Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: bIUpP1XSf5G0WeyLfQnGSlfaVz2aTW0cQsx2ZxUYx+E=
Subject key identifier: 15:3E:9C:B6:81:4E:E9:80:7B:70:76:6C:9D:32:69:27:90:DC:A5:2D
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019CACB56BB9C92988BA805EF4C8771B5D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0F2D
Signing time: Mon 02 Mar 2026 04:01:36 +0000
Manifest this update: Mon 02 Mar 2026 04:01:36 +0000
Manifest next update: Tue 03 Mar 2026 04:01:36 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: Cd2qBQRBPQ3381RljG7wnChmHEWyb8aL5yMaHdW9GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:6b:b9:c9:29:88:ba:80:5e:f4:c8:77:1b:5d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Mar 2 04:01:36 2026 GMT
Not After : Mar 3 04:01:36 2026 GMT
Subject: CN=153e9cb6814ee9807b70766c9d32692790dca52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:a6:65:8d:c0:fe:de:0e:54:1e:6c:67:53:
7c:7d:d3:34:84:ef:d6:91:e6:e0:05:aa:12:db:d7:
de:29:70:0e:14:24:83:05:27:fb:b6:f7:1e:81:90:
89:dd:23:0e:c7:33:ed:41:17:1b:15:b4:54:7c:e8:
32:97:c1:19:1c:89:a9:c7:7b:af:a7:b3:d6:90:8a:
c8:99:e5:32:12:a8:c2:50:b7:47:c5:78:4b:ae:0a:
66:86:42:b7:1c:59:ea:6d:83:a9:31:f0:eb:c4:7f:
70:a9:70:4e:da:60:a1:04:b1:d3:36:af:8f:4e:3b:
54:33:fa:35:81:75:ef:b5:b7:ab:9b:3e:71:42:35:
60:f9:05:8e:7d:7a:01:03:bb:d3:d2:78:6f:d9:eb:
10:9d:cf:e4:9f:33:6f:93:e2:41:93:35:ce:9a:e7:
ae:77:96:a4:d3:6e:60:3b:dc:e3:41:e3:e8:96:4c:
67:fc:19:8b:02:6c:1c:63:74:0d:0f:5d:2e:99:8a:
c7:5f:e6:48:46:f7:aa:ce:70:99:26:77:29:e5:29:
2a:5e:64:de:83:33:6c:a2:6a:8b:ed:d2:fd:19:b8:
60:24:11:ea:31:fc:32:22:e5:d9:21:cd:8c:00:20:
c6:a6:e0:2f:36:68:07:08:cf:38:63:69:99:f5:cf:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3E:9C:B6:81:4E:E9:80:7B:70:76:6C:9D:32:69:27:90:DC:A5:2D
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2c:86:4c:06:4a:5d:78:76:e2:8f:97:0e:26:81:2d:b2:eb:
2d:c1:b0:d3:4b:bf:d9:d1:50:a8:42:a1:bf:7f:a4:20:1e:a1:
e4:d2:37:26:de:e7:78:a6:98:52:55:eb:c9:61:65:b9:31:90:
2b:9e:f0:30:63:44:d6:51:f8:26:bf:64:f1:ce:af:b5:3b:c0:
de:f3:ab:0f:02:41:ac:70:d7:fd:13:43:80:2f:a2:c5:79:eb:
c2:09:09:28:5a:d6:13:a9:aa:0d:ad:10:18:0e:8d:23:d6:54:
c7:1c:0d:3a:ab:fe:e6:0e:21:60:15:ed:4b:cf:7c:4f:7e:d9:
42:0b:e6:41:28:c1:95:0c:7e:ea:2c:50:79:a1:1d:b3:c7:a5:
60:6c:52:14:77:1d:d9:ce:c3:a7:17:99:e6:90:ed:6d:ae:04:
70:bc:db:e1:4f:62:62:01:4c:37:0b:0a:1e:58:f1:45:98:3c:
7e:28:4f:84:92:23:d7:b4:39:63:39:9e:c9:20:de:e5:b2:6e:
24:6d:f3:3d:2a:f9:da:38:31:38:8c:cf:74:94:26:61:2b:ec:
96:2d:ba:2a:8d:9f:11:a2:92:36:2c:38:3e:91:0f:50:09:ef:
22:6e:c8:f1:12:55:b6:21:ae:a9:ff:88:03:65:4e:ee:1f:3a:
b1:c1:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:39 2026 by rpki-client