Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: pXah/mQq5kLb3malLwaT1of94LyhU3sgMRMkhwE3BF8=
Subject key identifier: EF:E4:36:6A:74:C3:83:BC:32:9C:65:EB:82:6F:91:C0:F0:1B:8C:0E
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019D9999AD7584CEF5BDE2F857CF0696A8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0D21
Signing time: Fri 17 Apr 2026 04:01:18 +0000
Manifest this update: Fri 17 Apr 2026 04:01:18 +0000
Manifest next update: Sat 18 Apr 2026 04:01:18 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: NVxIOvApl05e2MKL/v0Z8EaGqISk/Gh5VTsvYLcwqlc=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:ad:75:84:ce:f5:bd:e2:f8:57:cf:06:96:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Apr 17 04:01:18 2026 GMT
Not After : Apr 18 04:01:18 2026 GMT
Subject: CN=efe4366a74c383bc329c65eb826f91c0f01b8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:32:90:8b:74:7d:39:84:b4:17:79:d7:d3:f1:
03:03:a8:7b:85:75:d4:2c:a4:b3:2c:89:cf:1c:6e:
d1:72:32:71:5c:09:be:b8:ce:0d:cf:8a:b7:d9:54:
d6:1c:2d:7b:27:7d:56:05:f1:5f:a9:5e:0a:61:26:
a6:50:0c:c3:fc:1f:a1:b5:9e:30:08:f2:3a:3d:95:
ac:5c:4e:d8:76:79:88:98:dc:79:0a:cf:31:8a:f3:
b1:9b:c5:25:a9:9b:b4:df:72:5b:d0:0d:34:5a:0c:
df:85:75:21:6e:47:5c:00:a5:f7:8d:3d:08:ae:82:
5c:d1:06:69:71:19:bb:e1:68:db:7d:0d:00:7d:d4:
5d:0e:63:5b:7a:88:30:09:cf:d7:86:d8:eb:c6:58:
1e:3a:18:e1:e6:bd:12:ed:46:57:ab:82:4e:9c:0a:
7b:15:05:76:10:92:e1:c5:fc:5b:44:03:ed:f8:64:
9d:d6:1f:7d:7a:d6:b4:56:98:93:02:3b:78:aa:77:
37:ef:ce:04:65:35:8a:ae:47:fc:24:06:17:a0:a9:
14:86:1d:64:56:a7:c4:21:9c:07:06:38:45:aa:75:
5f:58:cd:85:44:c9:7f:79:9e:f8:24:10:51:79:81:
bc:9e:ad:03:82:95:37:ad:f7:58:d2:fe:35:13:b9:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:36:6A:74:C3:83:BC:32:9C:65:EB:82:6F:91:C0:F0:1B:8C:0E
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:c5:7a:4b:5d:89:20:57:c5:cb:94:83:5a:50:31:4c:93:
e7:31:53:94:73:61:c2:0a:e9:b7:35:1d:a8:1b:c3:96:20:8a:
9a:5e:b6:ef:c3:e3:b8:ff:af:f5:3e:a6:5f:36:61:98:ff:d9:
49:3a:e5:aa:be:d0:46:bf:01:70:11:b0:d9:b3:6f:f6:1b:e1:
74:49:f2:23:52:e2:8d:3b:dd:15:70:b2:88:06:db:6f:b5:09:
6d:a6:c9:af:2d:ed:31:a3:98:f4:96:90:fe:63:b9:bb:a3:e9:
f4:b9:a9:f6:4c:cc:12:4f:32:d0:32:a6:7d:5f:c3:fa:a4:0a:
b4:a5:d3:2c:83:cc:c9:d4:1f:0f:31:33:0d:2c:a2:0b:54:67:
6b:c0:cd:f9:dd:11:a1:a1:82:ab:7c:2b:fc:37:e8:f4:48:d0:
c2:ef:09:19:6c:8f:11:99:f8:ca:75:0b:6f:81:21:f8:00:bf:
b7:16:18:be:68:cd:15:c2:2c:85:db:16:9e:71:bf:2c:fa:46:
db:4e:53:9a:b2:77:e0:37:13:94:85:bc:f4:e7:cd:1b:be:ba:
35:8b:d1:f0:81:5c:fb:5a:88:fc:59:af:94:ed:98:08:73:86:
59:f9:15:a0:c3:4c:19:97:93:ac:a5:8d:f3:6e:c8:4a:48:ae:
63:08:ce:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zma11hM71veL4V88GlqjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3
YmQwOGUwHhcNMjYwNDE3MDQwMTE4WhcNMjYwNDE4MDQwMTE4WjAzMTEwLwYDVQQD
EyhlZmU0MzY2YTc0YzM4M2JjMzI5YzY1ZWI4MjZmOTFjMGYwMWI4YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jKQi3R9OYS0F3nX0/EDA6h7hXXU
LKSzLInPHG7RcjJxXAm+uM4Nz4q32VTWHC17J31WBfFfqV4KYSamUAzD/B+htZ4w
CPI6PZWsXE7YdnmImNx5Cs8xivOxm8UlqZu033Jb0A00WgzfhXUhbkdcAKX3jT0I
roJc0QZpcRm74WjbfQ0AfdRdDmNbeogwCc/XhtjrxlgeOhjh5r0S7UZXq4JOnAp7
FQV2EJLhxfxbRAPt+GSd1h99eta0VpiTAjt4qnc3784EZTWKrkf8JAYXoKkUhh1k
VqfEIZwHBjhFqnVfWM2FRMl/eZ74JBBReYG8nq0DgpU3rfdY0v41E7mDQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/kNmp0w4O8Mpxl64JvkcDwG4wOMB8GA1UdIwQY
MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt
Y2UyYTQ5NmZlZTg2LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2
LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ7Fektd
iSBXxcuUg1pQMUyT5zFTlHNhwgrptzUdqBvDliCKml6278PjuP+v9T6mXzZhmP/Z
STrlqr7QRr8BcBGw2bNv9hvhdEnyI1LijTvdFXCyiAbbb7UJbabJry3tMaOY9JaQ
/mO5u6Pp9Lmp9kzMEk8y0DKmfV/D+qQKtKXTLIPMydQfDzEzDSyiC1Rna8DN+d0R
oaGCq3wr/Dfo9EjQwu8JGWyPEZn4ynULb4Eh+AC/txYYvmjNFcIshdsWnnG/LPpG
205TmrJ34DcTlIW89OfNG766NYvR8IFc+1qI/FmvlO2YCHOGWfkVoMNMGZeTrKWN
827ISkiuYwjOUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:31 2026 by rpki-client