Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: +PNfpQUmeTO9WFsj+GpCVZ60IkyO6tFI1HE5a4t4hSA=
Subject key identifier: 65:30:B9:A3:10:0E:56:DC:D9:32:9D:2D:C4:BD:84:B8:27:DB:CC:55
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019D9AABD3D057827AFF45A47A29A1C36B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 05B5
Signing time: Fri 17 Apr 2026 09:00:45 +0000
Manifest this update: Fri 17 Apr 2026 09:00:45 +0000
Manifest next update: Sat 18 Apr 2026 09:00:45 +0000
Files and hashes: 1: 0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa (hash: ihfrAi7s7Y2K9UhMNauXDC1EytsAoBOYF3SMIaVb5Zc=)
2: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: AFB7vdrgFzFnn74XoDs+ZSkxkgQiFZzGSON11JvjPNc=)
3: sdkPwBAzXT8V1hVHIyJeK_vXL5w.roa (hash: 3O67CS2riHupZNulhyVmJc5RtCecgenRYd/XninEIbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d3:d0:57:82:7a:ff:45:a4:7a:29:a1:c3:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Apr 17 09:00:45 2026 GMT
Not After : Apr 18 09:00:45 2026 GMT
Subject: CN=6530b9a3100e56dcd9329d2dc4bd84b827dbcc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e0:4e:e8:58:a3:3e:af:29:02:cc:7a:a6:ba:
84:15:18:91:b2:d0:ed:cb:c5:e0:1b:f3:f2:9c:b3:
f2:7a:62:4c:9e:1f:e0:02:88:34:b5:4b:ec:e2:d2:
3a:80:6e:ab:5d:4b:1f:39:d3:18:1d:32:d5:af:a9:
d6:e4:89:ea:37:fe:1e:d0:43:a2:3d:bb:e7:87:08:
77:3e:76:58:3b:4c:51:33:d4:3c:8c:bf:ba:da:ca:
7c:2a:43:18:56:ed:ff:4a:eb:c0:c0:e3:3b:7a:ea:
98:85:b5:9c:58:a2:e2:1b:4f:b4:ac:11:1b:9a:d1:
60:b3:ec:71:fe:a7:4e:68:36:42:c5:77:6a:29:f4:
78:7c:f0:c8:0d:97:d9:c5:88:4f:e2:5c:79:92:8d:
f6:59:ff:da:ca:fa:88:62:d1:59:2a:e3:d1:2b:52:
59:4d:17:55:37:76:9d:b7:2c:a4:5c:db:4a:e7:24:
fb:ff:ea:f6:07:12:8e:7e:85:cc:c5:41:7e:4c:b3:
2d:8a:49:3b:ee:c5:40:f5:da:f1:b8:40:18:35:38:
db:31:7f:cf:09:25:86:70:77:93:5a:a5:fa:3f:5f:
32:ea:35:4f:40:8a:a0:a7:cb:21:d6:e8:89:7d:c8:
22:1a:51:30:31:2f:7e:f2:7d:d8:34:3e:a3:37:20:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:B9:A3:10:0E:56:DC:D9:32:9D:2D:C4:BD:84:B8:27:DB:CC:55
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:08:65:2e:3f:4e:d0:7c:d7:e6:28:30:83:db:2e:24:de:e3:
0a:7c:70:f1:5b:31:25:a8:41:bb:16:e1:2c:17:40:45:62:45:
c5:c6:8a:23:ea:d4:e2:bf:46:9e:8d:b6:39:b8:a2:ca:df:7e:
da:36:aa:b5:f6:12:87:b7:fe:28:06:10:d7:6a:c6:d6:24:33:
cc:b0:0b:47:2e:23:b7:c2:b3:5c:d6:78:b5:7d:75:05:d8:60:
2e:59:f4:da:e2:1a:34:29:cc:5e:5f:02:cd:6e:f6:69:ec:1e:
53:d5:f3:f1:6f:27:5d:f3:86:88:1b:3c:73:36:86:59:57:ed:
1f:1f:d5:a6:30:51:ee:fd:d0:7e:fb:93:d8:cb:a6:1f:d6:35:
c8:f5:92:c9:66:17:2f:4c:e4:bc:af:18:97:f6:ab:93:b5:2b:
a9:fe:e6:f7:88:75:7d:1c:dd:06:e8:fa:b2:ec:6e:73:cb:9f:
cb:dd:45:4e:db:b9:cb:3f:61:4d:0d:cd:8e:5b:97:0b:09:ff:
b5:a6:99:57:ff:b2:2a:d2:9a:6a:a9:18:38:b0:b6:05:fc:b4:
13:f8:cc:97:db:6f:53:d3:63:d4:e9:dc:0c:08:08:95:8d:66:
e8:62:54:11:17:5d:a6:15:e0:1b:50:da:ac:91:69:a9:5c:b1:
01:20:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:06 2026 by rpki-client