
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: tU4M6+fFXNq7qR+q4Bqgt4pKapvf9l9SunV/4o2jAMA=
Subject key identifier: 12:77:DA:B2:00:C8:51:2D:07:CC:3B:97:FF:DE:9A:88:62:4B:CF:16
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 01A0D94D643F437EB7A33A9723E5B436702E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 0617
Signing time: Fri 25 Sep 2026 16:02:02 +0000
Manifest this update: Fri 25 Sep 2026 16:02:02 +0000
Manifest next update: Sat 26 Sep 2026 16:02:02 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: n1JY+xWAgtlOn92UFZ/K1qlTZR55ue8CZzn05N04tUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:64:3f:43:7e:b7:a3:3a:97:23:e5:b4:36:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Sep 25 16:02:02 2026 GMT
Not After : Sep 26 16:02:02 2026 GMT
Subject: CN=1277dab200c8512d07cc3b97ffde9a88624bcf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:37:44:e6:05:e6:90:de:c8:c1:51:b6:2b:
39:15:d5:62:a6:05:f1:f3:29:10:eb:cd:33:be:10:
f3:b6:af:4b:10:ab:9c:da:98:7e:28:20:68:f3:7f:
7a:85:01:7b:ed:7c:2b:c9:12:8a:c8:58:5c:d9:f9:
3f:63:23:84:8b:ea:e8:86:c8:f3:ae:21:a4:60:61:
ca:16:8a:af:bb:e9:72:d5:2a:4f:6e:92:48:bd:7a:
d0:57:1b:72:2c:8b:b4:8e:82:f3:fc:b1:9c:03:1d:
37:65:76:a0:5f:28:c1:7e:4e:24:21:a8:cd:61:af:
b5:67:3a:16:fd:df:97:95:69:d2:1f:66:55:00:26:
f6:c1:1a:72:ce:ae:a3:d3:c6:cf:05:5d:b2:82:b8:
d1:31:ce:7e:0f:bc:c4:f3:1c:09:43:d7:fa:99:3b:
10:51:0d:c0:17:2e:28:8a:cf:e2:e1:2e:89:0b:37:
a5:6f:5e:5f:cc:40:8d:cf:6e:06:f4:27:d2:99:38:
99:38:e4:07:3b:2c:3f:01:ee:00:39:68:8d:19:47:
12:30:01:40:dc:4c:13:7a:f6:02:fb:ae:6f:7d:b9:
08:89:22:28:a7:f0:79:b6:d5:43:e9:39:95:af:30:
1c:e3:be:f4:e1:1f:50:7b:c4:e1:0a:c2:49:ee:e9:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:DA:B2:00:C8:51:2D:07:CC:3B:97:FF:DE:9A:88:62:4B:CF:16
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:5d:e7:d6:68:66:22:6a:88:c4:5b:68:65:c4:b4:22:26:
e0:ca:e8:f9:60:68:0f:7b:94:f0:fa:5e:c3:3e:ae:a7:19:d4:
c7:cb:f9:82:05:54:d0:71:58:d3:0a:c6:a3:d7:3b:b1:ab:37:
22:78:55:a2:95:96:78:1c:46:3b:f9:50:55:35:e0:30:33:ed:
17:59:48:03:92:68:e4:99:aa:d4:f4:2d:cf:ed:88:e7:1e:c6:
37:b2:02:b4:3c:a1:e8:43:bc:2b:86:26:64:c8:3f:b6:e1:01:
56:af:39:3a:9e:d2:bd:e4:c5:7e:7c:15:b6:47:b4:70:3a:c9:
40:43:75:bb:e7:b0:03:a1:3d:28:f8:d7:e8:3c:99:65:b6:84:
88:9e:1b:6e:98:ed:7f:be:1b:b7:9f:67:f7:8c:2c:a6:b6:73:
c5:5e:06:b8:27:b3:6c:ad:ae:a5:ef:32:b7:2a:f8:68:d7:68:
23:58:be:fc:b3:46:5e:7e:c5:e4:95:1c:fa:c7:33:16:01:87:
5e:e6:70:e9:30:0a:69:35:df:76:1d:e0:2f:b8:90:ce:bb:68:
a9:43:9d:cb:e3:10:9c:65:e7:8a:ee:73:6d:f4:34:ad:f0:c9:
e8:94:0b:43:23:b9:22:6b:cb:07:09:cd:cf:08:98:c7:bb:6b:
42:07:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:22 2026 by rpki-client