Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: aS7jJGL6ZmusRy8r19N1XGUQcOpgEbPCPZP1iDsShUg=
Subject key identifier: F9:A9:8F:7E:AE:DD:20:4E:BB:0A:B6:7B:36:75:94:A3:C6:BE:8B:4F
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 01A0D0491B4D572018160DFE12AB0E2083E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0ECB
Signing time: Wed 23 Sep 2026 22:00:46 +0000
Manifest this update: Wed 23 Sep 2026 22:00:46 +0000
Manifest next update: Thu 24 Sep 2026 22:00:46 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: 6HbMoGBe5K90L1NTXh2PDPPHTNfmt7Z5xRrqrcJGDEI=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:1b:4d:57:20:18:16:0d:fe:12:ab:0e:20:83:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Sep 23 22:00:46 2026 GMT
Not After : Sep 24 22:00:46 2026 GMT
Subject: CN=f9a98f7eaedd204ebb0ab67b367594a3c6be8b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:9b:e7:b2:58:20:89:86:63:7f:ec:6b:eb:
f7:90:4e:c8:2d:bc:c9:bf:42:d7:85:c6:2b:c7:74:
09:e4:64:28:f1:4f:47:93:02:df:c7:2c:8c:ff:dd:
29:b6:6a:11:57:2f:a4:e1:c9:03:14:2a:09:cc:d7:
3d:26:fa:2a:be:e3:07:06:25:6c:f6:f1:5f:c7:e9:
36:1a:a0:1f:2a:f9:f8:43:f6:a7:86:05:5e:1d:0b:
21:f1:5c:f7:bf:97:32:5a:bb:17:36:cf:3e:25:ee:
02:2a:78:57:64:5a:39:39:55:d4:30:63:ec:60:35:
d9:48:c7:58:0a:18:d7:40:78:9a:2b:cf:2f:4b:f9:
0b:44:b1:02:e2:34:b2:2f:79:47:cd:57:a2:a2:ee:
a1:9d:a9:1b:0a:9f:02:0b:b4:8f:12:61:ae:bd:7d:
bd:4c:db:ef:04:3e:88:b3:d2:e6:8b:68:77:0d:a2:
42:5e:3a:6a:c9:59:5b:e9:32:33:4a:e7:b1:f4:31:
9a:22:91:f9:ba:49:ef:5b:7b:a8:78:20:72:68:cc:
24:bd:6a:61:da:2a:d0:8a:34:1b:58:89:a3:e1:f4:
07:28:e0:8d:b1:f5:ba:ce:7a:3e:82:6f:70:af:33:
c2:a6:90:c4:b6:a3:54:21:eb:24:f0:a0:64:e6:c7:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:8F:7E:AE:DD:20:4E:BB:0A:B6:7B:36:75:94:A3:C6:BE:8B:4F
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a4:89:3c:12:62:50:b4:a5:ca:72:e9:df:48:c1:26:75:83:
13:54:f1:71:c8:ab:07:80:ff:1b:53:23:1b:18:24:5c:be:0d:
e0:7d:86:21:76:d2:cb:04:02:72:2b:a6:d4:11:78:d8:89:b9:
1f:8a:20:3f:df:27:af:8f:e5:c6:c5:04:7f:0c:89:9e:33:01:
64:2c:b8:92:74:54:d1:48:d7:0a:98:c4:ed:7b:c4:8f:c5:bd:
d3:4e:6d:7a:fa:1b:05:57:48:b4:9b:db:7a:96:74:19:f7:d4:
0e:c2:98:aa:21:21:c6:e4:48:1f:3c:a9:c6:0f:d5:38:49:2a:
91:e2:54:0d:3e:2b:d1:55:ca:40:17:a2:62:94:ea:e6:ab:1a:
83:c9:f6:a5:3d:c1:cc:a8:1a:da:5e:c2:3e:15:e4:3d:58:63:
0b:13:8b:b3:07:e9:5e:f7:0b:c8:51:64:dd:dd:0a:db:c9:7a:
e9:94:94:01:51:e8:ec:71:46:5e:41:60:f5:dd:6e:dd:6a:a4:
0f:2b:ec:63:f2:c5:82:33:57:16:74:83:cf:8f:ad:fb:38:0d:
f1:b4:94:03:a2:20:3c:d9:47:ac:96:26:3b:c8:ca:46:de:9c:
0f:ba:1b:53:6f:88:b1:8f:7c:45:27:80:47:9e:c3:07:1c:67:
91:84:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:29:23 2026 by rpki-client