
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: M8L0KgAhv4mmDH6Lcl4o1D+mt2tNKYg9pldmm2O5ubI=
Subject key identifier: 3B:9F:06:D5:A8:C6:41:B3:D5:D7:E9:A4:AD:94:B9:C0:B1:64:06:5A
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 019FAD88F03684532243A0006AED2DD744D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 17FD
Signing time: Wed 29 Jul 2026 11:01:00 +0000
Manifest this update: Wed 29 Jul 2026 11:01:00 +0000
Manifest next update: Thu 30 Jul 2026 11:01:00 +0000
Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: Sgm5XDFOT2s/S3eaHSobK/pXDPAqSS2yR4glgS47Ifw=)
2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:f0:36:84:53:22:43:a0:00:6a:ed:2d:d7:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Jul 29 11:01:00 2026 GMT
Not After : Jul 30 11:01:00 2026 GMT
Subject: CN=3b9f06d5a8c641b3d5d7e9a4ad94b9c0b164065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:2f:c2:33:2a:be:01:38:8c:57:4d:f9:86:
fe:d8:08:b6:56:e5:6f:4d:ba:e7:43:32:4c:55:5a:
47:c5:03:e7:aa:9a:8b:fb:a4:d9:58:fc:a3:4f:50:
a1:08:6b:2b:34:3c:cf:17:71:e1:cb:4c:f9:23:80:
8a:11:d0:0f:42:e5:0b:72:d1:73:2f:e5:d6:a1:ce:
d5:08:5d:61:b8:48:03:22:41:13:ac:48:1c:ad:fd:
e9:ba:43:26:68:11:ad:02:b9:31:49:9c:8c:21:08:
2b:4b:06:91:75:c5:17:1b:3e:72:e6:35:1d:d8:97:
73:04:09:f2:a4:9d:61:e4:3e:1d:a7:b9:8e:1a:00:
ee:29:ff:f9:7b:85:80:5b:b7:13:68:96:36:e5:74:
42:e7:76:93:9d:27:38:f2:bc:be:4b:19:72:e7:a8:
c5:59:53:4a:a8:ff:b1:96:e2:1d:d6:61:dc:1c:62:
48:2d:ad:db:25:15:69:e8:19:6d:50:a5:06:6b:da:
59:7c:e5:4f:8d:10:15:7a:c3:8a:74:9f:d7:ea:43:
03:8c:b6:52:56:96:53:6b:1a:4d:2b:6d:79:0c:cf:
c8:f3:31:73:89:fa:86:34:2e:b3:92:c8:c9:04:42:
04:28:7f:c7:ad:9b:38:f4:f7:c5:4f:0a:ec:84:fc:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:06:D5:A8:C6:41:B3:D5:D7:E9:A4:AD:94:B9:C0:B1:64:06:5A
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:28:76:90:18:0b:ad:d7:1a:07:48:90:e7:ff:9a:20:f8:
8b:0f:11:01:4c:7e:1a:1a:7b:74:06:c4:96:0c:f5:2e:b6:96:
37:21:c2:25:54:f8:6a:43:43:1d:fb:71:5d:c7:92:79:de:c6:
16:17:c3:f1:e5:b6:ce:cf:16:56:f6:02:23:c8:35:7e:bc:36:
9c:5e:e5:22:50:e5:3b:03:a1:8a:19:20:04:97:a8:23:72:f6:
a0:99:01:39:8e:f6:9d:49:cb:a9:fc:fd:f0:22:d9:e0:75:b8:
6e:da:89:2c:e2:c0:00:cc:c6:26:60:87:11:89:ea:90:1a:f6:
d0:60:5f:4b:29:55:da:59:fb:ff:35:bb:5d:25:13:9f:bc:a2:
10:c2:82:8c:84:03:37:5e:fa:5d:23:63:56:c0:91:75:92:b0:
a6:b7:c1:e7:f0:47:44:42:28:b4:a4:18:60:cb:57:41:71:6f:
a9:75:e3:84:0b:60:53:58:4d:7b:c7:19:07:b8:e8:06:b4:22:
65:21:a5:f8:ec:e3:17:bf:19:ec:84:05:6f:1c:40:3e:3c:06:
3b:d9:f9:84:db:88:0c:1f:9d:d4:4a:12:ad:e6:ee:2d:19:2c:
8a:41:df:d2:af:da:48:bc:48:2c:09:c4:04:24:f4:de:db:ab:
57:7e:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:25 2026 by rpki-client