Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: EOuO6FSgZewCHp6EW7k27t42mjmHAWyvswmLg16YQ6s=
Subject key identifier: 83:E2:C6:63:F1:7B:E9:C1:D4:41:15:37:94:56:83:BF:EA:0D:A1:5D
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 01A0CC6C2A64D28D2DDE1E0BB5034DB716A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0EC9
Signing time: Wed 23 Sep 2026 04:00:35 +0000
Manifest this update: Wed 23 Sep 2026 04:00:35 +0000
Manifest next update: Thu 24 Sep 2026 04:00:35 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: UCbaogFDk4uUzFiG/S9WkF/izZinAN0MrT6LIeP4miY=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:2a:64:d2:8d:2d:de:1e:0b:b5:03:4d:b7:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Sep 23 04:00:35 2026 GMT
Not After : Sep 24 04:00:35 2026 GMT
Subject: CN=83e2c663f17be9c1d4411537945683bfea0da15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:a3:88:cb:9e:f6:0e:00:5d:cd:d4:de:4b:
b6:7b:42:ec:91:14:c8:9f:da:ca:9b:cc:f6:2e:57:
ef:37:d4:2d:0d:60:0e:21:0b:df:dd:bb:3b:c0:49:
0b:0a:73:3e:7e:c4:02:13:4d:30:89:f9:aa:bd:0d:
8c:f6:ed:62:c2:dc:bb:d0:4f:8e:7b:9c:fc:1d:72:
5a:2b:8e:40:e2:fe:45:df:ed:21:7f:df:3c:d8:c4:
9b:23:c6:01:5a:8f:58:1d:2e:05:b7:45:7d:ad:4c:
cd:1a:58:84:d1:0f:6b:57:3c:60:3b:f8:26:d2:37:
1a:43:b8:cd:50:58:40:2f:d6:26:a6:86:b2:89:ff:
66:4a:8e:81:ca:fa:4d:ad:fe:d2:65:53:2c:b0:d1:
34:b9:f4:cf:ea:9d:c4:e9:28:89:67:f8:16:3b:01:
ee:57:71:68:de:ac:8b:c7:b6:48:f1:26:4d:7a:5f:
9b:98:9b:37:9c:b9:e8:f7:b7:11:ee:aa:b5:de:22:
da:dd:e2:8f:cd:e8:fb:d2:93:45:f1:b1:90:e6:c9:
18:a7:61:91:73:bf:0a:1f:88:eb:be:24:2e:0b:a0:
33:a8:b5:a6:f3:d4:16:74:b4:91:c6:3f:8e:2e:dd:
61:55:4a:b3:44:11:d3:ef:07:d4:b5:a0:ee:ca:fe:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:C6:63:F1:7B:E9:C1:D4:41:15:37:94:56:83:BF:EA:0D:A1:5D
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:9f:a2:1b:35:f1:40:92:aa:44:6d:b4:04:94:86:d1:80:
bd:ac:94:91:3d:41:93:1a:66:7b:90:22:27:06:fc:73:4a:6c:
17:90:54:d1:03:3b:eb:c9:cc:7c:b8:b0:84:99:4d:cc:13:fc:
52:07:91:8d:40:67:79:a4:5c:18:6f:c2:df:ea:43:0c:56:af:
35:4b:bd:5f:d6:1e:16:b5:d1:c9:33:bb:89:6f:49:4b:29:c9:
05:5e:fe:cc:80:33:87:e2:c5:8c:87:2a:0a:86:4c:d9:f4:d8:
4c:36:26:aa:fd:74:6f:a3:89:e9:90:7e:92:d4:3b:6c:7a:4d:
7c:29:c2:db:87:06:c0:e6:cb:26:dc:f1:d5:5d:7a:48:fd:3a:
da:c8:c9:56:e5:e6:3a:ae:b6:e6:50:82:ce:fb:4f:45:1c:29:
66:c8:23:b1:fb:fc:86:39:63:fb:98:33:6e:7a:0b:53:3c:98:
5a:20:7e:ef:7f:02:5f:50:a7:b2:80:07:2c:f6:5e:e4:06:80:
46:38:f8:10:ce:70:4a:8b:d3:ad:da:4f:42:b8:7c:65:7f:2e:
9c:2b:ed:cb:20:04:3c:94:ab:25:e8:a4:b4:4d:b4:f3:d4:67:
56:d4:6c:31:93:09:5c:50:12:60:4a:e2:38:9a:af:4a:28:75:
d8:97:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:31 2026 by rpki-client