Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: gD5TDQCXmgQGyx9oX3CEaXq8uMep5w3CpGnmULrtElI=
Subject key identifier: 11:44:3B:88:92:12:73:E8:3C:1A:C8:3C:36:EF:08:C4:84:93:CD:44
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 019CABD9EB9FD79E902C8B1040CE87C4BBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 0562
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: GwhtZFcnBUdex5er+GVt/Kcj0gE2qBkD4yx28mUcFr0=)
2: xlFYwotI5LT7U1ruSVgb-S5VJbc.roa (hash: q+/WCbLPl7YfFx8PdlPWZvXVYgpytcYGjRYRlu/2J98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:eb:9f:d7:9e:90:2c:8b:10:40:ce:87:c4:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=11443b88921273e83c1ac83c36ef08c48493cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:b1:68:07:71:6b:70:bc:8b:ff:17:34:29:
86:b2:50:a5:0c:51:75:19:b6:c6:08:72:7e:00:f3:
94:c1:9e:05:00:1e:76:5e:ff:e1:b5:4a:11:10:a5:
cf:37:56:03:27:ed:74:72:7e:a5:b2:f4:35:8b:89:
20:da:be:04:11:29:c3:21:89:fa:d6:82:ee:07:17:
68:e7:36:68:93:3a:23:29:04:e6:43:bc:85:d4:5d:
1e:ff:20:ea:7b:a4:2e:00:7e:eb:5c:09:c3:78:9d:
2d:e7:f0:a1:64:b3:cc:e0:5b:e8:bf:58:61:a6:04:
34:47:f2:94:5a:c8:98:aa:df:c9:ef:fc:6b:6a:ab:
aa:be:d2:13:6e:90:5d:45:e5:f1:5d:77:43:44:2d:
3f:39:53:00:1c:cf:0f:b8:75:fc:da:f8:40:9c:de:
cd:ef:0f:1f:53:05:02:cb:40:75:54:b6:74:0d:38:
22:86:a9:bf:aa:d8:a5:a5:f2:98:79:7a:48:84:09:
47:ca:2c:33:e7:4d:96:1a:0d:1a:0b:e3:09:93:91:
fb:f2:26:69:15:63:97:6e:23:bb:84:21:1e:b1:83:
42:a4:24:e2:5b:1b:7b:e8:3f:8a:cf:81:6c:18:60:
b1:b1:6f:dc:b2:87:6c:7d:88:62:e6:ca:82:39:a6:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:3B:88:92:12:73:E8:3C:1A:C8:3C:36:EF:08:C4:84:93:CD:44
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:75:1d:ec:cc:81:34:76:c4:47:25:19:93:90:f6:91:1a:
f4:7e:6c:76:c6:d7:1d:22:ad:ac:e7:c0:96:23:38:34:45:79:
d7:de:57:8d:47:d4:fc:19:cf:68:64:c9:23:21:21:4f:27:84:
5d:52:10:c8:fc:d2:90:4e:99:d2:72:db:07:59:84:29:29:d5:
31:e1:9c:c1:e7:7f:c9:09:21:68:2d:91:b1:2e:24:07:ad:db:
9e:fd:19:66:3c:30:74:54:f9:2e:fa:59:6f:11:2a:86:e2:a3:
2e:65:17:82:9c:a4:56:1b:7c:41:65:f7:8a:ba:c7:47:88:aa:
b5:a7:1f:57:43:33:f1:56:a1:de:20:5a:a0:9b:27:1b:82:42:
a8:0f:a2:03:9d:0d:75:20:e8:f8:1a:29:95:34:3b:e3:8a:f8:
85:1e:e1:a9:36:12:67:08:a7:95:5a:74:6f:d7:79:c4:28:21:
66:0d:06:c3:e0:9f:66:b1:9e:30:75:16:d7:b4:b1:5f:1c:18:
4e:00:b3:9d:6f:05:c8:50:50:ad:dc:84:61:35:c1:95:6d:2a:
40:26:2b:e4:0c:5c:5e:c2:48:10:c2:87:b8:9a:dd:68:c0:ee:
91:b5:8d:84:9d:b8:9b:61:47:25:d2:12:f5:2a:f0:8b:d0:36:
d3:14:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:22 2026 by rpki-client