Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: iYb6FJ6orlNhpGIFgltIZriVyfLO7WLKSX6LdKdP7Es=
Subject key identifier: 32:53:B3:A0:2E:AD:FF:F4:D2:9D:DB:E8:9F:52:F6:C8:1A:3F:07:C7
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019D98508FC035F184A973E4FBA2B0956181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0FA7
Signing time: Thu 16 Apr 2026 22:01:49 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Fri 17 Apr 2026 22:01:49 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: ++PpFl76itQhUlO+Mtg6hEzbUHyoA7A6m3wRivuDmZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:8f:c0:35:f1:84:a9:73:e4:fb:a2:b0:95:61:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 17 22:01:49 2026 GMT
Subject: CN=3253b3a02eadfff4d29ddbe89f52f6c81a3f07c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b9:2c:90:be:2f:6b:42:45:52:dd:26:2e:1c:
9d:be:a6:f5:50:a8:60:de:11:ca:38:11:5c:9c:97:
d4:a1:12:23:45:0a:32:54:70:70:f0:15:99:f2:61:
ee:e9:20:10:d6:f0:89:57:83:c3:53:e2:f5:ce:ec:
8c:44:fd:13:f6:40:ea:28:5a:8b:f9:70:60:92:73:
0e:f8:75:79:75:82:19:7f:0d:0a:6c:0d:1f:d8:6f:
98:42:86:0f:d1:25:ba:a4:8a:51:34:b3:35:21:65:
2d:4c:0e:e1:13:85:dd:19:67:2d:4f:a7:2f:f1:5a:
57:b0:42:a2:a4:1c:a1:74:10:7b:51:0d:02:27:30:
67:bb:f3:49:c3:00:88:ca:7a:44:8f:b9:cc:59:de:
a0:3e:3c:90:51:e5:d5:71:18:f1:47:72:20:fe:4b:
13:d2:93:07:89:8d:28:f0:ea:a8:b8:37:7c:33:a8:
a2:9f:fd:fe:4e:c7:d1:4c:14:28:5e:6e:31:eb:3c:
ba:84:a7:7f:5a:93:71:6b:3e:57:85:d4:fd:eb:c3:
2f:fb:d7:d4:fb:c3:77:cf:5c:d3:ad:20:f5:81:29:
74:a5:4f:d6:ab:f9:e4:65:5d:e5:8a:65:2f:d7:44:
32:a8:6f:93:53:67:0a:5d:27:79:80:d1:5f:e8:e9:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:B3:A0:2E:AD:FF:F4:D2:9D:DB:E8:9F:52:F6:C8:1A:3F:07:C7
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:76:28:3e:53:29:fb:92:40:8f:09:39:49:75:c1:ca:08:
8a:dd:d6:57:5f:d5:c8:71:3a:ac:2c:8f:66:61:96:2e:93:6b:
dc:f3:29:21:36:dc:ef:46:57:d1:8f:57:f9:a6:31:13:1d:a5:
c3:09:48:eb:bc:f1:4d:fd:a4:56:8d:05:b5:47:0c:a1:68:dd:
b2:cf:62:72:2e:9a:4c:dd:81:81:33:eb:95:52:df:fc:98:7a:
df:7a:bf:ae:d7:e9:bd:d6:ec:03:a3:6d:9a:ae:ed:fd:df:f9:
fd:ff:5e:8a:8d:0e:36:a8:aa:74:47:5e:8a:dd:aa:86:f7:d9:
df:51:ec:42:09:3d:2f:c8:9a:f8:8a:a5:cd:c1:63:39:11:a8:
59:25:99:70:3a:e2:c7:a8:4c:6b:00:1e:10:d8:ec:05:64:1b:
39:03:87:5e:68:7f:0c:48:25:81:b9:60:df:5d:eb:98:87:38:
13:7f:e9:2e:a3:d6:17:3a:8b:fb:6b:1f:a7:e9:a4:87:61:8a:
1f:32:cf:44:09:1a:8f:a8:50:bc:4e:d0:8a:71:db:9a:c1:8e:
10:79:29:b4:10:a9:8f:45:a9:df:3d:ed:ec:9b:32:e6:9e:d3:
ab:e5:78:5a:29:7a:9e:a3:06:b0:aa:b1:6e:f3:c9:f2:0c:54:
0b:84:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:14:30 2026 by rpki-client