
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: NCw3pzj6TioNj3shcc2tmlIlDFXCOODYyzBuvY6fmDo=
Subject key identifier: AA:E9:8D:7C:32:5F:98:17:58:F1:DC:86:F8:24:F1:D2:10:59:DC:F9
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 019CAB6B7985E06B301D57B4754AAB5EF0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 14EE
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: 6QBonDlU4Z4D6ZlWOejAMenLBRhtoDwy/Vm/oS40xvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:79:85:e0:6b:30:1d:57:b4:75:4a:ab:5e:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=aae98d7c325f981758f1dc86f824f1d21059dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:c6:c3:c8:79:8d:9f:f0:eb:69:cd:f3:08:
24:bb:f0:4d:57:b6:be:ac:d3:1d:52:b6:59:59:ad:
32:45:43:35:e1:fc:5f:e3:9b:b4:5e:b5:0b:04:96:
97:f0:3a:af:5f:f4:22:be:e7:d0:b4:94:2b:c6:ab:
01:21:ff:bd:bc:80:09:32:55:6b:43:4a:c7:b7:ce:
ce:85:bc:d6:e1:bb:cf:3d:16:00:59:cc:02:4b:45:
ec:71:96:35:e9:6a:e3:a9:dc:8d:c5:43:4d:b5:80:
fd:7f:15:59:72:3a:66:de:96:b5:94:c9:0d:6a:8e:
79:9a:db:e1:62:62:f8:7c:87:92:ea:2a:5e:0c:75:
e0:ea:69:e1:3c:de:b8:f6:b4:d5:23:45:2d:2f:93:
f6:c0:10:ec:4c:ed:5a:37:42:0d:22:ae:36:e4:a9:
56:41:d9:b2:be:ac:30:ea:aa:10:0d:1d:bc:ce:3f:
0e:09:f4:59:d6:0d:d5:9a:fa:1f:f8:b5:7f:1f:1c:
a4:bd:32:97:ca:64:9f:29:d3:de:e4:6e:d0:38:78:
9e:ba:25:5b:56:88:df:aa:5a:f5:11:eb:32:c7:cf:
ae:1e:0a:22:cf:18:2d:a3:d2:cf:3b:c9:ca:38:95:
03:0b:ab:e4:41:5c:8b:34:84:98:be:53:fc:37:a6:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:8D:7C:32:5F:98:17:58:F1:DC:86:F8:24:F1:D2:10:59:DC:F9
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cb:6f:63:9b:05:d5:c2:b0:80:1d:58:5e:ed:50:1d:aa:d7:
b5:58:ca:0c:c5:b8:3a:9c:45:ba:63:d0:9d:44:59:b1:6f:8b:
04:5a:44:25:19:a5:75:ed:0e:96:df:16:57:08:51:d0:11:89:
98:b2:e4:cc:92:06:56:49:b0:48:13:ec:11:62:26:51:47:ab:
1b:e4:80:f2:96:4b:23:b4:43:ea:a2:f4:29:ff:75:c8:6b:6a:
89:48:ab:12:bc:1c:ab:e1:f3:95:17:77:4d:30:6d:3d:47:c9:
45:8d:42:a9:88:f9:e9:44:27:18:8a:be:f7:65:cf:3c:c9:51:
e6:b7:77:62:43:d9:b8:8b:7a:7b:6f:a4:0c:a3:2f:37:7c:bc:
34:ca:25:ea:10:3c:be:ef:34:78:88:ab:45:0a:5b:5b:e3:59:
a9:bc:61:54:e9:ef:d3:1d:07:76:ea:41:d0:e2:38:99:be:1d:
a1:bb:f8:33:46:ad:55:9d:73:43:74:31:92:ca:b3:fb:44:3d:
f3:4c:4f:61:f2:b9:72:b0:9e:88:c8:c9:ec:7c:c4:67:89:66:
c6:f0:f5:17:72:12:51:b6:04:a3:67:1c:45:5b:17:29:2f:e4:
68:14:7e:3f:97:e4:a5:78:14:bc:b6:8e:68:18:09:89:d8:da:
e0:ed:94:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3mF4GswHVe0dUqrXvD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTFjN2ZkNTcxMmY5MGVkNWQxMzFkM2FiMThjYmFkN2Rk
N2FlNWUwHhcNMjYwMzAxMjIwMTEzWhcNMjYwMzAyMjIwMTEzWjAzMTEwLwYDVQQD
EyhhYWU5OGQ3YzMyNWY5ODE3NThmMWRjODZmODI0ZjFkMjEwNTlkY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP3Gw8h5jZ/w62nN8wgku/BNV7a+
rNMdUrZZWa0yRUM14fxf45u0XrULBJaX8DqvX/QivufQtJQrxqsBIf+9vIAJMlVr
Q0rHt87OhbzW4bvPPRYAWcwCS0XscZY16WrjqdyNxUNNtYD9fxVZcjpm3pa1lMkN
ao55mtvhYmL4fIeS6ipeDHXg6mnhPN649rTVI0UtL5P2wBDsTO1aN0INIq425KlW
Qdmyvqww6qoQDR28zj8OCfRZ1g3Vmvof+LV/HxykvTKXymSfKdPe5G7QOHieuiVb
Vojfqlr1Eesyx8+uHgoizxgto9LPO8nKOJUDC6vkQVyLNISYvlP8N6YHzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrpjXwyX5gXWPHchvgk8dIQWdz5MB8GA1UdIwQY
MBaAFDKRx/1XEvkO1dEx06sYy619165eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQt
ODZmYTJkZGQzM2QxLzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQtODZmYTJkZGQzM2Qx
LzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAustvY5sF
1cKwgB1YXu1QHarXtVjKDMW4OpxFumPQnURZsW+LBFpEJRmlde0Olt8WVwhR0BGJ
mLLkzJIGVkmwSBPsEWImUUerG+SA8pZLI7RD6qL0Kf91yGtqiUirErwcq+HzlRd3
TTBtPUfJRY1CqYj56UQnGIq+92XPPMlR5rd3YkPZuIt6e2+kDKMvN3y8NMol6hA8
vu80eIirRQpbW+NZqbxhVOnv0x0HdupB0OI4mb4dobv4M0atVZ1zQ3Qxksqz+0Q9
80xPYfK5crCeiMjJ7HzEZ4lmxvD1F3ISUbYEo2ccRVsXKS/kaBR+P5fkpXgUvLaO
aBgJidja4O2UQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:06 2026 by rpki-client