Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: bKcUZFwPOrJO/OmNCDJS/tRWA38DAxsTZjLyBHTvEHE=
Subject key identifier: 80:9A:70:13:E4:2F:99:EF:5E:F2:2E:47:71:A5:9C:2E:AB:96:64:CC
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019D2997643C444020D88C817E71DB5E54B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0CE7
Signing time: Thu 26 Mar 2026 10:01:20 +0000
Manifest this update: Thu 26 Mar 2026 10:01:20 +0000
Manifest next update: Fri 27 Mar 2026 10:01:20 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: 1u9QKEVk1/xNnMDs58vKKOlykTOgzz+TdRY/txiozQI=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:64:3c:44:40:20:d8:8c:81:7e:71:db:5e:54:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Mar 26 10:01:20 2026 GMT
Not After : Mar 27 10:01:20 2026 GMT
Subject: CN=809a7013e42f99ef5ef22e4771a59c2eab9664cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:4d:84:6f:4b:b6:02:dc:79:ca:32:f7:b1:
c0:6b:4f:0c:ef:86:8f:66:95:04:8d:3f:58:d8:53:
63:1a:62:46:f2:e7:82:8b:45:44:2b:2d:36:5a:30:
87:70:5c:66:c1:b7:2b:18:32:e3:ad:af:08:d1:ff:
07:f7:ae:26:ca:be:b1:95:f8:bd:a9:af:c7:41:68:
60:d8:29:4d:25:a3:11:4f:10:47:25:77:d0:18:44:
8e:18:bf:8a:d1:e2:9e:6b:37:38:54:af:7f:ed:09:
2b:40:63:be:eb:c0:fd:b3:65:06:b5:dd:a6:bc:c1:
1b:2d:fd:61:ba:91:c0:cd:71:8d:b5:c9:2c:6a:ed:
36:4d:80:36:97:21:5f:de:76:be:e4:c1:e5:4f:42:
14:3a:76:0a:4f:c2:60:6d:c8:8b:c1:50:51:d7:55:
ff:24:18:f5:56:6b:33:e2:90:9f:c1:30:7d:c1:cc:
1a:25:5e:06:a1:ed:18:5e:26:92:61:a6:d7:d2:ca:
29:80:f0:22:44:e5:28:59:b1:37:3c:29:48:99:a8:
fb:cb:67:70:a4:94:c4:2e:8d:b8:72:27:be:1a:b1:
e1:07:6c:8f:77:0d:9c:9c:13:51:ad:46:5b:b9:71:
22:af:d8:23:53:df:c7:85:d0:fa:7a:89:a9:c9:8b:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:70:13:E4:2F:99:EF:5E:F2:2E:47:71:A5:9C:2E:AB:96:64:CC
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7f:8e:c4:a2:d1:2e:d5:86:e5:0e:ba:6d:c6:b2:e5:fe:33:
13:75:1b:74:4b:7a:ba:c7:88:3b:78:55:ad:31:6f:7a:14:8f:
7c:a2:66:00:7e:0f:7e:50:0d:24:24:08:a9:c9:96:00:b7:3e:
b5:ae:63:56:1b:23:8d:95:f6:27:7d:8b:a9:cc:5c:55:01:72:
31:fd:ef:ed:12:89:14:13:1d:d6:d6:b6:24:14:30:a6:37:04:
a3:e0:c9:fd:47:b0:90:04:b1:53:0a:d6:63:49:7d:53:d0:d9:
00:9b:c4:3d:fb:69:0b:64:f0:4d:10:79:a8:b2:ec:1a:01:5c:
7e:da:d6:43:13:4a:da:cd:f2:c5:5b:c0:a3:fb:9f:d4:2f:b6:
44:a5:ab:84:e8:a8:27:81:86:71:38:05:35:55:39:92:26:07:
f6:3b:f6:d5:fa:5b:61:9c:7b:37:f0:cc:a4:9f:5c:60:07:eb:
a5:e1:29:24:7e:82:0a:40:5e:63:ff:76:53:40:2c:05:35:00:
5e:0b:86:e3:b5:3c:3c:04:db:93:e4:bb:d0:cf:38:d9:51:61:
a3:6e:b4:5e:c5:1a:9b:44:a0:68:71:09:64:61:f2:b1:69:67:
67:35:d4:7a:8f:48:56:63:1e:a9:a0:3e:56:75:e7:39:c7:ba:
9a:26:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:32 2026 by rpki-client