Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: yrRixk1Dpr8caDaMMLhkCODUoEl5OOHPR3Dq/JRTrQM=
Subject key identifier: 56:1B:72:74:66:A3:85:91:94:7D:05:6C:95:6E:53:E0:5C:68:A0:E5
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019FAB63200C477063A8DEEAD36C38587FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 06C7
Signing time: Wed 29 Jul 2026 01:00:27 +0000
Manifest this update: Wed 29 Jul 2026 01:00:27 +0000
Manifest next update: Thu 30 Jul 2026 01:00:27 +0000
Files and hashes: 1: B5LeEaJvi3HeQSD41vCBPOSwCqA.roa (hash: J8iyDcJo2rN2bShtgQufGUQCMMmmWJ3P0+AOI3a4/74=)
2: FSHb4zqpIh3Akxw5EoTNpuLXjWI.roa (hash: SqvMQwiK+3k9rUMpX3V6L4hGcrAmDvVmALug/oB9sFU=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: I1OFGATzyDultOI0cGJSxOdLWj/aa/1lCYRgsDm39mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:20:0c:47:70:63:a8:de:ea:d3:6c:38:58:7f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jul 29 01:00:27 2026 GMT
Not After : Jul 30 01:00:27 2026 GMT
Subject: CN=561b727466a38591947d056c956e53e05c68a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:37:c4:8c:b8:77:cb:67:2f:9a:31:06:19:
34:e2:a9:ea:6f:20:e3:0a:be:a7:56:7b:56:e6:b0:
9f:d1:0b:ff:90:c2:f2:d0:49:34:4a:86:42:b6:49:
31:11:24:d7:52:96:25:0c:3d:af:68:89:6c:f5:3e:
b4:e1:fc:8f:ed:02:38:45:d9:d8:f0:24:70:01:37:
f7:4b:a5:82:41:5b:03:65:0b:0d:be:ed:53:9a:46:
3d:29:30:cc:04:93:99:cf:b2:62:4c:bc:72:b9:b3:
00:2f:be:00:ea:69:8a:93:a0:be:28:a2:9f:da:fd:
bf:5b:1e:9c:91:fa:17:4f:6d:c8:61:7e:bc:76:16:
00:ef:6d:1c:ac:8a:e9:47:27:7a:ab:3b:0f:21:64:
ca:52:9b:92:33:cc:55:19:a6:46:77:44:55:44:7b:
27:a8:26:d3:9b:b3:68:e3:68:1f:e0:c1:86:69:7a:
c6:fc:aa:a3:f3:2f:86:a0:8c:87:8a:b9:5a:59:ae:
24:52:46:c0:2c:b8:d9:c7:69:b8:01:1a:be:19:ba:
f5:0f:49:bc:13:2c:fc:b7:fd:70:82:90:57:85:2a:
2e:23:9c:d2:6e:05:e6:6b:48:89:fc:74:a1:75:1c:
5d:a2:f0:c3:08:82:8a:f7:2c:44:af:b5:b7:13:d4:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:72:74:66:A3:85:91:94:7D:05:6C:95:6E:53:E0:5C:68:A0:E5
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5d:10:85:de:41:44:33:31:97:b8:c3:05:4b:ea:5f:9d:5d:
b8:eb:9b:5e:bc:ae:3c:86:7d:62:d3:b1:54:a4:08:d4:cc:1b:
7d:3f:ee:57:cd:87:96:59:35:ca:1f:91:1b:6e:67:e4:57:f0:
b9:5d:f1:e1:24:3d:ea:41:6e:4f:40:36:c4:ac:b3:cd:d2:42:
a1:ba:33:15:e1:03:cf:f1:cb:80:ca:01:54:70:5b:cd:aa:f6:
12:bf:fb:9f:32:92:e4:cc:72:5b:a3:7e:51:73:df:e5:31:0f:
0a:40:3e:06:e7:a1:2e:59:a3:6c:6b:9a:65:5d:ee:93:14:26:
8d:49:24:1f:55:ac:91:2f:1b:d5:be:3f:22:5f:1f:eb:6e:f6:
45:4e:f6:3a:22:83:19:d0:a6:26:00:17:9a:ce:53:c3:28:a2:
76:22:17:cb:6b:a6:bd:f7:43:bb:f3:b3:1d:32:bb:e9:c0:5f:
c9:b8:8b:81:fd:59:c8:97:c5:15:63:eb:5d:db:33:7f:20:32:
e6:37:0c:e1:d7:ec:9b:a6:20:f5:71:e3:b9:2b:d3:97:c6:73:
e9:cb:b9:bb:33:8a:85:8d:91:41:62:e7:42:a3:f6:e8:97:19:
31:cf:4b:ea:3c:b7:a8:4a:04:14:01:d3:b3:26:73:a4:57:05:
46:fb:9e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYyAMR3BjqN7q02w4WH/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm
ZmM4ZDUwHhcNMjYwNzI5MDEwMDI3WhcNMjYwNzMwMDEwMDI3WjAzMTEwLwYDVQQD
Eyg1NjFiNzI3NDY2YTM4NTkxOTQ3ZDA1NmM5NTZlNTNlMDVjNjhhMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUU3xIy4d8tnL5oxBhk04qnqbyDj
Cr6nVntW5rCf0Qv/kMLy0Ek0SoZCtkkxESTXUpYlDD2vaIls9T604fyP7QI4RdnY
8CRwATf3S6WCQVsDZQsNvu1TmkY9KTDMBJOZz7JiTLxyubMAL74A6mmKk6C+KKKf
2v2/Wx6ckfoXT23IYX68dhYA720crIrpRyd6qzsPIWTKUpuSM8xVGaZGd0RVRHsn
qCbTm7No42gf4MGGaXrG/Kqj8y+GoIyHirlaWa4kUkbALLjZx2m4ARq+Gbr1D0m8
Eyz8t/1wgpBXhSouI5zSbgXma0iJ/HShdRxdovDDCIKK9yxEr7W3E9SqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYbcnRmo4WRlH0FbJVuU+BcaKDlMB8GA1UdIwQY
MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt
NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj
LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxV0Qhd5B
RDMxl7jDBUvqX51duOubXryuPIZ9YtOxVKQI1MwbfT/uV82Hllk1yh+RG25n5Ffw
uV3x4SQ96kFuT0A2xKyzzdJCobozFeEDz/HLgMoBVHBbzar2Er/7nzKS5MxyW6N+
UXPf5TEPCkA+BuehLlmjbGuaZV3ukxQmjUkkH1WskS8b1b4/Il8f6272RU72OiKD
GdCmJgAXms5TwyiidiIXy2umvfdDu/OzHTK76cBfybiLgf1ZyJfFFWPrXdszfyAy
5jcM4dfsm6Yg9XHjuSvTl8Zz6cu5uzOKhY2RQWLnQqP26JcZMc9L6jy3qEoEFAHT
syZzpFcFRvue4A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:09:43 2026 by rpki-client