Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: Kaug/N0ZJ3Bwk6fPHGa/XIbU4nOyd+czWG51nGWeOAI=
Subject key identifier: 9E:87:3A:1A:C2:AE:03:4E:8E:71:5E:C2:29:7F:93:41:D6:B0:FA:0D
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019D98F45793570C2D67D0AA9B35B93E3BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: tfV6WrYAAle9/oPw04UV58zCskTZ3vNza8cT6c7QKdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:57:93:57:0c:2d:67:d0:aa:9b:35:b9:3e:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=9e873a1ac2ae034e8e715ec2297f9341d6b0fa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:36:7f:47:03:de:08:d8:61:03:59:a4:60:
04:52:17:27:89:e3:17:da:17:4b:5c:23:3c:2f:76:
ea:e8:dc:f9:e2:ca:c8:3c:41:9c:5b:89:6b:9f:4e:
fb:94:79:c9:33:67:9e:5c:ea:5e:0d:76:28:5e:e9:
26:c2:f8:23:c4:89:01:05:d8:e9:92:13:91:70:a6:
f9:b1:c8:76:d1:9c:40:a6:31:30:30:29:75:88:74:
43:d2:35:bc:5b:f3:ed:7d:01:47:e8:14:73:41:0e:
4f:3b:e1:15:96:0d:f8:8a:6c:7a:39:cd:05:40:00:
b7:63:1c:64:fc:ab:f5:37:82:bc:4c:fb:95:5f:9b:
1b:23:ad:1e:08:81:16:fc:94:1f:05:d7:6e:d1:5e:
fa:5b:2c:d9:90:5c:e4:05:19:d7:bb:28:a1:f3:36:
34:e0:b8:91:a3:28:12:61:ba:75:8a:1c:37:61:26:
cf:cc:3f:6b:8e:54:43:ef:b2:93:e9:2a:08:8b:9b:
66:9b:91:cb:63:58:0f:79:d1:fe:4d:88:70:55:f3:
e8:d7:0f:b7:2a:f3:31:d6:35:02:1f:15:52:96:b7:
f6:4b:f7:9a:75:e1:16:d0:74:92:28:4c:ec:31:ad:
51:7a:17:88:02:8d:c1:40:1a:3d:72:6b:3b:cc:0e:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:3A:1A:C2:AE:03:4E:8E:71:5E:C2:29:7F:93:41:D6:B0:FA:0D
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2b:f8:9e:91:50:18:f7:74:76:12:d2:7b:37:fe:2e:fc:d6:
9c:b8:51:de:15:66:17:3b:db:eb:58:5c:ce:5f:65:a0:ef:3f:
08:73:a7:0b:3a:40:d0:bc:ba:43:ab:8a:b6:da:66:0a:7d:3c:
f5:2f:c1:22:6e:ab:b3:d3:b9:db:91:a5:6a:81:42:0c:2a:2d:
44:83:8e:31:e9:f5:61:29:b1:c3:6c:40:36:37:c5:43:da:a8:
d1:dc:06:44:87:e3:c2:71:5a:9b:96:85:b6:5b:46:97:1a:8d:
6d:88:ca:88:6d:86:02:1c:85:97:66:f6:8a:3e:ca:fa:81:49:
29:2b:68:f8:74:cf:e7:53:8a:51:c6:cf:d3:fb:c6:20:b6:cd:
4d:62:a7:00:3e:17:5f:0a:ee:1c:b5:71:53:0b:b0:49:5e:89:
00:97:5c:30:7d:1a:f3:22:e3:d2:e0:e3:2f:a7:90:2d:49:f5:
96:8d:ab:fe:35:a9:b8:0a:c2:84:29:76:fc:54:7a:70:54:d4:
0a:ae:07:6c:e1:14:40:e0:86:b9:e9:0a:07:61:c7:6b:78:a9:
c0:8b:4d:1e:24:a4:10:cb:62:7f:e6:c4:b8:0a:7d:53:91:a4:
2c:8d:3e:8b:54:65:1a:10:be:53:7c:18:a1:9a:14:20:f9:c5:
aa:aa:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:00 2026 by rpki-client