Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: 4MpAc4SeduF53aMbg0kgAPjfMucScrJKYyqgGI+uIgE=
Subject key identifier: 3A:2F:0C:D3:BB:7D:CB:47:08:7F:31:52:7A:B2:C4:87:F7:5D:8F:CD
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019FAABEFC0CD62A18C5B9A126D32B84E338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0E33
Signing time: Tue 28 Jul 2026 22:01:10 +0000
Manifest this update: Tue 28 Jul 2026 22:01:10 +0000
Manifest next update: Wed 29 Jul 2026 22:01:10 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: NHuQ5h/EcdUqe+SxxWE2m6IZ7LY+8EycPNITXoabHo0=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:fc:0c:d6:2a:18:c5:b9:a1:26:d3:2b:84:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jul 28 22:01:10 2026 GMT
Not After : Jul 29 22:01:10 2026 GMT
Subject: CN=3a2f0cd3bb7dcb47087f31527ab2c487f75d8fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:5c:4c:55:91:4d:a6:73:fa:cc:8f:6c:a8:
cd:a0:3b:f4:c0:74:a4:47:7a:e6:2a:7e:12:4c:62:
3d:41:1f:ae:90:49:a5:63:8c:0c:dd:94:2e:2d:59:
ab:d8:8c:d2:8e:94:16:96:3e:a9:ab:21:6f:0d:62:
b2:34:6f:8e:ca:54:e8:45:38:3e:5a:6c:10:cf:7f:
18:b8:a5:4f:8e:49:b4:60:43:29:e3:fe:a7:6a:4c:
06:46:24:5e:9e:ae:25:2d:d4:ed:0b:98:5c:1d:ae:
d6:0a:dc:b0:ad:58:23:10:17:97:ef:cd:cb:63:81:
6d:f2:f7:27:08:5b:9d:8f:fc:be:a9:7e:8a:54:9f:
be:66:c2:29:d9:2a:6c:ad:ed:39:ab:d9:bf:89:c8:
d1:90:ec:ce:7d:a5:81:fa:c3:35:1c:e9:0b:b6:ae:
ef:5f:15:d9:bc:2c:8d:6a:3f:ad:ba:e3:5f:e7:c9:
22:c2:38:2c:29:b7:2e:3d:43:f5:10:d1:47:f6:6c:
e1:fd:2b:12:a3:9d:b4:78:ed:94:ea:8b:15:be:0b:
61:64:db:b5:4b:36:dd:e4:ad:73:9c:a6:34:43:a6:
f7:45:0f:df:9d:5a:20:4b:db:71:95:e5:4a:dd:04:
8b:7c:43:d6:12:1b:c3:39:cb:1a:e8:f3:27:de:61:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2F:0C:D3:BB:7D:CB:47:08:7F:31:52:7A:B2:C4:87:F7:5D:8F:CD
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ee:55:08:7a:f3:8a:6c:27:75:a5:b1:56:33:a8:e2:09:d1:
38:87:7e:63:2d:1a:54:c7:5e:b9:2d:a0:5f:30:21:aa:56:12:
ff:60:4d:1a:ac:33:37:c5:9d:ee:de:4d:d6:80:0a:5c:0c:b8:
1b:36:52:7f:30:8b:97:2c:b4:c4:40:0c:70:82:a9:02:1a:ae:
4a:3a:91:dd:7f:aa:e3:9b:17:de:fe:60:e5:27:f3:88:42:42:
3b:65:1e:26:58:6e:a6:6d:68:e7:19:fe:94:e1:ff:11:ad:7c:
fc:eb:8f:e2:d6:bd:50:50:e6:84:fa:15:22:44:9d:56:82:b1:
51:bb:19:f7:4b:02:a0:5c:e6:ac:88:8b:e9:91:dc:6a:1d:78:
c7:72:b6:3c:fe:13:b0:99:15:b6:c3:d1:5a:eb:a7:fb:0b:08:
94:4d:9f:94:fc:ae:7d:19:21:0d:54:1c:2f:52:46:2d:5b:d0:
56:d2:35:58:f1:ba:8f:9a:02:59:af:17:e3:58:ac:9b:d1:17:
a3:72:ac:23:2a:10:57:91:f8:d1:d8:7b:60:7f:33:ab:fd:39:
ab:ca:67:ab:2f:76:11:a1:3c:0e:23:ed:a5:95:88:11:b0:74:
e4:7a:6d:50:20:62:e3:1a:11:79:3d:f8:90:0e:90:13:74:fb:
93:8e:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:51:54 2026 by rpki-client