Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
File: MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft (raw, json)
Hash identifier: fcELB5gbsJufTQ2WO5ylss8Lbwdz2T7u3KSytTjXMZo=
Subject key identifier: 7B:60:EE:E2:C0:08:DC:C0:CD:26:44:C5:DB:0A:DA:76:52:73:CC:F1
Authority key identifier: 32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
Certificate issuer: /CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Certificate serial: 019F85D67766C3B3A7E5A58CCB965AFFC963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:52 +0000
Manifest this update: Tue 21 Jul 2026 18:00:52 +0000
Manifest next update: Wed 22 Jul 2026 18:00:52 +0000
Files and hashes: 1: 1VnK2YTEFn9UK9IEnOkG7BB0Zog.asa (hash: LxLh8yYDehJtP6uqGzj0PwTIPOUL3sLV/nu3Wj0/ync=)
2: BxIAgGugg3mdvw83vZjF2_Ww0jI.roa (hash: Omln+goGD9roS6a+IqM9CDEjdWrKRmuSfidI8ZCm4v0=)
3: MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl (hash: jYFIo0+wMtB9Dfb4Paw1IfefnZjpBVURDP1ZxRpdi2w=)
4: WQwpfImRvEjprBMZ7RT8VyCcJJE.roa (hash: cJJ+wKMG21Vgdcj91hphdVBR1WAPx0N5h9uVseAGk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:77:66:c3:b3:a7:e5:a5:8c:cb:96:5a:ff:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Validity
Not Before: Jul 21 18:00:52 2026 GMT
Not After : Jul 22 18:00:52 2026 GMT
Subject: CN=7b60eee2c008dcc0cd2644c5db0ada765273ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:8e:89:0f:0d:59:e6:ad:04:4b:61:f9:36:
9e:a1:67:c6:dd:72:9a:5e:ed:c7:94:2a:f1:71:13:
3f:ac:7e:13:10:72:bd:56:c0:28:4f:79:09:29:3e:
f6:52:19:a2:0f:7a:ce:f3:e6:f4:ee:51:2b:cf:47:
70:cc:df:38:c2:53:18:9d:8e:34:06:63:8a:77:74:
a5:d5:44:7a:8f:c5:61:3d:06:37:05:da:ab:ed:aa:
f0:d7:82:5f:b9:1c:d2:76:28:44:87:7b:10:c9:c0:
86:d3:74:90:98:66:ec:47:aa:75:8e:85:bc:a7:87:
e0:02:e5:0e:b0:3c:f5:a1:83:62:85:25:0c:bd:3e:
31:0e:e3:76:13:64:f0:60:6d:11:34:90:0e:16:94:
47:a4:ea:88:7c:32:ea:73:33:d4:4a:4f:2f:2c:9e:
6f:b0:4f:b8:f0:01:24:e2:ca:18:a7:d4:b8:a5:9d:
20:4e:b8:79:eb:4a:48:a1:32:39:f7:c6:5c:c7:69:
e1:ff:c0:c8:d4:d3:3a:50:b9:9a:60:05:8f:38:23:
0e:df:bf:af:eb:82:a2:27:f2:34:4f:2e:8d:70:c9:
c3:75:a9:f7:99:aa:62:2d:76:1c:61:01:a7:07:13:
2b:1b:77:b9:3f:8d:ad:5a:ac:d0:02:f8:5c:72:b7:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:EE:E2:C0:08:DC:C0:CD:26:44:C5:DB:0A:DA:76:52:73:CC:F1
X509v3 Authority Key Identifier:
