Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: zRhcYqX0GZluRjfOPMGtbroO3UP0GyWG1qmwBVjyInk=
Subject key identifier: 0C:3D:EA:DF:DC:D3:34:DC:D2:23:57:50:8E:02:0E:09:B4:4B:79:F0
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019F92EDF92398608E5EAC7C8EAE418D8E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 056E
Signing time: Fri 24 Jul 2026 07:01:36 +0000
Manifest this update: Fri 24 Jul 2026 07:01:36 +0000
Manifest next update: Sat 25 Jul 2026 07:01:36 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: K0eqa50QxVz3uYsBLAKuKAyjHc8AY02pZ1mTihkoS9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:f9:23:98:60:8e:5e:ac:7c:8e:ae:41:8d:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Jul 24 07:01:36 2026 GMT
Not After : Jul 25 07:01:36 2026 GMT
Subject: CN=0c3deadfdcd334dcd22357508e020e09b44b79f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:0d:ab:e7:14:d8:a2:c1:17:69:63:52:67:
b3:9b:5a:07:a3:57:c2:50:2e:ae:8b:44:6c:8e:b5:
85:24:15:c0:43:40:eb:ad:dc:12:1e:a0:57:9b:c8:
2c:96:e8:6f:8a:ae:25:42:09:db:dd:15:cd:8b:2a:
04:63:bf:98:5f:f8:dd:28:33:dd:87:ab:5d:56:0f:
ab:43:36:f8:1f:47:e4:6b:d1:29:de:a0:21:18:60:
0e:68:26:fb:0b:8a:be:57:e1:88:be:49:cb:ef:ad:
40:36:62:c5:98:e5:51:f4:17:b1:20:38:af:92:af:
00:3d:bf:3e:6d:10:6f:d0:88:fd:54:28:15:f7:11:
d4:3a:13:9d:66:78:3c:be:ad:14:ea:05:cc:92:26:
18:11:0b:f1:d1:11:52:29:59:a8:07:31:75:66:6a:
39:61:2b:f0:b8:8f:11:d7:35:49:1b:64:4d:3d:da:
b5:2e:90:6e:8b:c6:b9:79:ca:0a:93:f1:dc:e0:3b:
88:55:d1:51:b1:0c:fa:0e:63:76:6d:d4:0c:dc:85:
d1:39:79:f9:a2:19:89:98:d6:dd:76:8b:96:cf:4c:
0c:20:9b:de:96:0c:10:c4:36:6a:6c:96:ce:2e:41:
29:b4:be:b3:a9:6a:e1:dc:4e:bf:13:92:85:00:dc:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:EA:DF:DC:D3:34:DC:D2:23:57:50:8E:02:0E:09:B4:4B:79:F0
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:09:c1:7e:b1:bc:f6:d4:7a:0e:81:29:eb:76:3c:de:61:de:
cb:2a:aa:03:bd:ad:89:ee:ef:4a:2f:a9:c4:b4:e5:d4:cf:cd:
d1:9f:a1:ac:68:88:50:0d:76:e2:d3:e6:08:07:45:f9:4d:f2:
13:7d:b6:b7:b3:60:8b:8c:95:a0:2e:5f:14:9b:d6:30:84:1e:
a6:26:f3:af:86:38:07:49:09:bd:a6:18:05:6a:15:5e:93:03:
53:bc:c3:a8:6e:b8:8a:2d:75:01:a5:cc:6e:a0:f7:8e:3f:25:
89:56:84:e8:4d:e6:86:8e:bc:a9:bd:27:77:ab:b7:7c:a1:60:
58:4f:15:d5:38:9c:92:4a:11:a8:9d:a8:ab:7e:2d:e8:29:a0:
2f:77:2d:75:36:aa:29:86:a1:bb:7a:59:a2:66:54:e6:2a:bc:
5c:1f:cc:a9:e1:60:90:a4:b2:84:6a:0e:fe:46:6a:76:ef:28:
38:be:1c:c0:15:18:06:2d:29:c7:ea:b6:69:de:00:8c:67:77:
bb:49:06:ac:33:3b:32:3c:1a:e7:38:f6:a9:60:40:80:ab:fd:
72:c1:e9:89:3d:94:d1:7d:05:b5:84:f8:50:c3:03:55:13:db:
26:0c:a2:00:25:f5:5d:0b:c4:93:5f:c2:e6:44:52:47:33:96:
89:8a:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:55 2026 by rpki-client