Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: 63HMtD5IOj82fX1UcBlT32lsyK87tSuyHHDZ1D1/zvE=
Subject key identifier: 36:26:A7:09:6C:02:2F:17:50:76:70:F3:6E:8A:5D:73:BC:33:CC:F0
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019D9A3E38B37F5F52CE9BD4C327103E6537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 0732
Signing time: Fri 17 Apr 2026 07:01:02 +0000
Manifest this update: Fri 17 Apr 2026 07:01:02 +0000
Manifest next update: Sat 18 Apr 2026 07:01:02 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: by+PhgzLHuZVtvRtZWl64szNgrPjmluWRPcy7FDMEvQ=)
2: fpLIbJHijuX4TKgTAyoHnBJ9FNk.roa (hash: gQJgoj/tjnQ3iGvuvLFVs4DZHdJmjGfyDkoOcNA2s6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:38:b3:7f:5f:52:ce:9b:d4:c3:27:10:3e:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Apr 17 07:01:02 2026 GMT
Not After : Apr 18 07:01:02 2026 GMT
Subject: CN=3626a7096c022f17507670f36e8a5d73bc33ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:e6:61:9a:74:9a:4a:58:db:8a:df:21:3d:
38:c3:71:ea:50:60:87:ac:06:48:8c:c8:fd:c7:ab:
84:d9:08:2c:03:61:d8:24:82:3d:c8:af:9c:3e:13:
ca:36:22:8c:1b:ce:cc:df:3f:bf:63:35:dd:e8:54:
67:79:35:7b:55:4b:a3:88:b7:1c:be:0a:c8:de:bd:
eb:85:77:c4:7d:63:a9:b1:c4:e7:60:8f:8c:db:1b:
ea:d6:fc:c5:fa:fb:c5:96:f3:22:ee:81:f9:67:f6:
2f:e4:b8:5b:d6:ed:9f:a0:cf:3a:e6:d9:c0:d6:5c:
ac:0d:b2:1e:d5:98:d0:99:ab:01:63:c7:7e:f2:d9:
d6:86:ef:49:e9:e8:86:3c:7c:2b:5b:90:05:06:5d:
34:fa:41:d6:e7:d2:f8:f1:a9:24:5d:18:22:30:3b:
ab:76:d3:1e:87:a3:07:ba:82:09:5a:4f:82:ea:a0:
0f:52:ee:36:42:59:69:da:81:32:5b:c2:23:3e:53:
0f:a3:2e:55:32:e5:99:e6:2b:ac:94:d4:00:15:af:
0b:94:43:13:51:67:a2:e3:7c:d9:9f:3c:89:19:7e:
3c:a4:43:a8:b1:36:fe:90:c3:2e:b4:8d:93:41:21:
4a:7d:6a:10:3f:2b:79:73:f7:80:ce:44:a2:63:3f:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:A7:09:6C:02:2F:17:50:76:70:F3:6E:8A:5D:73:BC:33:CC:F0
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e3:80:09:64:0a:00:5d:98:9d:c8:49:55:2b:f1:4b:d0:d2:
26:ba:d0:96:ed:39:d9:7c:d9:83:75:86:27:bd:68:00:63:cd:
9f:78:d1:34:2d:69:fe:ac:6b:08:16:73:3b:f5:7a:0c:41:cd:
08:12:fb:2d:9a:dd:86:fa:c9:43:68:c8:2d:f2:39:48:46:b0:
0f:20:de:70:8f:64:f7:49:5c:56:17:11:a0:a3:e1:57:10:9e:
c5:bc:de:76:5e:bc:be:3f:13:fc:47:39:73:ee:60:17:ab:3c:
71:fb:e3:79:ab:6d:b2:ba:22:bd:01:b1:bb:bb:09:01:99:51:
a9:41:6e:f5:26:10:59:80:1e:5f:96:9a:3f:e7:28:3c:4e:9c:
1d:a4:f8:d8:be:ac:f8:81:e4:e3:2d:3c:63:6f:03:29:6c:e7:
53:ac:42:95:4e:5a:6d:a0:ea:67:f1:80:af:9f:93:cc:36:0a:
61:d8:86:83:13:f4:60:3f:d7:10:d0:0a:64:6a:a0:fc:6f:10:
e1:66:e7:11:fc:4e:f1:a8:1b:e8:08:85:e2:56:bc:36:60:de:
ac:bc:c8:63:a3:64:b5:4d:14:d1:3e:5d:93:a9:a6:32:8f:4f:
6b:01:d4:db:e4:bd:5d:04:f2:c8:c0:1f:48:57:85:e1:ee:68:
de:fa:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:46 2026 by rpki-client