
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: lOCfaHc51+5KO7mBZcCG6e2NChP+3319+sNRHeuce7w=
Subject key identifier: BE:9B:C7:06:BC:41:B5:F8:7C:E3:89:95:7F:13:1C:FE:86:99:FE:FB
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01A110A9165598C204F16C0737BCE36D1525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 0780
Signing time: Tue 06 Oct 2026 10:01:19 +0000
Manifest this update: Tue 06 Oct 2026 10:01:19 +0000
Manifest next update: Wed 07 Oct 2026 10:01:19 +0000
Files and hashes: 1: B5LeEaJvi3HeQSD41vCBPOSwCqA.roa (hash: J8iyDcJo2rN2bShtgQufGUQCMMmmWJ3P0+AOI3a4/74=)
2: FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa (hash: SqvMQwiK+3k9rUMpX3V6L4hGcrAmDvVmALug/oB9sFU=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: r1QTZQZop8GbXR9vwFB0NuGnDvc+p2ApupdAfqwseEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:16:55:98:c2:04:f1:6c:07:37:bc:e3:6d:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Oct 6 10:01:19 2026 GMT
Not After : Oct 7 10:01:19 2026 GMT
Subject: CN=be9bc706bc41b5f87ce389957f131cfe8699fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:eb:fe:38:aa:e9:75:3f:21:e9:f3:82:c3:
0b:61:5c:40:78:c1:36:8a:61:a3:36:cc:eb:a3:f1:
24:eb:38:ad:d0:ff:cd:69:c2:39:82:2d:9a:28:76:
ce:73:79:4b:98:26:8e:98:84:a5:e1:5c:4f:06:65:
60:87:59:48:8c:f0:eb:79:70:06:4f:42:10:40:08:
da:be:b3:59:43:db:cf:6f:5b:73:7e:98:fc:f3:9a:
0b:4d:5f:2b:c0:c7:4e:e2:c6:22:9a:77:ad:26:4b:
fe:7e:d3:ba:19:67:5f:96:1e:a6:b0:01:67:4b:00:
99:5c:94:64:d8:d8:7e:6e:83:95:9c:44:03:81:42:
80:86:6e:f6:35:2f:5b:ae:db:ca:f8:29:dd:8e:82:
e6:d2:a3:8d:a4:ea:10:28:77:08:f5:77:a1:95:4d:
6f:92:f9:a5:89:5a:4d:b2:35:92:29:45:05:6a:bc:
c2:e1:d8:e0:a6:4f:5c:d0:1a:0a:54:cd:c2:dd:37:
d6:5e:90:3a:8c:f5:5f:26:b8:6e:47:3b:48:47:b2:
aa:9f:81:a4:83:55:3d:cc:a0:26:a8:08:6a:5e:51:
ed:0e:fa:f3:8c:4e:f3:d6:1e:b1:04:84:a9:0e:9d:
26:f6:e5:d8:12:46:a4:fe:d8:5b:e6:96:60:7f:f8:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:C7:06:BC:41:B5:F8:7C:E3:89:95:7F:13:1C:FE:86:99:FE:FB
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ff:0c:f6:46:bc:27:b5:40:1d:b2:25:fc:b8:63:5f:96:5e:
58:17:7f:ab:dc:9c:ba:32:b2:d2:18:38:44:d9:d1:d0:00:5d:
33:a9:14:a3:cc:5d:e1:04:44:02:d6:39:26:17:22:6d:00:78:
80:85:2b:60:0b:4c:b2:81:fe:59:af:ae:ad:e8:5f:e3:64:d9:
2f:2d:6a:d7:0d:77:0e:22:00:5f:f4:22:c7:32:3c:b3:87:de:
7e:eb:2a:76:79:65:29:87:3b:1d:78:10:c2:76:0e:dc:19:9d:
4f:fb:38:f1:ef:43:d1:05:2f:1f:b2:26:7b:53:9c:d2:66:d8:
6d:6e:e8:5a:b9:70:83:85:c5:ab:db:fd:eb:f5:b4:14:89:2e:
ef:46:2a:28:36:90:e7:0b:57:a5:c5:6e:d7:21:c2:6b:8f:34:
89:b3:a1:86:6f:1d:6d:12:43:79:4b:de:53:11:db:ae:84:6c:
08:e0:01:47:12:32:82:03:7e:07:48:b9:2a:74:1c:92:1a:42:
98:52:29:24:55:eb:85:1a:05:55:da:3b:5d:09:ad:36:cc:03:
94:db:05:97:7b:19:48:f1:26:10:d7:3b:49:67:ce:27:15:e9:
06:fc:d5:2e:fa:51:42:99:a1:31:35:e1:e5:9d:cd:7b:49:7d:
df:b1:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:42:09 2026 by rpki-client