Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: BhlR1UVcRrwW9SnkLnt0ZcfF4t19s8dUUhYVQUtraUI=
Subject key identifier: 14:4B:68:94:52:54:FE:A2:6B:60:80:B1:27:2D:B0:16:E0:55:FE:79
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 019CAB6BBDC799959FED5A391E92D11D2C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:30 +0000
Manifest this update: Sun 01 Mar 2026 22:01:30 +0000
Manifest next update: Mon 02 Mar 2026 22:01:30 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: Apmo0uLjB0jSLDVfulvCQ92nd80t38BEAhUQhpPD/7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:bd:c7:99:95:9f:ed:5a:39:1e:92:d1:1d:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Mar 1 22:01:30 2026 GMT
Not After : Mar 2 22:01:30 2026 GMT
Subject: CN=144b68945254fea26b6080b1272db016e055fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:4c:49:ed:f0:5a:60:1c:e6:e7:e3:fd:dc:
a5:89:db:63:c4:82:bf:4c:b1:d3:40:02:dc:4b:11:
56:f5:c7:d8:9f:b1:4b:53:cb:09:62:c8:bf:84:2c:
24:af:74:1e:6c:45:a0:66:7e:6d:3f:23:bb:3f:f5:
7b:b1:1b:a3:52:fb:11:1b:0a:9f:83:ff:a3:1c:37:
4d:76:d4:b4:2c:d7:e9:b6:53:24:57:63:9f:7c:5c:
34:7c:19:d5:a6:fa:7f:84:7b:16:2d:bb:4d:67:2f:
cf:56:e5:18:82:be:ba:19:56:6f:5b:f5:ed:84:0a:
53:4a:a6:27:29:b3:fa:57:17:74:f8:f9:cb:f1:49:
47:d1:b1:6d:87:15:cf:ef:5f:d2:64:12:6c:79:78:
3f:e0:31:24:05:5d:8e:e0:0e:7a:01:5a:40:0b:a9:
a2:56:75:ea:2e:56:5a:7b:d0:cf:08:bf:d6:2f:5c:
0b:7b:3d:e2:27:d7:c9:ce:19:4e:77:e7:a9:93:bc:
4e:00:a5:58:6e:4a:f5:86:ea:c4:a0:17:22:a3:25:
b0:e6:39:d8:e7:4b:b9:52:4a:08:51:d3:80:9f:00:
5d:c1:71:74:10:02:ed:18:29:87:68:fe:e1:19:97:
a2:61:d5:1b:4b:60:81:6c:36:90:19:94:1c:aa:63:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:68:94:52:54:FE:A2:6B:60:80:B1:27:2D:B0:16:E0:55:FE:79
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:a2:8a:9e:1b:f9:da:f5:e3:94:d9:40:c6:e9:a2:db:3e:
1c:d2:b2:b3:d6:f7:05:57:1e:83:f9:c5:7d:44:8d:1f:f7:49:
be:70:34:b7:54:37:55:9e:8c:bd:99:c5:9a:3e:05:13:48:d9:
54:3a:04:7e:d3:ed:8f:ce:66:9d:8a:8d:d7:e8:df:af:f2:57:
3b:4e:7e:65:78:a0:a1:8c:bc:45:2c:bf:86:3d:84:32:c8:bd:
7a:e5:ee:ac:a6:70:13:33:6b:89:b3:79:06:b4:83:27:11:4f:
6e:9d:6b:d6:06:cb:ee:0a:3c:c3:44:be:eb:83:b9:2a:9a:17:
9b:9a:49:6a:3c:fa:6a:56:00:b6:41:ce:2c:25:3f:ab:97:08:
bc:91:76:b1:24:85:11:4d:2d:09:6d:30:6e:a3:b9:21:6b:6b:
f1:5f:a5:2d:8a:17:14:97:39:81:aa:fd:47:74:76:27:f3:8f:
b1:c6:2c:69:33:27:0d:4a:68:35:3f:01:03:46:95:8e:69:db:
2f:b2:d5:1b:ca:00:61:3c:9a:3a:c8:3d:03:04:f1:49:4e:13:
35:ca:0e:c5:d5:0d:48:63:4e:cb:7f:70:a6:83:ca:13:b0:95:
03:e2:33:24:b1:e3:a8:c7:d5:7c:ee:60:cb:7d:6b:81:ec:f0:
1a:2d:20:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra73HmZWf7Vo5HpLRHSwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy
ZDUzMDcwHhcNMjYwMzAxMjIwMTMwWhcNMjYwMzAyMjIwMTMwWjAzMTEwLwYDVQQD
EygxNDRiNjg5NDUyNTRmZWEyNmI2MDgwYjEyNzJkYjAxNmUwNTVmZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBRMSe3wWmAc5ufj/dylidtjxIK/
TLHTQALcSxFW9cfYn7FLU8sJYsi/hCwkr3QebEWgZn5tPyO7P/V7sRujUvsRGwqf
g/+jHDdNdtS0LNfptlMkV2OffFw0fBnVpvp/hHsWLbtNZy/PVuUYgr66GVZvW/Xt
hApTSqYnKbP6Vxd0+PnL8UlH0bFthxXP71/SZBJseXg/4DEkBV2O4A56AVpAC6mi
VnXqLlZae9DPCL/WL1wLez3iJ9fJzhlOd+epk7xOAKVYbkr1hurEoBcioyWw5jnY
50u5UkoIUdOAnwBdwXF0EALtGCmHaP7hGZeiYdUbS2CBbDaQGZQcqmOb0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRLaJRSVP6ia2CAsSctsBbgVf55MB8GA1UdIwQY
MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt
YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk
LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA2iip4b
+dr145TZQMbpots+HNKys9b3BVceg/nFfUSNH/dJvnA0t1Q3VZ6MvZnFmj4FE0jZ
VDoEftPtj85mnYqN1+jfr/JXO05+ZXigoYy8RSy/hj2EMsi9euXurKZwEzNribN5
BrSDJxFPbp1r1gbL7go8w0S+64O5KpoXm5pJajz6alYAtkHOLCU/q5cIvJF2sSSF
EU0tCW0wbqO5IWtr8V+lLYoXFJc5gar9R3R2J/OPscYsaTMnDUpoNT8BA0aVjmnb
L7LVG8oAYTyaOsg9AwTxSU4TNcoOxdUNSGNOy39wpoPKE7CVA+IzJLHjqMfVfO5g
y31rgezwGi0gsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:27 2026 by rpki-client