keyid:32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:b0:d8:0e:e5:8f:42:6a:e3:ba:b2:55:13:24:db:43:3e:
3d:d2:2b:ba:31:24:79:0a:05:fa:32:7c:25:c9:e4:38:6b:36:
ac:c2:9b:80:a5:71:dd:41:22:7e:2a:21:2a:46:de:49:04:b8:
70:5e:68:47:01:ed:60:e9:ef:3f:a9:ef:a7:75:56:2d:0b:a5:
96:f6:34:fa:ed:28:a7:91:7a:f1:c0:6f:fd:17:10:14:8e:22:
51:c4:d5:47:61:4b:bf:ba:62:4f:84:cc:3b:2a:4f:99:3d:a8:
ad:f2:bf:a4:c9:27:9c:1f:ef:8d:3c:a8:8c:39:bf:5d:5d:c0:
91:d3:68:d7:7f:20:f1:be:5c:c5:53:c2:51:e7:ae:85:1a:bf:
71:58:53:5f:4c:6b:0c:9b:5d:76:b1:0b:56:a5:e6:71:54:8c:
c7:14:3c:49:9f:bb:7c:ef:9d:9e:90:38:21:01:61:49:03:ac:
ba:eb:e5:ba:52:c7:f3:14:2f:36:38:55:30:7f:33:10:9b:1a:
cb:6e:96:fa:38:bc:a0:39:da:dd:7e:76:87:f7:cd:18:6f:77:
a6:13:ca:74:37:b1:ab:23:42:82:e7:fe:d2:40:ca:05:29:3c:
96:09:42:c4:b6:98:f2:e6:52:61:fa:99:44:0b:9e:11:6d:01:
b6:32:9a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1ndmw7On5aWMy5Za/8ljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTA2MjBkOTg4OWZmYTFkZDJlODkxMWM0MTZlZWJjYzk3
MTFkMmYwHhcNMjYwNzIxMTgwMDUyWhcNMjYwNzIyMTgwMDUyWjAzMTEwLwYDVQQD
Eyg3YjYwZWVlMmMwMDhkY2MwY2QyNjQ0YzVkYjBhZGE3NjUyNzNjY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtSOiQ8NWeatBEth+TaeoWfG3XKa
Xu3HlCrxcRM/rH4TEHK9VsAoT3kJKT72UhmiD3rO8+b07lErz0dwzN84wlMYnY40
BmOKd3Sl1UR6j8VhPQY3Bdqr7arw14JfuRzSdihEh3sQycCG03SQmGbsR6p1joW8
p4fgAuUOsDz1oYNihSUMvT4xDuN2E2TwYG0RNJAOFpRHpOqIfDLqczPUSk8vLJ5v
sE+48AEk4soYp9S4pZ0gTrh560pIoTI598Zcx2nh/8DI1NM6ULmaYAWPOCMO37+v
64KiJ/I0Ty6NcMnDdan3mapiLXYcYQGnBxMrG3e5P42tWqzQAvhccrdx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtg7uLACNzAzSZExdsK2nZSc8zxMB8GA1UdIwQY
MBaAFDIQYg2Yif+h3S6JEcQW7rzJcR0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhCaURaaUpfNkhkTG9rUnhCYnV2TWx4SFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvTWhCaURaaUpfNkhkTG9rUnhCYnV2TWx4SFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvTWhCaURaaUpfNkhkTG9rUnhCYnV2TWx4SFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1Ww2A7l
j0Jq47qyVRMk20M+PdIrujEkeQoF+jJ8JcnkOGs2rMKbgKVx3UEifiohKkbeSQS4
cF5oRwHtYOnvP6nvp3VWLQullvY0+u0op5F68cBv/RcQFI4iUcTVR2FLv7piT4TM
OypPmT2orfK/pMknnB/vjTyojDm/XV3AkdNo138g8b5cxVPCUeeuhRq/cVhTX0xr
DJtddrELVqXmcVSMxxQ8SZ+7fO+dnpA4IQFhSQOsuuvlulLH8xQvNjhVMH8zEJsa
y26W+ji8oDna3X52h/fNGG93phPKdDexqyNCguf+0kDKBSk8lglCxLaY8uZSYfqZ
RAueEW0BtjKaTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:03:42 2026 by rpki-client