Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File: MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier: WfKKUMQWwQ23nL5lWDXlYD5mxdC7dLQhExXKypfjjVw=
Subject key identifier: D7:8A:71:21:91:0F:45:B1:E9:DC:EF:6B:A0:42:FB:26:14:74:D2:76
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial: 019D28BBF4EA61CEAA8209350FACAD08D60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:39 +0000
Manifest this update: Thu 26 Mar 2026 06:01:39 +0000
Manifest next update: Fri 27 Mar 2026 06:01:39 +0000
Files and hashes: 1: EFGLC8SL84p1q1K-j3Uf3V3IW44.roa (hash: 4PnC9POkZ3ZS5ZMz+CxTTugtS6AWFe8U3aLCVUVr204=)
2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: UqTzYd78zau4x80Z8cv6hph8ifiwDRUr5XF86Xl/WrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f4:ea:61:ce:aa:82:09:35:0f:ac:ad:08:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Validity
Not Before: Mar 26 06:01:39 2026 GMT
Not After : Mar 27 06:01:39 2026 GMT
Subject: CN=d78a7121910f45b1e9dcef6ba042fb261474d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:17:42:b6:33:6c:88:2d:c1:9c:99:ba:3b:
8d:df:56:b2:74:b6:3b:e3:e3:f0:57:15:65:9d:6b:
5b:c4:39:64:9b:ad:19:46:08:f6:6e:04:cf:f5:bb:
08:f2:67:5b:6a:b8:4c:c7:d4:a9:a2:c8:fd:43:34:
54:2d:cd:1f:5b:41:4d:fa:32:55:5a:fc:bb:bc:04:
63:9c:79:66:51:23:97:35:f1:58:76:ed:6f:b6:83:
50:17:5e:e8:56:eb:aa:45:a4:b3:fa:90:41:e9:d9:
0b:8b:70:ef:03:0d:5c:73:03:92:39:9f:a5:71:f2:
a7:b4:cb:cb:82:65:e7:8c:b7:91:d7:de:f4:15:64:
ee:42:7b:0f:09:7f:97:9d:12:6b:ab:74:69:7b:42:
b5:6b:67:f4:9e:49:d3:e2:48:61:3c:4f:47:a0:f7:
67:04:ff:06:5d:33:b8:79:51:0f:4a:3c:f3:58:9b:
14:e7:ae:7c:d2:91:d7:47:0e:78:e3:d8:15:15:f9:
98:29:88:8d:e1:60:7a:37:6f:2c:d4:5b:46:fb:ad:
97:89:31:15:19:b4:51:1a:d0:46:34:88:8f:5f:ae:
d2:f2:b3:a2:43:a7:c7:21:42:51:13:e1:16:9a:8d:
74:06:6e:c1:1c:1a:b3:0f:6b:b9:fe:90:b1:46:fe:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:71:21:91:0F:45:B1:E9:DC:EF:6B:A0:42:FB:26:14:74:D2:76
X509v3 Authority Key Identifier:
keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:b5:fb:b8:40:0c:b7:d3:ff:94:38:2d:8b:cc:53:b3:22:
4c:69:ef:98:69:aa:85:b3:98:8e:3c:d6:d7:de:56:1f:2b:2a:
3e:8c:33:18:31:8b:01:2d:3b:71:75:39:f5:45:d3:74:f8:92:
31:66:21:00:c1:0a:93:30:4d:46:5e:dd:8f:4c:3e:db:7f:a9:
79:f3:e1:b4:0d:22:9a:00:e5:dd:03:35:43:b4:ae:13:aa:64:
20:55:94:1c:77:31:09:c5:e6:e0:96:21:77:fd:98:27:06:cd:
9a:38:c4:e0:a8:6e:89:d5:68:35:67:d0:f5:aa:c2:22:fc:7a:
d8:fc:46:eb:0c:56:0b:9c:32:6b:e0:5f:77:17:d0:e5:19:38:
ee:51:5f:81:5c:06:67:d3:e8:30:fe:2e:d2:35:02:e4:12:fd:
36:df:f6:de:12:82:8f:75:f3:21:8e:7c:a2:68:92:c9:d5:64:
ab:78:05:05:f2:48:f8:4a:50:97:f1:4c:03:8a:9e:78:81:6b:
0a:b1:f4:9a:14:13:1a:39:81:5e:93:45:2a:5c:ba:ea:27:65:
44:e0:d1:a6:73:6d:15:21:98:98:b8:8b:34:ad:2a:73:43:aa:
4f:8a:5e:27:44:a6:27:d3:23:aa:e7:1b:31:d0:a3:48:25:6c:
9f:85:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:50 2026 by rpki-client