Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: o8bZL/Ud0NZl7Mu46cwKLKxMtLeb2baz6SVakIR+VfE=
Subject key identifier: 19:A5:DD:31:A7:89:AF:0B:E4:67:41:9B:CB:A1:66:CE:B3:82:EE:D6
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019E1FECF72DDA190614B6201BC2CCF232CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 05FA
Signing time: Wed 13 May 2026 06:01:23 +0000
Manifest this update: Wed 13 May 2026 06:01:23 +0000
Manifest next update: Thu 14 May 2026 06:01:23 +0000
Files and hashes: 1: 0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa (hash: ihfrAi7s7Y2K9UhMNauXDC1EytsAoBOYF3SMIaVb5Zc=)
2: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: Rx/A8Gmf/e/15XsffmermWsBAptz49IBl6p6pjKJrHw=)
3: sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa (hash: 3O67CS2riHupZNulhyVmJc5RtCecgenRYd/XninEIbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:f7:2d:da:19:06:14:b6:20:1b:c2:cc:f2:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: May 13 06:01:23 2026 GMT
Not After : May 14 06:01:23 2026 GMT
Subject: CN=19a5dd31a789af0be467419bcba166ceb382eed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:bc:f2:d1:d5:9a:2e:f5:b7:8e:2d:b3:52:
12:0e:87:41:71:af:99:c2:21:29:c4:bd:d5:b3:85:
9f:d1:6a:f2:0a:27:a2:7c:25:87:c0:bd:0b:03:0e:
08:c0:9a:65:94:24:2a:9a:7f:a6:f1:e2:cb:04:f3:
62:23:1d:ca:da:d2:0f:54:8d:69:f4:be:cc:0b:b8:
f9:b9:23:79:78:c9:f2:1b:a7:6c:b4:f2:29:24:01:
85:f1:60:fc:e5:00:60:08:03:12:2f:f4:74:dc:9c:
37:47:75:02:f3:61:83:c2:3d:b4:b9:f7:41:d9:78:
5f:d4:8a:1f:d2:31:7d:36:7b:e4:a3:23:85:aa:ed:
90:e7:72:40:33:d9:82:77:6d:f8:c4:96:02:d3:80:
0e:cc:f3:79:91:93:98:dd:ca:0b:4f:6f:66:17:4b:
7c:3b:60:42:ad:8b:a7:d6:35:6d:fa:83:85:27:a5:
3b:13:57:59:ba:2b:20:0b:9d:bf:88:2f:3f:1d:84:
b8:ef:05:62:8f:c1:ee:7e:ba:17:b7:5b:64:ae:b8:
b1:bc:5e:11:e1:26:78:b3:33:99:cb:46:0d:d9:aa:
68:5c:cb:95:e9:81:92:8e:8b:88:1c:4d:44:82:ec:
73:64:50:f0:c4:f5:26:4f:e3:fc:61:e5:5b:bc:0d:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:DD:31:A7:89:AF:0B:E4:67:41:9B:CB:A1:66:CE:B3:82:EE:D6
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:b1:7d:98:2c:49:36:e8:a6:53:46:1d:7f:fb:87:0b:74:
ba:ca:98:8f:62:fc:42:e3:d2:73:9d:6c:e5:50:ff:74:bd:95:
be:f4:5e:1c:fa:1c:09:1f:3f:c0:ca:c0:d4:1e:db:c0:d8:57:
dd:34:5c:a5:e9:c7:61:6f:f6:a4:7c:0e:4e:78:32:b9:bf:16:
46:13:d6:8b:5e:a1:b9:2b:0b:f4:d9:c7:4e:d1:b9:56:b0:8f:
40:de:71:52:a3:f4:3d:07:02:8b:92:e1:59:57:a3:17:a8:44:
4d:d7:b7:ae:05:5a:97:bb:76:7f:93:96:1b:53:23:26:bb:56:
99:62:fd:dc:80:2e:1a:a9:8a:aa:dc:a1:fd:53:93:57:fc:8a:
1f:05:06:36:34:9c:0d:8d:74:14:76:59:fc:b3:cb:5d:84:0b:
d6:bf:ca:37:dc:43:4e:bf:07:56:ec:0f:07:16:b0:d1:0f:42:
3d:b3:86:99:8d:10:a4:3b:10:78:d8:7f:8c:84:f2:f5:37:b2:
fb:c1:41:60:7a:9e:5e:31:30:77:a7:4b:bb:3d:fd:ed:18:ed:
5e:c4:4a:7c:3c:bb:8c:cd:89:14:46:c6:8c:ff:53:30:89:ce:
8c:6f:6b:20:29:50:0d:24:31:f8:a8:6e:0a:10:c1:29:a2:81:
62:1b:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:14 2026 by rpki-client