Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: J3UpFD0DM4MQR6JR9x4DZlxqIoPSFFH3WgN1yOyqVPg=
Subject key identifier: 15:5B:1C:E3:23:D7:B9:F5:D6:CB:BE:CD:2D:43:C1:2C:CA:76:BC:DA
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 019CAEDA597A8CFFCDB1FE53FF0898633BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 1670
Signing time: Mon 02 Mar 2026 14:01:11 +0000
Manifest this update: Mon 02 Mar 2026 14:01:11 +0000
Manifest next update: Tue 03 Mar 2026 14:01:11 +0000
Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: IE8BikFl7+LA8edeJV3U6tVrl3rIGmX7LNXq+2Mk+Y0=)
2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:59:7a:8c:ff:cd:b1:fe:53:ff:08:98:63:3b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Mar 2 14:01:11 2026 GMT
Not After : Mar 3 14:01:11 2026 GMT
Subject: CN=155b1ce323d7b9f5d6cbbecd2d43c12cca76bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:e1:2b:82:87:0b:7f:36:9f:a7:74:0b:66:
98:0b:0f:0e:65:eb:ca:6f:28:7f:69:22:48:e1:8a:
03:3b:a9:45:27:a6:f6:66:0d:6b:d7:3e:af:b9:d7:
90:d8:3d:af:6d:d2:0e:7f:06:eb:95:e5:67:ce:52:
34:13:c9:eb:eb:75:76:97:98:63:d3:91:72:44:e0:
9f:3b:be:93:55:24:fb:e8:ba:2e:3c:98:34:2e:86:
a6:34:81:00:18:cc:04:5f:e3:9e:3b:6a:03:96:3c:
7b:ea:7c:a3:11:1c:e5:91:6c:9a:55:86:55:2b:59:
f8:16:7e:91:f5:4e:01:db:d8:a4:46:77:ba:e0:6f:
0e:08:8c:77:da:f9:2d:5a:ab:73:8b:e5:4a:42:9b:
42:b6:e7:b9:ee:d3:95:34:59:10:54:60:62:00:7b:
34:b2:ad:e5:bb:c2:c3:53:f2:ee:6b:d3:6f:8e:4f:
7e:62:b3:8a:3e:72:b9:cc:ce:be:db:22:44:73:ad:
62:4a:49:c1:21:a6:28:53:ae:d8:c6:ae:a7:95:d0:
19:f8:1f:7f:44:b8:c2:6f:93:c6:d2:12:79:4a:33:
f8:3c:46:eb:e9:43:76:22:6a:6c:e9:34:50:5c:b2:
a6:69:d3:25:73:0b:4b:31:d8:f8:62:c8:46:ea:fd:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:1C:E3:23:D7:B9:F5:D6:CB:BE:CD:2D:43:C1:2C:CA:76:BC:DA
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:7a:8f:05:d3:68:8b:99:a0:9c:08:5f:b7:98:d4:a8:78:
62:6c:2e:ca:17:e3:07:e2:07:f9:d3:e2:9c:ad:34:6a:f2:12:
31:b8:fd:9b:b7:d5:b4:7e:df:d0:1e:10:55:67:5a:51:48:d8:
8a:30:7f:67:ab:17:c7:36:bd:f3:59:44:a3:37:02:45:9b:3e:
08:0f:3c:d1:54:b8:14:f7:38:11:73:ef:f5:e2:74:cf:8a:71:
d3:18:48:73:c5:66:90:b6:51:e5:c8:d6:14:5b:1f:8e:00:ec:
65:57:e1:14:ee:03:f4:82:4c:b1:99:18:63:c0:cf:0d:ed:19:
2e:ab:69:2a:40:5a:7a:ea:e1:5b:20:f6:f3:e8:d1:cb:b6:1d:
40:d1:10:ea:0b:0c:12:f4:c7:65:98:19:2a:57:6d:d0:da:96:
34:01:54:8d:7b:6c:dc:ff:04:ea:ab:ee:86:71:70:3c:68:2e:
61:3d:3c:23:3d:3b:c9:d0:65:02:7d:19:89:42:de:ea:b5:da:
e0:ea:7a:96:f5:d0:3b:39:52:05:0d:41:b4:03:37:75:51:60:
06:7c:5f:9c:e8:e8:69:26:3e:be:73:89:a5:f2:15:b2:89:a4:
a5:39:73:93:fc:f1:da:20:7d:0c:fc:0d:3b:b6:26:cd:41:66:
96:d2:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:45 2026 by rpki-client