Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: 8zfy6xMs5Xxcgbmr9BnsmgT1WPXX3dnqZq3deFwbkE0=
Subject key identifier: B5:6B:3F:9F:93:E5:F2:8B:C2:8B:17:5D:CE:6E:C9:F4:75:0B:B4:B2
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019F90FEF6959BDF92CAE087BD0F14551431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 22:00:56 +0000
Manifest this update: Thu 23 Jul 2026 22:00:56 +0000
Manifest next update: Fri 24 Jul 2026 22:00:56 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: RrJptCalHmiIKx0M1e+nOzAgVy138qWb6hd8NV3CuIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f6:95:9b:df:92:ca:e0:87:bd:0f:14:55:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jul 23 22:00:56 2026 GMT
Not After : Jul 24 22:00:56 2026 GMT
Subject: CN=b56b3f9f93e5f28bc28b175dce6ec9f4750bb4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:6c:02:d4:1e:53:71:15:b6:f3:84:64:ac:
e1:b4:f6:6c:c1:62:12:9c:c4:74:6e:54:b9:3f:7a:
9c:53:48:61:b3:18:3f:01:e2:17:a0:d1:fe:b5:9c:
f1:36:02:d6:e5:1f:1c:cd:97:73:c7:52:fe:6a:95:
6f:89:fc:ed:77:22:11:ec:eb:99:e8:c6:09:b3:33:
de:66:e2:82:0f:68:c8:a1:6f:ed:8e:dd:05:cc:6d:
52:62:04:ac:af:12:59:6d:ff:ed:a9:4a:34:d3:03:
ed:08:97:ba:8e:62:cf:ea:d5:fe:0d:b2:0f:0c:df:
c9:81:20:bf:f7:6b:ed:6c:ca:cf:79:c0:cd:a4:83:
5c:2d:a6:70:90:99:17:10:ee:ad:bb:e4:d0:1b:b0:
e0:22:1d:91:28:72:b5:69:29:16:61:f0:52:5a:4d:
4a:03:8c:06:29:65:e6:1a:5b:fa:90:75:26:69:12:
ed:01:e4:8f:46:cc:1a:12:9e:eb:14:f7:ad:54:f2:
38:af:51:ba:f1:4a:bd:ca:dd:54:cf:a7:b2:f0:26:
a5:47:b1:83:06:0e:01:08:85:8c:ae:c6:18:7e:a5:
04:35:1c:59:bf:21:fb:2b:6b:a8:9c:cf:1b:1d:16:
99:26:63:1b:f7:45:40:4f:f9:ce:fd:fe:19:1b:66:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:3F:9F:93:E5:F2:8B:C2:8B:17:5D:CE:6E:C9:F4:75:0B:B4:B2
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:2e:a0:ca:dc:c2:2b:f4:86:5b:dc:4b:a9:51:4a:42:e4:
70:74:ef:a4:6d:29:45:57:bb:ad:17:9b:86:e0:66:21:37:08:
65:73:60:89:d6:fd:5e:f8:ba:a5:18:e5:dc:ac:3a:5f:99:bf:
b6:b8:e5:29:3f:56:05:e6:92:b0:db:ff:6b:07:a0:b7:e1:7c:
12:72:5b:3c:b8:53:5b:04:08:05:d2:03:f0:3f:0a:18:46:0a:
a0:3c:f4:5b:10:0f:a5:58:df:f8:6c:b8:cc:d9:ca:6a:93:32:
ea:bf:b3:1e:08:7e:00:07:33:fc:91:ea:5a:b4:ec:4b:ea:6a:
80:4b:c2:91:91:f5:8d:12:39:73:0f:86:00:5a:1c:d2:59:5c:
93:52:e6:e8:9d:5d:6c:a9:7a:e7:0b:ff:5b:9c:ec:18:04:d8:
0c:4f:34:74:f8:03:91:1a:52:8f:1e:5d:de:41:4b:43:e9:b7:
c0:b2:f0:c2:b9:bc:79:9a:f0:2d:31:ee:1d:4b:5c:c6:2e:91:
88:cc:1e:51:66:2b:6a:17:a6:a4:1d:57:d4:b7:de:32:b5:a2:
0c:94:b4:24:97:e7:1d:a5:c6:e4:1f:09:7c:68:fe:0d:14:a0:
30:b8:a6:8a:0d:b4:a0:cc:cf:79:96:98:ae:a3:ac:ac:f2:31:
ad:c9:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:15 2026 by rpki-client