
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: Zv97PQxXb9Pm4UK739Znu2qncbOmlYKJWvRojeK2h5M=
Subject key identifier: FC:F5:43:47:07:B7:7C:9C:BC:DE:A9:AE:F6:AD:D8:9C:7D:A8:E7:A7
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019CAD22DC0D53E948A5E23FC65ECF698CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 053A
Signing time: Mon 02 Mar 2026 06:01:08 +0000
Manifest this update: Mon 02 Mar 2026 06:01:08 +0000
Manifest next update: Tue 03 Mar 2026 06:01:08 +0000
Files and hashes: 1: 0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa (hash: ihfrAi7s7Y2K9UhMNauXDC1EytsAoBOYF3SMIaVb5Zc=)
2: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: l8/cvNZ85Po1EmOmgEZd+yrv7XmZyiesdZDz/rrL9ZI=)
3: sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa (hash: 3O67CS2riHupZNulhyVmJc5RtCecgenRYd/XninEIbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:dc:0d:53:e9:48:a5:e2:3f:c6:5e:cf:69:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Mar 2 06:01:08 2026 GMT
Not After : Mar 3 06:01:08 2026 GMT
Subject: CN=fcf5434707b77c9cbcdea9aef6add89c7da8e7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:73:fa:43:88:f1:e2:fa:de:c7:78:5e:b9:
1b:cf:79:8e:60:33:17:32:ff:42:1a:c7:dd:be:68:
a9:c7:eb:bf:a8:6b:0a:c7:b3:0e:0e:3a:69:1d:29:
a1:77:87:2b:4f:ca:5d:b0:48:c5:7b:c7:6d:63:a8:
d7:32:e9:54:0a:e3:26:f1:c5:6a:50:7a:97:65:16:
33:f7:9c:67:e5:05:cf:9e:2f:22:4b:1d:99:de:8c:
fd:da:c8:c0:3d:6c:75:c2:49:95:a3:5f:40:55:9d:
be:ec:f4:66:07:96:a7:2e:7d:c8:19:6f:82:4e:dd:
bb:49:51:f8:1b:a5:cb:17:94:db:bd:b4:f3:47:7f:
75:8f:78:6a:be:5e:ae:2f:b3:70:9e:2a:44:42:76:
71:2c:af:ef:84:f7:62:70:de:83:a8:7d:cf:3e:e0:
da:d2:8a:68:f2:22:69:a5:66:4a:5e:39:7e:93:21:
f2:05:26:61:b9:9b:66:f8:b4:8e:7b:14:bf:56:ef:
d9:5f:7a:ba:41:d1:3c:6b:f4:d6:c7:83:54:3e:79:
54:74:6a:58:bb:c0:0e:64:7b:bf:d6:8f:03:12:76:
f3:a7:9e:63:40:4d:0b:5f:71:ca:1b:e7:e0:9d:2b:
d5:8e:42:87:ee:9a:41:67:eb:3c:35:77:cd:e2:b2:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:43:47:07:B7:7C:9C:BC:DE:A9:AE:F6:AD:D8:9C:7D:A8:E7:A7
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5f:ad:0b:18:c4:ef:52:eb:68:ba:34:9e:73:b4:a7:a1:fc:
a7:8b:9d:0f:07:ec:ef:1c:06:9c:f5:b3:7d:19:1f:cb:b8:23:
c1:7a:dc:f9:66:8a:48:01:fb:ad:9c:9e:fa:17:fb:51:c0:34:
f2:08:a1:d7:a6:31:aa:c1:6f:9e:c0:5c:b7:a7:2f:17:04:e7:
05:ea:89:e4:74:5e:e2:58:75:47:ca:df:46:03:48:f1:7b:29:
65:a4:94:2a:cc:d6:05:a4:ab:5a:29:9c:2c:c0:fd:fa:d9:23:
2c:74:fa:e6:0b:49:4f:53:5e:0b:18:10:2a:b4:f2:ba:cf:3f:
ee:2a:4c:a3:6f:88:eb:29:b9:e7:87:33:81:01:5e:f7:9c:31:
4f:34:2f:93:97:56:d1:0b:91:15:27:5c:cb:d4:9b:21:52:bc:
46:11:96:65:55:a5:8b:60:95:37:5c:76:6c:03:b6:f2:c1:23:
ab:80:c2:f2:36:4c:84:39:2a:1a:d4:6f:e4:8c:91:ff:88:48:
4b:6f:71:ac:74:9c:ef:56:22:f5:4a:06:4e:f9:bf:1c:89:25:
be:4a:18:6f:fc:73:d3:d8:a0:0f:88:c7:83:d8:6c:95:3d:77:
5a:7e:ca:3c:70:30:db:6c:f8:f5:4f:82:3e:c9:f6:10:80:1f:
e6:7a:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:32 2026 by rpki-client