Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: DLOxnWlLvDdstuDbyeEFY4G+CtNcDpfCSZ+saowqE4k=
Subject key identifier: 91:A3:B9:9D:78:6B:9D:8F:9E:D2:85:B4:1E:1A:AA:97:BF:9F:16:48
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01A0EBF9B4D26CC22F5682FE346DF76AD68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 076D
Signing time: Tue 29 Sep 2026 07:03:25 +0000
Manifest this update: Tue 29 Sep 2026 07:03:25 +0000
Manifest next update: Wed 30 Sep 2026 07:03:25 +0000
Files and hashes: 1: B5LeEaJvi3HeQSD41vCBPOSwCqA.roa (hash: J8iyDcJo2rN2bShtgQufGUQCMMmmWJ3P0+AOI3a4/74=)
2: FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa (hash: SqvMQwiK+3k9rUMpX3V6L4hGcrAmDvVmALug/oB9sFU=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: rsU1VWfUJoD2r8jXeZADPFgs4iNP8kY3Hutdsg384iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:b4:d2:6c:c2:2f:56:82:fe:34:6d:f7:6a:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Sep 29 07:03:25 2026 GMT
Not After : Sep 30 07:03:25 2026 GMT
Subject: CN=91a3b99d786b9d8f9ed285b41e1aaa97bf9f1648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:32:3b:91:43:a2:7c:2f:7a:4d:a5:fb:62:
ef:9f:a1:39:e4:75:eb:59:7f:a5:0a:d0:bb:2e:d5:
10:28:c9:fb:b7:3c:99:95:69:c4:ab:18:89:06:8d:
ae:ef:c5:47:68:b8:49:2f:f4:70:5e:00:db:fa:75:
ef:3a:23:3a:50:dc:2c:08:09:1c:f0:c7:92:9b:a9:
bd:93:c8:cb:18:fc:56:89:99:bf:dd:50:12:50:3c:
36:d4:54:58:3c:bf:3b:e1:20:d7:06:aa:b2:f1:2a:
28:61:cd:ca:fc:42:0b:cd:9b:7e:40:b6:87:49:6f:
60:38:92:c0:70:09:3f:be:7b:e6:e8:c3:8d:38:90:
80:8f:76:b2:88:26:7b:af:49:e5:2a:c6:f2:83:63:
30:e1:17:e9:53:c9:78:a0:64:19:34:dc:91:d0:74:
43:7e:59:06:69:ba:e9:e7:55:29:e8:ca:25:02:18:
f9:f8:77:a4:cb:a7:ac:40:33:76:94:9e:41:a8:3a:
18:57:2c:b3:db:e0:1e:7b:9e:e4:28:c5:50:b7:19:
29:9c:0b:dc:01:f1:4f:71:f1:9c:3c:98:f6:1b:09:
1e:f6:75:8b:0d:42:9d:11:a8:17:d3:dd:3f:a9:04:
92:70:ba:2f:ac:06:5b:72:73:8d:f1:c3:2f:de:a1:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:B9:9D:78:6B:9D:8F:9E:D2:85:B4:1E:1A:AA:97:BF:9F:16:48
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:66:22:1b:87:50:e6:17:37:cc:18:b8:70:7c:c7:c8:98:d6:
31:e4:58:62:33:ba:c0:46:c6:6f:48:37:54:be:c0:82:e1:0c:
26:97:2d:2b:6b:97:f7:e9:ea:f3:9d:8a:46:13:b9:90:ca:83:
37:dd:79:cf:06:d4:81:60:3d:da:0f:f2:76:9e:aa:e1:e1:cd:
a4:a2:ca:5e:be:e9:70:00:69:6d:31:87:5b:f9:9f:09:dc:19:
f8:14:cc:04:b0:90:9b:69:31:41:df:a5:b9:d8:f1:15:2e:6c:
2d:12:f5:eb:e3:65:65:6a:e8:72:3e:f6:83:cd:16:5c:d6:75:
c8:bc:fc:36:4b:cb:2f:e8:81:80:4c:f4:2a:cf:2d:e6:a4:3a:
e8:e4:00:42:38:9f:e3:b7:bd:5e:07:5a:89:57:8d:2e:12:1d:
13:27:e0:63:a8:ee:b3:1b:b7:6e:d9:c6:cc:db:a6:45:99:1d:
67:89:73:7a:23:5f:73:b7:b8:48:38:e3:07:31:9d:8e:cd:d4:
ec:29:93:ad:c8:14:7c:58:18:03:d5:b8:6f:7f:5c:0e:ed:d1:
1f:74:a6:c1:93:68:fe:0b:4d:23:fd:e4:b3:2c:c0:3c:16:41:
f6:1e:3d:a1:99:58:18:4b:9d:05:fd:0c:57:05:d9:38:01:f5:
df:ff:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:55:41 2026 by rpki-client