Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: L1knRiNMGKoY/OrFFvMI2nOB4vGSPTgAi6AWhb+45kk=
Subject key identifier: B0:C3:83:2F:37:DC:E9:56:37:BD:58:25:AB:D4:B3:1E:66:81:1F:30
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019CAB6B6A0B071CE1AF3D4748C98E530FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 22:01:09 +0000
Manifest this update: Sun 01 Mar 2026 22:01:09 +0000
Manifest next update: Mon 02 Mar 2026 22:01:09 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: Vgd206PyhHqmkbitLuul4Xpq/N6yP+QUFIobuXh49KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6a:0b:07:1c:e1:af:3d:47:48:c9:8e:53:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Mar 1 22:01:09 2026 GMT
Not After : Mar 2 22:01:09 2026 GMT
Subject: CN=b0c3832f37dce95637bd5825abd4b31e66811f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:78:a7:1c:0f:b3:0a:6b:2a:93:85:c1:32:
0a:69:76:dc:aa:8c:22:81:e1:6e:f4:2f:af:82:02:
ac:a8:48:99:94:4e:ea:1a:70:97:5c:c7:a1:ab:0c:
28:76:8a:ce:f7:80:4a:3f:bd:bc:0d:a9:4f:f3:6d:
34:32:bd:56:ad:14:98:24:d7:89:ef:4e:88:59:04:
a5:d1:25:6f:e1:9d:03:94:e5:c7:34:6f:77:3b:69:
00:85:06:3a:09:0c:b0:3d:02:84:25:bc:e8:5d:64:
75:b3:60:13:b0:5c:0c:f6:51:22:82:1d:01:b0:14:
f8:17:72:ea:a0:4e:ab:42:72:d8:9f:00:0d:6c:7f:
aa:25:8e:17:19:8d:3b:15:45:32:71:4e:5e:a2:1d:
8c:fe:db:2e:4c:60:65:90:3b:92:c6:7b:3f:b8:e2:
c5:6c:ce:4e:81:80:97:e1:da:46:cc:44:c9:b5:fa:
6d:ec:b3:4e:2e:5e:63:8f:57:2b:1f:2e:ce:fc:b6:
da:17:43:d4:b5:e3:15:98:3b:6f:13:90:d3:07:2b:
02:92:b2:76:f8:00:7a:c3:78:7b:e6:f1:0c:d0:6b:
49:0e:46:fa:db:aa:dc:0c:94:16:46:ba:ae:21:50:
36:c6:d6:7f:de:f0:1c:c7:36:e4:0b:68:39:9b:8f:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:83:2F:37:DC:E9:56:37:BD:58:25:AB:D4:B3:1E:66:81:1F:30
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:d6:9b:28:d1:e9:04:a7:ce:e2:56:ed:b9:e3:34:29:9b:
c5:bb:e5:e8:c3:21:47:17:92:96:8a:f4:d7:ca:b3:74:59:24:
c9:74:c6:de:cd:38:f2:d3:6b:ad:84:86:14:26:03:65:9c:57:
87:16:66:bb:81:8a:4f:ad:8a:98:34:ff:31:37:d3:3d:4f:7d:
d7:ca:61:ce:3b:4a:29:4a:fb:93:34:45:6b:36:55:b7:e1:83:
9b:36:b2:29:54:f0:3d:c1:1d:e3:87:48:67:91:d2:7c:6a:25:
bf:e0:c4:9a:4e:65:56:20:d8:cd:85:b1:0c:43:f6:99:0a:c6:
b4:79:b1:45:ee:b7:52:83:df:1d:38:62:7e:49:97:cd:fe:61:
d1:6d:00:c1:3c:3f:16:c9:d7:27:3e:67:27:49:e3:bd:7e:1d:
d2:7e:31:48:0d:3c:36:25:ef:83:ac:63:b0:14:51:c6:40:f2:
18:f5:bb:03:a0:88:ed:1c:0f:58:b8:01:48:c8:ab:15:e4:4a:
f2:15:c1:a0:89:64:fd:ad:3d:a1:e4:5e:db:b2:d6:29:c1:59:
69:6f:64:7a:94:19:18:3d:cd:23:c0:03:2f:c3:9a:31:a6:6b:
77:b3:80:ca:0b:9d:ee:ef:6c:8b:26:02:28:b4:ee:e5:76:b8:
a6:16:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:12 2026 by rpki-client