Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: 8UemF4hhiZcyEah5mF5DPgXaKl4r8E5IaeZWdvPn8EU=
Subject key identifier: 22:54:68:02:B5:F9:98:20:70:4C:35:05:DE:CB:AB:B3:DD:25:3C:CB
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019F93922478D2021180A73BECFEEDA8653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0E27
Signing time: Fri 24 Jul 2026 10:00:55 +0000
Manifest this update: Fri 24 Jul 2026 10:00:55 +0000
Manifest next update: Sat 25 Jul 2026 10:00:55 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: DO3lTf1PhVE3DCqDTl1QH8ERQtpgRQlghIufUiIoqtA=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:24:78:d2:02:11:80:a7:3b:ec:fe:ed:a8:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jul 24 10:00:55 2026 GMT
Not After : Jul 25 10:00:55 2026 GMT
Subject: CN=22546802b5f99820704c3505decbabb3dd253ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:67:f1:ad:e2:37:65:29:35:9f:88:0c:5c:
6d:2e:6d:ef:66:a0:7f:0f:4b:59:8e:ce:75:ae:84:
4a:40:7a:fb:0f:e4:ea:54:6d:74:b6:18:aa:93:64:
f6:a1:03:ca:2c:e8:3e:81:bb:b9:df:05:4d:b5:50:
dc:97:8b:60:85:b4:d3:8e:76:e1:9a:cd:1b:40:e4:
86:15:95:23:50:ac:d7:14:72:ab:c4:c5:57:1d:50:
f4:d1:a7:ae:a3:f2:8b:1a:9b:73:95:f0:9c:ef:24:
9f:83:0b:71:0c:76:1f:f9:b0:dd:a4:74:8b:59:7f:
37:3f:d8:74:7c:10:e7:7b:33:fb:3b:64:57:c5:4e:
54:b0:bb:5d:52:e5:db:d6:ad:94:f8:49:da:53:19:
62:d7:b5:d2:39:b4:98:78:35:61:02:06:b9:f1:eb:
32:69:cc:ef:d4:40:53:9e:74:27:76:32:7c:52:84:
10:3a:7f:bc:63:e9:ca:19:cf:44:c2:a5:f3:45:3f:
b0:eb:06:1f:fc:4e:b8:17:1c:ad:dd:ea:68:b8:98:
78:8a:14:6c:ee:f1:9f:54:a2:8c:a3:bc:cf:82:3c:
8f:27:6d:80:d4:d5:2e:01:8d:f0:b5:c7:ec:56:5b:
7a:a3:19:46:45:b5:a9:05:27:82:dd:01:ca:f2:1f:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:68:02:B5:F9:98:20:70:4C:35:05:DE:CB:AB:B3:DD:25:3C:CB
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5f:64:2d:d8:12:9e:42:83:1e:58:66:63:43:55:1f:0c:0a:
13:ad:3d:d4:a8:a8:af:67:9c:64:38:cd:c1:40:7f:ae:b8:06:
ee:5e:26:13:bc:4d:5a:17:eb:42:c0:87:09:76:ac:e5:3f:2e:
35:94:3f:97:1b:07:78:c7:ec:1f:05:ca:a8:be:8f:39:d0:7a:
a6:68:f9:7d:f0:21:9f:79:38:88:86:13:aa:64:78:e5:04:a8:
aa:2d:ff:d7:b1:9d:42:c2:50:13:05:a0:54:ea:af:6f:1c:95:
db:36:1e:6d:0d:28:da:28:8a:b5:6e:d2:f4:84:af:4c:d9:5b:
7a:a7:33:8a:76:ec:08:3e:23:17:21:be:47:85:45:39:72:38:
03:1b:4e:9f:9d:cf:a1:80:4b:f8:b9:4d:eb:cb:ed:ea:f4:ed:
e8:7e:4a:9b:da:f3:44:0e:2a:d0:ab:c8:fd:c7:a6:3e:f0:2c:
ee:b6:ed:4a:69:24:d9:e0:99:87:a2:58:c6:fe:88:0e:12:06:
84:80:1f:f5:19:1e:43:33:1c:91:eb:77:f4:96:6e:a4:27:da:
14:fb:2f:71:f7:1e:76:6d:ca:24:f2:ed:32:79:ad:98:d4:ae:
c8:68:bd:d7:e0:c9:a8:21:48:c5:b7:c3:15:c6:1e:28:2d:38:
8d:76:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:35 2026 by rpki-client