TknXnmNvY9SkWo6F8nt8h1uzYiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:0e:17:82:86:b6:92:77:c7:0e:0c:48:05:7d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: May 12 22:01:59 2026 GMT
Not After : May 13 22:01:59 2026 GMT
Subject: CN=be76b3e38f73af7162d076f10fb4348911ad818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:94:1a:e9:39:cd:1e:1b:27:15:3f:cc:a5:
5d:40:af:56:f8:d9:db:52:68:a1:04:59:57:eb:74:
13:48:6c:28:05:42:dd:7e:f8:0d:7d:fb:2f:a5:33:
aa:2c:75:3f:4d:5f:74:8a:5a:39:be:85:29:cf:65:
52:ff:4f:59:83:de:64:00:64:f4:54:12:aa:9c:6d:
7f:2a:46:16:aa:46:34:2e:98:7a:ce:be:39:00:57:
be:53:f2:01:6d:d6:04:96:d0:7b:be:2d:06:5c:a8:
35:7f:44:d5:7f:f2:14:4e:b1:c2:0c:80:3e:1a:ce:
39:30:0c:9e:97:63:93:c9:74:fa:f8:4b:8b:3e:ec:
f6:9e:9c:e5:25:72:cc:a5:23:0f:3e:9b:95:4b:a1:
c8:6c:56:0b:23:f1:32:3a:8e:c9:63:bf:3c:bb:31:
25:28:cb:45:d2:0a:c8:67:5c:44:fe:aa:20:93:9b:
e0:54:35:3b:21:ce:6b:94:6c:10:77:15:c5:de:c3:
3f:85:2c:9d:49:e0:7b:8c:c3:18:0e:54:1e:75:c0:
9e:51:18:8e:de:4f:ba:78:41:4d:44:f9:8b:5e:0c:
07:9a:84:0c:31:eb:3a:21:23:9e:18:30:59:04:18:
8c:3b:99:70:76:80:e2:3f:20:bb:e0:1d:cd:6b:dd:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:B3:E3:8F:73:AF:71:62:D0:76:F1:0F:B4:34:89:11:AD:81:8D
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:d1:e4:84:fc:a0:9a:8f:f0:52:3b:13:a2:72:be:9a:d1:
0a:87:50:3a:94:15:ba:8c:76:a9:0d:71:7d:7d:cb:0a:b0:0d:
62:01:00:0a:a3:07:1d:a1:e0:d7:05:29:61:55:87:90:33:14:
ef:cd:5e:6f:a4:19:02:ca:6c:42:cf:74:d1:cf:d8:84:6e:6a:
41:c5:50:31:b2:1f:b4:5d:92:06:16:70:ba:cd:fd:a5:d7:c9:
0a:05:bf:f1:84:87:f8:0e:69:e0:3a:a6:0f:59:45:df:14:ff:
41:87:2d:01:c6:09:d0:4b:87:45:69:21:e1:a3:5e:be:63:03:
57:89:3e:cc:55:85:7e:1b:e5:59:b5:89:bc:07:0e:6a:47:45:
eb:46:dc:be:0d:71:cb:ce:ea:48:19:34:d2:dc:ab:66:3b:38:
c3:83:18:71:d7:33:ce:78:5f:39:6b:a2:40:03:3e:ba:34:99:
93:af:35:5c:ad:d9:1d:96:61:71:93:8e:7b:10:7e:15:ac:78:
9d:a4:25:1e:aa:2c:d7:cf:09:fc:6e:1d:5f:be:f1:31:09:bf:
68:46:b0:92:43:3e:45:fb:8f:5b:ba:f9:c4:d2:e3:1e:df:43:
84:9a:a6:9b:45:f5:52:fe:2f:e1:0f:8a:94:32:82:fd:b9:0c:
01:28:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:47 2026 by rpki-client