Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: RGcBkkGQEaGOsLK3t/LHOKNmyBLgNlp4q75R4kGSmZQ=
Subject key identifier: 7E:6C:39:5D:3F:B6:34:E3:41:E9:2B:52:8C:D2:EF:DB:FD:CC:F0:93
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019EC11250BFDB36A006F7BCA6FC4C21CA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0DBA
Signing time: Sat 13 Jun 2026 13:01:03 +0000
Manifest this update: Sat 13 Jun 2026 13:01:03 +0000
Manifest next update: Sun 14 Jun 2026 13:01:03 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: sXqovhy4hA/V12gBHwVXjoAOTFKQHuiVWA2/OvmlG3Y=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:50:bf:db:36:a0:06:f7:bc:a6:fc:4c:21:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jun 13 13:01:03 2026 GMT
Not After : Jun 14 13:01:03 2026 GMT
Subject: CN=7e6c395d3fb634e341e92b528cd2efdbfdccf093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:7a:45:e9:0f:da:da:aa:a8:60:13:92:f2:
be:1c:54:ab:44:9c:9a:d3:4c:10:99:4a:55:86:d0:
33:f7:3b:c2:35:1d:92:7d:18:bc:2f:47:72:1e:5f:
bd:45:5a:c0:13:29:db:fa:80:b4:7d:9b:96:6d:56:
15:a7:0e:e0:94:a2:9c:ab:61:f6:40:41:bf:12:dc:
70:2f:99:4e:de:92:5b:c4:46:ee:f3:76:49:b0:5c:
ef:26:9e:89:76:aa:98:8c:22:56:d9:81:b2:f2:08:
56:4e:40:81:23:00:d1:2a:28:6c:10:64:6c:60:82:
22:df:18:1f:ee:b0:f7:39:f6:1a:24:af:22:8c:d9:
43:3c:39:51:10:61:df:35:07:95:f6:08:3b:99:35:
3e:a9:39:56:57:cc:02:52:55:b7:c0:50:a8:3d:a3:
59:bf:e6:11:52:38:d6:8b:10:00:26:db:bf:84:09:
d3:03:38:18:47:70:eb:78:3d:89:83:0b:9d:c0:93:
ed:2c:ec:ba:b9:18:1d:8c:12:b6:a3:9d:41:d5:90:
13:18:a0:64:c0:47:33:94:71:a6:82:7e:e5:7d:c1:
97:4b:ba:f2:3c:e5:50:bb:21:e8:a7:00:f2:ea:0a:
f1:85:86:7f:3b:26:ca:04:1e:9b:e7:3e:1f:8a:81:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:39:5D:3F:B6:34:E3:41:E9:2B:52:8C:D2:EF:DB:FD:CC:F0:93
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:0b:4b:2d:6e:70:f7:66:e5:37:3d:b5:37:eb:f1:a5:39:
b4:7f:ff:dd:51:ff:7b:b0:44:a9:84:28:97:d1:e8:9f:8c:e5:
9f:d5:6e:4f:dc:cd:47:f3:19:a0:68:16:b8:32:04:67:8e:a2:
98:75:2d:12:1b:c9:64:1b:77:2b:71:e4:6d:5d:00:de:1b:bd:
45:88:e7:ce:30:d0:88:ef:b1:e0:de:80:9b:53:bd:7b:af:17:
75:0b:f6:ca:8b:be:50:e2:2a:ee:aa:b0:4b:57:d1:22:79:12:
f5:0b:9a:49:bd:63:9a:0a:9c:92:16:33:85:54:1f:89:1e:92:
40:1e:f5:52:1e:62:82:46:63:22:8b:30:39:43:88:2a:56:9b:
15:6e:5c:a3:ac:b9:3a:20:30:f2:da:c4:93:f6:87:48:49:d0:
37:3e:a3:81:b4:41:41:ba:bb:8b:da:5d:de:0e:e2:2c:15:8b:
33:47:1b:b1:a4:a4:80:c1:2c:40:fe:61:2a:92:b9:f6:1c:fd:
57:03:72:8b:7a:84:67:5d:bc:f2:37:87:2b:a9:6b:12:0f:97:
77:9a:9f:19:72:c2:b0:40:84:c0:cd:08:92:dc:1d:19:08:21:
c2:7c:b4:34:28:1a:c6:7d:95:ce:c8:fa:8f:88:12:75:65:67:
e6:49:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:57 2026 by rpki-client