Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
File: MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft (raw, json)
Hash identifier: YkPy+AS3qUxQldJDfzowSpCLjLgfPNoawJS7g1Mt630=
Subject key identifier: F7:AC:37:E6:A4:A3:07:61:CA:F5:61:5F:AB:4E:FF:EC:2B:6B:0D:81
Authority key identifier: 32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
Certificate issuer: /CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Certificate serial: 019FA899DD28B50FF833E876E2DDE34176B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: 1VnK2YTEFn9UK9IEnOkG7BB0Zog.asa (hash: LxLh8yYDehJtP6uqGzj0PwTIPOUL3sLV/nu3Wj0/ync=)
2: BxIAgGugg3mdvw83vZjF2_Ww0jI.roa (hash: Omln+goGD9roS6a+IqM9CDEjdWrKRmuSfidI8ZCm4v0=)
3: MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl (hash: qrBt3DI9k4rsRuhTPUIzELokQLc4dpFA9JDsVFCl6W0=)
4: WQwpfImRvEjprBMZ7RT8VyCcJJE.roa (hash: cJJ+wKMG21Vgdcj91hphdVBR1WAPx0N5h9uVseAGk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:dd:28:b5:0f:f8:33:e8:76:e2:dd:e3:41:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=f7ac37e6a4a30761caf5615fab4effec2b6b0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:d1:67:09:0c:3e:3a:44:74:9b:6b:8c:5a:
3f:19:f9:c0:09:22:65:21:13:68:f0:5c:e1:0a:ab:
57:fa:86:03:e8:8a:d7:6a:e0:34:ec:56:62:3b:98:
ec:de:65:f5:cf:73:ff:98:0d:f9:77:2c:a6:9a:08:
3f:a9:74:1e:58:f5:99:2c:46:9e:e5:37:93:76:b8:
54:e0:52:a0:c0:3a:e8:df:c2:19:a6:cd:1e:37:4c:
8c:cf:7b:6b:04:a5:13:33:14:f7:81:fa:b3:d0:b3:
61:81:80:54:f9:42:0d:55:ca:ea:24:96:63:42:83:
5b:b5:9c:2e:8e:b2:83:8c:bc:70:70:74:19:c3:6c:
84:63:4f:4b:c2:7b:69:18:82:bf:c8:15:c2:4f:f4:
43:80:98:1a:4f:b5:7d:bd:d4:1c:09:57:81:ff:57:
2d:c0:bb:5e:1c:70:9d:4f:ac:1b:60:66:27:05:8b:
11:58:19:2a:57:11:f9:65:d4:8a:bd:c1:6b:f0:56:
70:b8:b1:b5:2c:e1:cd:ac:95:d0:ef:de:f1:c8:7f:
6c:c0:9c:50:ac:19:6e:91:47:c1:06:bb:04:9a:d4:
09:b8:98:fa:17:cb:4f:a5:66:8d:b8:9f:08:5a:30:
3a:a6:2d:af:62:9e:21:86:4b:cf:f5:43:7d:3c:9e:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AC:37:E6:A4:A3:07:61:CA:F5:61:5F:AB:4E:FF:EC:2B:6B:0D:81
X509v3 Authority Key Identifier:
keyid:32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:be:19:90:b6:e1:9c:fe:77:5f:d7:62:f8:ad:ac:73:8d:b6:
c9:19:f6:7d:44:b3:89:83:aa:7e:68:be:ff:2e:d7:12:d3:e5:
5e:fb:9f:ea:35:97:15:26:20:21:5a:0f:20:aa:8d:e3:dc:43:
3b:26:7d:be:ee:51:d8:3d:0d:b2:67:40:c5:d9:b1:61:fe:dd:
61:11:52:38:0c:17:16:2a:aa:9d:4e:d9:8a:5b:c9:10:84:c4:
d2:4c:bf:24:7b:2b:59:2b:4a:a2:6d:dc:46:43:f4:a5:d8:6d:
4c:c6:30:71:8b:ce:e8:dd:93:00:14:8d:08:4a:78:e5:2c:c2:
f5:94:d8:d0:a2:f5:67:dc:bf:5b:07:44:0f:b0:b0:f0:c3:ba:
10:0c:01:9d:01:39:d3:f8:44:05:46:82:b7:c0:a2:5b:fc:64:
b7:27:fc:8e:04:c7:df:9f:b6:a8:1c:7f:6e:79:cd:df:cd:c5:
07:c3:fd:13:2f:31:1d:ef:fd:19:a2:46:fe:cd:f9:19:57:e4:
7d:c5:79:81:00:23:78:4e:cd:3d:9d:eb:f7:66:18:33:02:1e:
ee:1c:5a:ff:fd:8f:20:4c:99:e4:06:da:f7:8d:ad:d0:a8:f6:
54:ff:60:fc:c2:75:bf:04:ac:a0:f1:04:ac:db:5c:85:90:7e:
95:c7:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:25 2026 by rpki-client