Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: qDbujUFObdhgPxNkulChKLI1q8S1N1aDJtMJplNXPEw=
Subject key identifier: 72:FD:07:DE:BD:E7:C1:86:5C:13:68:5C:E5:16:1C:D5:0E:84:AF:50
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019FAA19A2735F4AFCCBB092B9F6B0D60E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 19:00:34 +0000
Manifest this update: Tue 28 Jul 2026 19:00:34 +0000
Manifest next update: Wed 29 Jul 2026 19:00:34 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: zfsDbPBD2QhP8x3gFOYh1LU+QkKopU6BsKNOCtSDCDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a2:73:5f:4a:fc:cb:b0:92:b9:f6:b0:d6:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jul 28 19:00:34 2026 GMT
Not After : Jul 29 19:00:34 2026 GMT
Subject: CN=72fd07debde7c1865c13685ce5161cd50e84af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:e4:42:55:a2:98:d1:59:76:90:09:e0:b6:
4c:70:3e:5e:2a:94:19:92:f0:57:3b:e9:fa:d0:1a:
0e:2b:a0:f7:dc:7f:96:8e:99:53:ac:b5:e6:98:b4:
17:70:7e:64:3a:2e:6f:19:33:27:56:da:ee:0b:2f:
da:39:a3:eb:29:70:63:b1:ca:95:dd:f4:b3:59:2c:
e1:62:f4:4e:54:a9:21:54:be:6c:f6:5a:f2:9f:ca:
87:26:57:dc:6a:32:3a:97:6f:e4:3d:bb:ca:f8:4a:
d7:fe:2c:fa:00:44:5c:0c:5e:7a:70:04:b1:0f:60:
f2:fb:6a:73:ce:30:ba:1d:c9:87:71:dd:07:5b:51:
50:4e:d2:0b:4b:7d:fc:02:c0:8e:2a:05:b5:aa:1f:
2f:2c:3f:65:d7:d8:94:fa:7c:7b:15:ed:57:ef:db:
6e:c7:8e:00:84:53:f3:41:81:c4:c3:2d:09:46:cf:
2a:3b:34:50:eb:d4:cb:57:87:c9:51:4a:0e:4a:63:
d0:ee:8b:8f:c8:83:31:e6:64:54:e7:a9:4a:f9:32:
44:52:02:64:0e:99:26:84:50:48:71:cd:c8:16:11:
c1:d8:4c:6f:71:4d:c0:5d:f6:a3:82:30:1a:d8:73:
0a:3c:21:14:86:49:ce:78:f3:1c:84:50:3e:35:4a:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:07:DE:BD:E7:C1:86:5C:13:68:5C:E5:16:1C:D5:0E:84:AF:50
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:9b:94:4a:0c:b0:62:e7:37:bc:44:0b:61:aa:df:06:78:
63:a4:8f:d3:ef:34:71:72:a2:e5:e5:8c:27:b0:1a:a0:e2:e0:
a1:ee:b6:d3:93:6d:30:fd:6c:e4:6d:b4:dc:00:7a:fa:fc:8f:
00:49:da:3b:e1:46:79:8b:cd:f2:3a:19:c2:c5:2f:9c:f7:a0:
02:39:ed:18:35:6e:bd:3c:ba:26:ad:4c:c2:40:a7:fb:dd:f3:
44:c9:4c:67:21:18:8d:5b:07:c8:0c:62:0d:80:cb:79:f7:dc:
9b:45:c7:cc:24:2f:35:68:70:db:d2:76:1a:65:ea:29:22:f8:
72:25:f9:a6:40:77:dc:bd:61:b7:a9:0c:32:57:d3:41:fe:c2:
37:8f:39:7a:76:fd:e7:a7:cf:6b:d0:4a:6d:37:b5:b4:f9:7e:
42:f8:7f:9a:92:13:ae:6a:44:22:c3:6c:fd:be:e7:51:e6:5d:
76:96:a4:7e:f0:5c:35:16:79:14:fc:c6:8a:c1:64:fc:18:6b:
f9:ba:9e:ec:72:c9:fb:ff:1d:47:a0:d6:19:34:5c:6f:b6:37:
88:81:56:f5:a8:f6:7b:e6:a3:90:f3:a5:c0:4d:fb:5f:9f:e7:
45:fe:02:14:fe:bc:89:6e:2b:24:7d:ee:d8:cc:ac:36:f0:e1:
55:6f:36:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGaJzX0r8y7CSufaw1g4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1
ODY5ZTIwHhcNMjYwNzI4MTkwMDM0WhcNMjYwNzI5MTkwMDM0WjAzMTEwLwYDVQQD
Eyg3MmZkMDdkZWJkZTdjMTg2NWMxMzY4NWNlNTE2MWNkNTBlODRhZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TnkQlWimNFZdpAJ4LZMcD5eKpQZ
kvBXO+n60BoOK6D33H+WjplTrLXmmLQXcH5kOi5vGTMnVtruCy/aOaPrKXBjscqV
3fSzWSzhYvROVKkhVL5s9lryn8qHJlfcajI6l2/kPbvK+ErX/iz6AERcDF56cASx
D2Dy+2pzzjC6HcmHcd0HW1FQTtILS338AsCOKgW1qh8vLD9l19iU+nx7Fe1X79tu
x44AhFPzQYHEwy0JRs8qOzRQ69TLV4fJUUoOSmPQ7ouPyIMx5mRU56lK+TJEUgJk
DpkmhFBIcc3IFhHB2ExvcU3AXfajgjAa2HMKPCEUhknOePMchFA+NUpmKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL9B96958GGXBNoXOUWHNUOhK9QMB8GA1UdIwQY
MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct
ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1
LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTiblEoM
sGLnN7xEC2Gq3wZ4Y6SP0+80cXKi5eWMJ7AaoOLgoe6205NtMP1s5G203AB6+vyP
AEnaO+FGeYvN8joZwsUvnPegAjntGDVuvTy6Jq1MwkCn+93zRMlMZyEYjVsHyAxi
DYDLeffcm0XHzCQvNWhw29J2GmXqKSL4ciX5pkB33L1ht6kMMlfTQf7CN485enb9
56fPa9BKbTe1tPl+Qvh/mpITrmpEIsNs/b7nUeZddpakfvBcNRZ5FPzGisFk/Bhr
+bqe7HLJ+/8dR6DWGTRcb7Y3iIFW9aj2e+ajkPOlwE37X5/nRf4CFP68iW4rJH3u
2MysNvDhVW82pA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:23 2026 by rpki-client