Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: 0OZ5z1uLdDwfSXEY9Y9a3yHAU7YjgIOz8IDbFE6/VYI=
Subject key identifier: 4F:EF:75:F3:91:91:6B:3B:92:16:3B:8A:F5:2C:45:4D:D5:D9:FE:74
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019FAB639AAEFE2BAA340EDAE7AF5C769F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 10BA
Signing time: Wed 29 Jul 2026 01:00:59 +0000
Manifest this update: Wed 29 Jul 2026 01:00:59 +0000
Manifest next update: Thu 30 Jul 2026 01:00:59 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: BU3YAHiSOMZwxCvSA1opGvwgoyniWuCUnMe1Z//y98c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:9a:ae:fe:2b:aa:34:0e:da:e7:af:5c:76:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Jul 29 01:00:59 2026 GMT
Not After : Jul 30 01:00:59 2026 GMT
Subject: CN=4fef75f391916b3b92163b8af52c454dd5d9fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:03:ac:81:32:f8:dd:f1:cf:93:50:9f:88:
3a:75:f6:e1:aa:e2:74:29:76:8b:c7:67:29:b5:26:
6d:83:c6:3e:4e:b6:4a:30:40:63:03:07:7d:3c:fa:
77:06:de:cb:05:4e:17:e8:2b:e9:0c:90:c9:eb:a5:
e6:e8:ca:0b:d9:50:c6:00:e9:e5:4b:d4:a6:6f:d3:
07:7b:ec:0d:4b:81:4b:0c:95:cc:ea:81:6a:5b:a3:
84:7e:2b:5a:3e:d9:7d:fe:ab:ab:55:a4:12:13:12:
0b:73:85:f5:53:a6:a1:7a:25:8c:d7:d1:0e:e3:1a:
fe:eb:a9:a1:28:08:fa:6f:ee:b0:80:31:42:b4:8d:
fc:ca:ec:b8:28:02:f1:65:32:7d:27:ba:78:d7:af:
60:11:8a:84:03:bf:7c:a3:d1:a7:bb:b7:b6:b6:08:
7a:1e:cb:3b:23:19:d3:77:15:7d:6e:38:44:40:7f:
d6:67:0c:05:ca:7d:46:d8:7d:b2:d7:78:c4:23:4b:
ae:74:e9:51:b4:2e:dd:4e:d8:6c:55:0c:1b:13:e5:
46:a0:e3:86:d1:fc:1f:25:05:ac:8c:6b:bc:04:37:
1d:75:20:bc:6e:af:8f:d9:4d:06:e9:2d:62:29:d9:
76:b9:89:be:b7:d0:76:87:a9:06:1f:6b:4d:e6:e2:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:75:F3:91:91:6B:3B:92:16:3B:8A:F5:2C:45:4D:D5:D9:FE:74
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:47:90:95:e6:60:0e:71:a3:5d:13:12:54:d3:10:de:2b:
cc:7f:6c:7b:52:b2:bd:0d:78:b1:70:68:6c:00:bc:90:4e:10:
24:f0:83:09:ce:f3:53:c4:64:cc:59:4a:30:62:ea:1f:86:04:
0b:86:27:6a:78:17:8e:5c:3b:5e:da:b3:23:65:3d:3b:fa:29:
cd:fc:26:d0:90:1d:a4:56:00:08:66:01:11:e4:96:b4:5a:e5:
9b:1c:71:cc:23:8a:8d:94:52:6c:58:62:70:dc:7f:1f:2d:72:
20:4e:02:e4:c2:13:bb:08:86:0f:f3:82:2f:2d:a9:86:38:d9:
f9:2b:84:ab:4f:bd:e2:77:03:bd:9f:eb:e5:a8:5e:fd:b5:0e:
ef:a2:9f:e3:b4:bc:a4:39:c6:f4:80:fc:1c:53:24:99:79:66:
a6:8d:53:86:20:14:18:3c:2a:55:98:47:d6:a1:bb:4c:08:35:
56:aa:09:78:f0:54:3c:c2:af:fe:72:52:2b:d4:cf:f6:03:ad:
d9:79:b6:45:5a:ce:9c:b3:ec:88:17:ed:f9:b8:ac:2a:9c:14:
0f:e3:4a:bc:6f:73:cc:b3:15:94:3a:d3:91:96:44:3f:ef:84:
3f:f1:68:57:c9:79:1e:15:7f:38:23:88:60:8a:de:d7:c5:4d:
17:a5:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:46 2026 by rpki-client