Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: WxF9be4TBA4m/nKy2Xm2HhfpV0ZICb3QkqO/fL4t8C8=
Subject key identifier: 74:A2:C5:58:56:47:66:FC:A3:85:FB:7E:08:62:13:15:5E:E5:C7:4B
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 019D322C5E1209A3E2BDB37938ABB54972FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 16B4
Signing time: Sat 28 Mar 2026 02:01:01 +0000
Manifest this update: Sat 28 Mar 2026 02:01:01 +0000
Manifest next update: Sun 29 Mar 2026 02:01:01 +0000
Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: hO3bRMsBJvOlVgmte8L3fp5SBIsZCkrmfCZcSzkFr/8=)
2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:5e:12:09:a3:e2:bd:b3:79:38:ab:b5:49:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Mar 28 02:01:01 2026 GMT
Not After : Mar 29 02:01:01 2026 GMT
Subject: CN=74a2c558564766fca385fb7e086213155ee5c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:ea:1e:5e:0a:6f:bb:00:62:08:fd:75:01:
84:0e:1a:c3:94:df:25:03:3a:94:79:0e:64:dd:ba:
12:d9:26:cf:2c:15:7e:66:ed:3b:dc:8f:28:8f:68:
72:ff:47:a9:78:51:d6:c0:87:9f:cb:31:d7:55:8b:
05:ed:65:b5:a6:63:5e:58:19:1b:9a:32:3f:50:0e:
8a:f9:20:09:dd:07:9d:07:e8:76:e5:3a:37:75:29:
72:24:55:10:75:28:c1:f9:13:80:9f:af:0d:43:26:
9d:86:78:46:88:05:6f:be:2a:cd:fd:52:69:f6:aa:
29:f2:e4:c6:7a:34:7d:fd:55:92:35:f5:37:6f:91:
ab:7b:f4:d5:91:94:b7:ca:f8:ad:b5:a4:fa:d0:36:
87:44:74:ce:3c:61:3c:33:4f:fa:5d:fe:cb:64:c9:
98:4c:ef:aa:01:da:02:29:51:2c:a2:f6:06:a3:d5:
9f:64:06:bc:25:45:e5:dc:d4:48:db:f1:9b:47:29:
13:04:01:a6:a4:cd:ad:20:cd:51:4f:2a:c2:3f:8c:
f1:71:f7:41:25:3f:b0:c2:2f:e7:2f:0e:e4:f3:f6:
5d:02:cb:70:6e:c0:74:83:b0:b8:4f:53:36:de:ec:
8e:01:dd:02:4f:60:69:c0:a9:06:1f:3e:2e:6e:3c:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:C5:58:56:47:66:FC:A3:85:FB:7E:08:62:13:15:5E:E5:C7:4B
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:c0:d9:e4:05:b6:2b:38:6e:ef:8d:a9:4f:a4:80:9d:bd:
23:c6:a4:9f:d2:28:d4:9c:09:51:d7:c5:64:93:c1:cc:2c:a0:
8e:db:d9:a1:e4:1b:ca:77:ea:e0:a4:71:ae:0f:c2:a0:8c:e6:
c0:b5:0e:3b:3a:0d:e3:d5:3a:b6:e6:14:d9:36:ca:87:80:ce:
d8:f6:56:1a:af:79:a1:40:07:fc:92:d2:54:e2:1f:ed:a4:af:
46:1c:2c:17:61:65:6a:8f:37:9d:09:e7:63:6d:e4:c8:2a:f0:
58:26:ef:b5:b0:6e:f8:fc:10:af:ba:f5:30:00:6f:32:cd:57:
cb:e8:5d:99:b7:07:24:d4:39:0f:51:e1:91:a0:13:be:c6:ec:
5f:8f:c6:f4:81:58:51:e5:6f:ce:82:02:35:c4:a3:a9:0c:26:
c9:dd:37:24:c9:54:86:bf:0b:c1:76:cb:bf:d8:4d:41:e7:86:
ad:01:0d:ba:d2:68:6f:16:d8:cc:2a:7f:59:28:b0:db:a0:bf:
e3:d9:bb:dc:58:4f:09:a1:ef:6b:24:90:45:6c:5c:49:d7:b5:
b0:dc:6a:6b:cb:07:be:47:19:05:e3:8a:db:a6:23:9b:ab:d4:
8e:aa:5d:3a:5c:a9:39:7d:83:ce:e7:99:dc:3c:14:c4:52:3b:
65:52:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:20 2026 by rpki-client