Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: U77m6p/B6oqtQ/EdHfVkTlmNoFLOFquoSiJsP0uYepI=
Subject key identifier: 19:E1:0F:0C:C0:1C:5D:56:6F:43:B5:A0:18:71:E5:B9:59:18:D5:01
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019D2AE084C90CACE39E9AF25476788BE0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 16:00:50 +0000
Manifest this update: Thu 26 Mar 2026 16:00:50 +0000
Manifest next update: Fri 27 Mar 2026 16:00:50 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: hvncOf0h5gKCr4HNwQeob0D1Lh9pB4Gyu/590szC/us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:84:c9:0c:ac:e3:9e:9a:f2:54:76:78:8b:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Mar 26 16:00:50 2026 GMT
Not After : Mar 27 16:00:50 2026 GMT
Subject: CN=19e10f0cc01c5d566f43b5a01871e5b95918d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:e1:2e:58:b1:d2:a9:02:61:73:91:08:f2:
96:73:e8:4a:c1:1e:52:91:62:68:76:01:1e:b3:62:
eb:f2:bf:7d:ec:c0:40:1f:67:b4:ad:16:91:38:64:
a4:6f:b7:f7:d4:52:d3:4c:e4:d9:ba:69:e9:9e:59:
9c:1c:a2:04:d7:3c:94:66:a0:94:e4:cc:10:ba:33:
41:f1:71:4e:8b:45:bf:93:c0:db:b4:a4:e2:3f:03:
c1:46:e9:1f:c4:2f:f3:4d:3c:09:50:fe:9b:1f:94:
2d:8a:cf:71:19:f7:8c:a0:6f:4e:e5:73:5b:21:61:
44:96:f6:77:ad:52:bb:87:de:06:fc:d6:39:df:0b:
4b:48:7a:e3:72:fc:5f:bd:c8:f9:eb:c4:0b:ff:f4:
6b:5f:0a:da:1d:b7:7c:b5:e8:ba:9c:10:08:38:f2:
6f:0e:19:24:7f:d1:59:a6:1e:63:0c:29:01:d7:05:
81:a4:05:11:4a:fd:19:02:33:85:96:aa:38:38:df:
35:be:03:51:c8:e5:3c:06:04:26:17:3c:0e:88:de:
7e:c1:09:37:80:70:db:4c:4b:c3:d7:fc:b9:8e:d2:
ce:f0:16:56:11:b9:02:04:26:de:f8:5f:59:8e:92:
d5:2d:fd:e3:5b:60:71:ba:c5:08:86:b8:03:65:e4:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:0F:0C:C0:1C:5D:56:6F:43:B5:A0:18:71:E5:B9:59:18:D5:01
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:89:f6:54:e7:3b:81:ab:e6:87:eb:70:44:19:50:6c:c5:
63:22:61:e2:05:c9:b0:40:f5:af:99:56:00:f5:d8:14:c4:be:
3d:8a:d2:12:05:25:bf:5c:78:28:91:56:94:4d:bc:9a:0b:73:
f4:cf:29:24:d5:17:32:d9:78:8b:c2:13:6c:90:82:dc:ff:32:
27:5f:f2:1d:95:4a:bf:e2:6c:78:dd:da:54:4b:7a:19:7b:28:
24:c2:83:92:a5:c5:89:90:60:78:33:f8:a9:ee:18:25:27:20:
e4:f0:31:0d:64:b9:a3:67:df:c0:34:45:8b:fd:f4:f8:d4:8e:
a4:16:92:c1:4a:06:5a:9e:9e:47:3b:f4:9e:ed:73:c0:67:8f:
10:05:06:bf:29:f4:94:44:c8:57:6b:48:9e:74:30:ce:98:0e:
91:76:4b:1d:12:34:98:89:bf:49:7d:62:01:50:cf:45:e1:91:
36:e0:96:90:92:b4:d1:db:bd:b8:77:47:af:ba:cf:a1:27:d6:
45:30:e2:53:06:04:9f:a1:86:e5:37:15:6d:21:f1:fa:dd:0f:
23:a3:76:b4:da:a3:e0:05:4f:69:ef:c8:70:2d:99:d0:2f:05:
39:b3:59:24:c5:9f:a4:d8:9e:9c:3e:4a:c3:91:23:ab:c9:44:
a0:6c:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:43 2026 by rpki-client