Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: eLwvDNwRX7ibu8WilPOlJB9klxy4YgCUfAnp8c75f8k=
Subject key identifier: 06:9A:D2:B1:FE:B7:DB:8A:B5:A0:9A:2C:5D:0A:72:93:14:07:AB:87
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019FAA19E0124C623EE0357DB6F9CE27F07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 057A
Signing time: Tue 28 Jul 2026 19:00:50 +0000
Manifest this update: Tue 28 Jul 2026 19:00:50 +0000
Manifest next update: Wed 29 Jul 2026 19:00:50 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: NS7LwvDZz2thgbKRYCHL+pFoHDVzFD61Z1MLE8oxHWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:e0:12:4c:62:3e:e0:35:7d:b6:f9:ce:27:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Jul 28 19:00:50 2026 GMT
Not After : Jul 29 19:00:50 2026 GMT
Subject: CN=069ad2b1feb7db8ab5a09a2c5d0a72931407ab87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fc:38:11:f3:74:db:cc:62:8d:b7:78:bc:c1:
9c:d4:99:13:69:23:4e:f2:0c:45:1c:fd:a5:e9:69:
27:d5:80:ac:c0:f9:39:23:52:46:66:06:7c:81:b7:
9c:06:c5:a5:03:8d:ab:2c:3f:18:b9:96:62:c6:dc:
b4:6f:3f:0a:6a:01:e1:d4:45:82:eb:0c:c4:13:14:
3a:b4:f9:84:0d:f7:6e:3a:b5:fe:b8:b0:f7:46:40:
20:1f:a6:bb:2a:e0:a7:6f:24:3b:3e:8e:cc:7a:61:
40:4c:62:e8:71:16:ff:cf:b6:51:4f:40:46:ea:33:
17:43:eb:6d:67:0d:f5:1c:31:ea:04:89:c1:6e:62:
bb:2a:df:8e:ba:0b:c0:8f:ae:48:4d:e2:d6:95:19:
1c:01:1f:f6:19:ed:9f:17:58:14:6d:18:36:f3:49:
b0:d8:cd:81:dc:b0:2e:65:13:d5:eb:ee:01:3e:3f:
5a:6b:a1:1e:19:16:b0:d9:8e:c2:79:96:ed:85:20:
42:68:ea:ad:4a:aa:2c:09:58:48:27:64:0a:37:0c:
32:dd:e5:d6:9e:98:47:8c:65:bf:f7:99:c6:cd:e3:
14:c7:59:37:0b:2d:64:de:92:cd:60:74:f3:c6:64:
e4:35:3a:76:dd:b3:52:85:7b:4b:e7:dc:ba:e3:f1:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:D2:B1:FE:B7:DB:8A:B5:A0:9A:2C:5D:0A:72:93:14:07:AB:87
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:67:d6:85:fd:24:56:d5:e2:8f:42:2a:f5:9b:e8:81:2c:26:
4e:1a:ff:f1:b3:03:fe:58:26:e6:51:d9:81:13:14:24:72:90:
3f:21:ef:7b:7b:9a:8a:8b:5e:b8:50:21:8c:42:7f:10:00:3f:
e0:6c:7c:c7:a9:f2:77:17:e7:dd:4d:87:cf:6f:e7:5e:ea:7a:
c4:e2:41:0d:72:92:f4:6c:76:d2:35:35:8f:d8:ea:37:ba:0b:
4c:c6:f1:b5:5c:f5:55:07:25:b1:6f:74:fc:1f:02:98:ac:2a:
c0:82:b5:29:4d:06:56:8a:24:ce:e4:f7:fe:c2:12:9c:4f:e3:
65:69:ff:7f:a8:63:8c:0e:e9:04:77:19:71:5e:1e:2d:19:e4:
fe:03:33:d3:ce:db:d9:65:a5:e6:c3:a9:d1:6f:a1:12:48:78:
1b:ce:17:90:ea:96:69:7c:43:d4:90:9a:3d:fe:92:fd:49:27:
23:aa:af:04:5e:66:20:88:f8:32:ec:ec:8b:f0:49:11:0e:c6:
7f:31:a6:13:f5:e0:e6:cb:0a:56:dd:82:d9:03:6b:24:b2:d9:
1a:96:f0:1b:36:61:e6:49:53:45:15:3b:3a:ed:a1:bc:f0:20:
59:95:a6:3a:37:a2:01:ad:2a:1e:24:51:5a:0f:4d:24:16:3a:
60:90:eb:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGeASTGI+4DV9tvnOJ/B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjYwNzI4MTkwMDUwWhcNMjYwNzI5MTkwMDUwWjAzMTEwLwYDVQQD
EygwNjlhZDJiMWZlYjdkYjhhYjVhMDlhMmM1ZDBhNzI5MzE0MDdhYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvw4EfN028xijbd4vMGc1JkTaSNO
8gxFHP2l6Wkn1YCswPk5I1JGZgZ8gbecBsWlA42rLD8YuZZixty0bz8KagHh1EWC
6wzEExQ6tPmEDfduOrX+uLD3RkAgH6a7KuCnbyQ7Po7MemFATGLocRb/z7ZRT0BG
6jMXQ+ttZw31HDHqBInBbmK7Kt+OugvAj65ITeLWlRkcAR/2Ge2fF1gUbRg280mw
2M2B3LAuZRPV6+4BPj9aa6EeGRaw2Y7CeZbthSBCaOqtSqosCVhIJ2QKNwwy3eXW
nphHjGW/95nGzeMUx1k3Cy1k3pLNYHTzxmTkNTp23bNShXtL59y64/F2mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaa0rH+t9uKtaCaLF0KcpMUB6uHMB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2fWhf0k
VtXij0Iq9ZvogSwmThr/8bMD/lgm5lHZgRMUJHKQPyHve3uaioteuFAhjEJ/EAA/
4Gx8x6nydxfn3U2Hz2/nXup6xOJBDXKS9Gx20jU1j9jqN7oLTMbxtVz1VQclsW90
/B8CmKwqwIK1KU0GVookzuT3/sISnE/jZWn/f6hjjA7pBHcZcV4eLRnk/gMz087b
2WWl5sOp0W+hEkh4G84XkOqWaXxD1JCaPf6S/UknI6qvBF5mIIj4Muzsi/BJEQ7G
fzGmE/Xg5ssKVt2C2QNrJLLZGpbwGzZh5klTRRU7Ou2hvPAgWZWmOjeiAa0qHiRR
Wg9NJBY6YJDrRw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:30 2026 by rpki-client