
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: GyzurRTBS0vgAW2gj2OFBmwhzFPOOf2kyHLnqBNGKdk=
Subject key identifier: EE:C3:C3:B5:31:DF:02:B2:16:5B:CB:07:E8:82:C7:C5:31:30:36:21
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019EBF23A84D89910A930358300A82C32468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0DB9
Signing time: Sat 13 Jun 2026 04:00:45 +0000
Manifest this update: Sat 13 Jun 2026 04:00:45 +0000
Manifest next update: Sun 14 Jun 2026 04:00:45 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: tzctup1BKmO6WHsYZHwpMo7TWSn794xgGMKTmRzXYMg=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:a8:4d:89:91:0a:93:03:58:30:0a:82:c3:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jun 13 04:00:45 2026 GMT
Not After : Jun 14 04:00:45 2026 GMT
Subject: CN=eec3c3b531df02b2165bcb07e882c7c531303621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:dd:30:dc:3f:21:b3:59:dc:80:98:08:f9:
3b:03:75:31:d0:f0:c1:95:a9:0c:95:a7:ce:a5:70:
45:de:8e:ed:7f:0e:df:86:fb:67:ae:8f:52:0f:63:
04:95:d9:47:f2:4f:9f:19:1c:e5:c9:81:d1:c7:cb:
8a:aa:05:74:cf:de:2e:5f:06:aa:59:1f:59:e8:05:
28:e4:10:df:84:09:51:74:3e:5e:cc:54:7f:80:f0:
5f:96:09:6b:92:e9:bb:67:62:20:7f:d4:21:3d:e3:
8f:bc:8e:37:9c:2d:bc:84:54:61:bb:c5:23:15:6f:
90:ac:00:99:58:13:2d:23:fa:71:b8:00:bf:24:b3:
a4:99:38:19:9b:d7:9d:07:80:c7:97:c5:01:1b:b3:
3e:da:49:2b:92:f5:9b:0d:ba:1a:43:44:24:3c:52:
55:f2:88:37:8f:7d:ba:52:55:ae:82:15:78:5a:34:
ab:e8:a3:d1:89:45:3a:65:f4:2f:39:f7:47:a1:45:
3b:41:10:91:71:ef:df:02:40:7e:ac:55:17:72:7f:
85:0b:52:0d:1d:82:e4:66:a9:45:3e:91:7a:95:e7:
da:e3:fa:7f:b7:48:55:10:8f:a2:71:1a:46:a7:c8:
a0:e1:56:7a:65:5b:5e:09:29:8f:7e:df:6a:32:6f:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C3:C3:B5:31:DF:02:B2:16:5B:CB:07:E8:82:C7:C5:31:30:36:21
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ae:0f:81:fa:01:1b:28:bc:fa:f4:6c:70:6f:85:e3:3a:4a:
ad:6f:5a:c0:5f:37:6e:3c:84:f0:42:45:f4:61:b5:e5:93:8c:
a2:49:a9:be:42:1b:c8:2e:77:f1:e8:a3:d1:dd:0e:6b:06:ae:
21:3e:f3:6b:c2:1b:50:bc:f7:32:74:c8:75:7d:92:25:0b:e0:
38:d7:30:18:7d:b1:7b:84:3a:cf:79:b4:5c:fd:40:b4:f1:ae:
05:68:6a:89:0e:b3:73:73:f9:16:86:24:f3:35:28:cd:a3:8e:
6f:f4:17:84:d0:93:bd:f0:5c:ae:52:03:72:30:ad:e9:14:a8:
83:82:a6:03:7a:a9:50:ce:ac:d7:d0:af:be:f6:49:df:e9:f6:
50:60:14:72:fb:63:34:50:8f:c1:49:dc:00:2b:37:9d:17:71:
5a:f7:dd:62:5d:1d:46:c0:67:cd:af:67:89:a1:cd:36:16:a0:
3c:94:9b:05:35:b4:95:c5:ad:0e:dd:37:40:1b:cf:8a:4e:15:
41:d5:94:84:b4:c9:a5:98:89:cf:ce:c9:76:a6:33:7b:6b:59:
85:e9:1c:b4:0f:62:f9:9c:25:13:35:6a:30:f8:8e:e8:fc:53:
83:5e:a4:0c:41:48:92:f5:a1:ca:f4:7a:29:33:6d:c3:54:2f:
02:8d:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:58 2026 by rpki-client