Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: eKF7negc96jqI07lW1hjQvJHz57ybkwtVRHTnxFJ18o=
Subject key identifier: 28:CE:A1:D5:18:0B:E1:8B:48:A4:39:CD:8E:72:48:0A:89:19:55:C5
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019E1EDA4D563E6BADBA562FA37EB8D7D080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0D66
Signing time: Wed 13 May 2026 01:01:23 +0000
Manifest this update: Wed 13 May 2026 01:01:23 +0000
Manifest next update: Thu 14 May 2026 01:01:23 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: Bu6IGhYgwuNfoCnEL5AYMDjomZT/27hQYwnyEJ9+m4M=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:4d:56:3e:6b:ad:ba:56:2f:a3:7e:b8:d7:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: May 13 01:01:23 2026 GMT
Not After : May 14 01:01:23 2026 GMT
Subject: CN=28cea1d5180be18b48a439cd8e72480a891955c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:55:ee:85:ad:67:db:4a:3b:18:bc:4f:fc:
19:67:06:58:31:dd:da:a7:7a:82:21:75:84:51:3e:
b3:67:08:4d:54:b6:e3:4b:b6:63:f5:3b:5c:e1:21:
19:45:e4:67:19:44:80:b2:e1:01:69:01:fd:e1:eb:
03:4d:91:1c:9a:4b:9f:0f:64:be:73:d5:47:42:a5:
a4:37:e5:ec:66:77:4e:93:d4:d8:cb:53:62:66:ed:
e2:5e:82:a6:94:09:a5:ec:c6:52:8f:e3:00:9a:bc:
1c:f1:f1:82:c3:5f:e9:42:a9:5e:af:46:b4:bf:3e:
2c:ed:6d:f6:e2:01:a1:33:59:fd:d7:cb:79:3a:d4:
8a:59:b4:dd:70:be:f8:61:7a:29:e5:c1:9c:a4:1f:
01:6e:de:e7:d8:7a:5f:fe:53:1d:ee:ec:e5:58:d2:
ea:63:78:e5:f7:32:53:8c:ed:4f:ae:60:f5:06:c2:
22:4e:85:2d:98:8f:4e:73:d1:c7:6d:af:bf:9c:42:
0c:76:62:e6:ef:75:6c:c4:32:01:f0:7e:b5:bc:ce:
8c:79:f4:6d:81:77:4c:34:d8:15:93:d6:5b:f6:3a:
bc:e7:0d:d0:82:c5:f5:af:4c:25:72:b7:96:88:9a:
07:e7:b3:a2:2c:7d:f4:f4:db:e0:7d:44:8e:28:63:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:A1:D5:18:0B:E1:8B:48:A4:39:CD:8E:72:48:0A:89:19:55:C5
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fe:30:ab:55:70:bb:1d:20:1d:c3:15:b3:2a:48:7f:6f:71:
39:54:12:fd:c4:96:62:4e:9f:0e:a9:8d:c0:cd:ad:ba:15:61:
6b:e1:46:25:91:6f:45:12:27:57:de:84:c3:b1:3e:49:89:f3:
16:a2:0f:9d:19:0d:bd:8f:d6:ac:a4:c3:1c:1d:e6:0c:07:eb:
fe:b0:f1:b5:22:95:54:71:2f:81:35:a1:f7:30:d9:db:cf:11:
4d:68:95:ce:47:ce:8a:26:75:dd:43:8d:2b:86:a9:d7:ef:4d:
72:e8:cc:71:58:26:1b:79:f4:6c:1e:6a:aa:e0:2e:c2:36:72:
69:cc:95:50:df:03:b8:81:3e:74:dd:13:14:53:35:80:0d:dc:
e5:77:b8:a2:a5:dc:74:4c:0f:ba:8e:40:33:0e:eb:31:65:67:
72:0a:6c:0e:65:92:08:c7:10:a5:04:3e:40:85:73:14:39:92:
20:74:37:62:74:a6:66:61:64:0e:e6:87:3d:51:91:5e:85:43:
9c:6b:cc:a2:8c:4e:e0:0c:e2:42:56:7c:52:9c:4c:f4:71:50:
6f:5a:93:31:31:dd:4f:b9:96:f2:24:83:65:e6:a3:49:d9:ce:
8a:ce:ca:d1:1a:74:c2:17:4a:99:a8:e2:01:b6:69:77:22:39:
b3:7a:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:51 2026 by rpki-client