Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: AfqsUokUBJmDXWc7VNi+aEhaUQYMNsSkSPGR5FKIpOI=
Subject key identifier: F3:36:68:EB:98:B4:47:67:2F:BA:F5:82:24:E7:D4:4B:F1:01:A6:8A
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 01A0C746502BF3738FF6A2899AA26E97F03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 114D
Signing time: Tue 22 Sep 2026 04:01:08 +0000
Manifest this update: Tue 22 Sep 2026 04:01:08 +0000
Manifest next update: Wed 23 Sep 2026 04:01:08 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: iiTXasRltDM/CO7uVksHuL5tLR5QAaTUMHItZO2StDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:50:2b:f3:73:8f:f6:a2:89:9a:a2:6e:97:f0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Sep 22 04:01:08 2026 GMT
Not After : Sep 23 04:01:08 2026 GMT
Subject: CN=f33668eb98b447672fbaf58224e7d44bf101a68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:41:43:92:28:ff:e9:1d:01:6f:aa:fc:e6:
e1:dc:c5:e4:35:c9:ca:d4:e7:af:ac:db:ca:d0:59:
f2:f3:40:9a:ba:45:bd:8a:c6:a6:04:4f:74:52:89:
2a:c4:43:b6:a2:d2:44:d0:0f:df:59:75:63:a9:04:
b0:b5:e5:2a:6d:49:94:3d:4e:94:36:5d:eb:d8:df:
43:bd:74:08:7b:1a:1a:25:1e:cc:52:a0:16:66:6a:
49:b5:20:0c:b8:a1:6d:fb:18:b1:99:d5:f8:aa:19:
a9:78:52:1a:7f:ea:34:67:dd:76:b9:24:71:46:c5:
c2:5f:82:98:f0:d6:85:ef:1c:cf:a5:a4:5f:6e:03:
a3:fa:c2:1c:53:ba:b0:bf:2a:0b:91:9b:05:96:67:
5a:5b:dc:e0:6c:45:05:19:db:4b:99:5a:74:fb:99:
70:1b:98:06:a2:c0:1c:66:13:4d:60:ec:26:64:b6:
a8:6b:4e:23:96:14:78:93:b0:e2:94:ed:24:27:1e:
b5:ea:48:74:06:3d:4e:9e:9f:32:cd:66:b8:53:17:
58:54:23:59:ab:56:15:33:e4:b1:3d:bf:1a:cb:46:
2f:08:70:03:b7:81:89:75:87:b7:e5:35:d7:47:df:
07:ae:42:6f:d6:ab:8e:69:61:4c:e3:b5:4a:3a:b2:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:68:EB:98:B4:47:67:2F:BA:F5:82:24:E7:D4:4B:F1:01:A6:8A
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:a7:d5:06:2d:b5:3b:a4:9f:0f:92:a6:8c:f4:c7:b7:08:
7c:f0:a2:ce:80:20:a6:01:1d:2d:5b:64:26:3f:b1:f8:4e:9d:
35:e8:e4:04:e4:9d:97:a1:b4:df:7d:36:11:de:b3:94:9c:d5:
04:10:a2:a0:66:3a:2d:29:11:89:10:a6:ed:6e:ab:9a:ed:f5:
72:85:46:39:27:90:88:e3:0a:8f:0c:d8:82:6d:3d:c5:1c:72:
37:c0:ca:c1:74:9b:f1:2b:7c:91:0d:81:f6:b2:f9:c3:76:c1:
9a:9e:bf:a7:17:d6:db:93:09:dc:97:53:aa:19:13:20:7c:29:
6e:a4:5a:80:07:b4:b3:6d:23:65:9e:bd:6e:bb:79:13:1f:86:
6f:f9:2f:28:73:85:e0:11:01:e4:0a:89:bc:46:13:1a:ce:7c:
4b:cf:12:1a:c0:62:cd:11:8c:27:db:d5:3c:b1:39:bf:a8:0c:
c7:bd:2b:89:54:c9:14:b8:c1:d0:7c:a5:81:5b:69:54:76:d9:
b9:f1:3a:ad:20:b7:05:ec:bf:f9:e8:b4:6e:8a:1c:ad:42:e7:
c6:f4:22:b3:48:2c:fa:ef:ae:3e:4a:b2:a4:e0:f4:87:c0:ec:
20:ca:d6:37:91:43:89:c5:b9:28:dd:c5:33:1b:46:bb:81:a1:
75:ac:ea:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRlAr83OP9qKJmqJul/A/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj
YmY0YmQwHhcNMjYwOTIyMDQwMTA4WhcNMjYwOTIzMDQwMTA4WjAzMTEwLwYDVQQD
EyhmMzM2NjhlYjk4YjQ0NzY3MmZiYWY1ODIyNGU3ZDQ0YmYxMDFhNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcxBQ5Io/+kdAW+q/Obh3MXkNcnK
1OevrNvK0Fny80CaukW9isamBE90UokqxEO2otJE0A/fWXVjqQSwteUqbUmUPU6U
Nl3r2N9DvXQIexoaJR7MUqAWZmpJtSAMuKFt+xixmdX4qhmpeFIaf+o0Z912uSRx
RsXCX4KY8NaF7xzPpaRfbgOj+sIcU7qwvyoLkZsFlmdaW9zgbEUFGdtLmVp0+5lw
G5gGosAcZhNNYOwmZLaoa04jlhR4k7DilO0kJx616kh0Bj1Onp8yzWa4UxdYVCNZ
q1YVM+SxPb8ay0YvCHADt4GJdYe35TXXR98HrkJv1quOaWFM47VKOrLm3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM2aOuYtEdnL7r1giTn1EvxAaaKMB8GA1UdIwQY
MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt
NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi
LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUOn1QYt
tTuknw+Spoz0x7cIfPCizoAgpgEdLVtkJj+x+E6dNejkBOSdl6G03302Ed6zlJzV
BBCioGY6LSkRiRCm7W6rmu31coVGOSeQiOMKjwzYgm09xRxyN8DKwXSb8St8kQ2B
9rL5w3bBmp6/pxfW25MJ3JdTqhkTIHwpbqRagAe0s20jZZ69brt5Ex+Gb/kvKHOF
4BEB5AqJvEYTGs58S88SGsBizRGMJ9vVPLE5v6gMx70riVTJFLjB0HylgVtpVHbZ
ufE6rSC3Bey/+ei0boocrULnxvQis0gs+u+uPkqypOD0h8DsIMrWN5FDicW5KN3F
MxtGu4GhdazqUw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:50 2026 by rpki-client