Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: ZJUyFAQuEQkUOEhuMxggFrGM3sJF8FwHfmwNhNl5nwo=
Subject key identifier: B7:9E:D9:33:80:B8:94:D8:D0:D4:DC:5D:77:8B:FD:BA:CF:5C:C2:5E
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 01A110A942EBBE03FA673069F3193AA11C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 1173
Signing time: Tue 06 Oct 2026 10:01:30 +0000
Manifest this update: Tue 06 Oct 2026 10:01:30 +0000
Manifest next update: Wed 07 Oct 2026 10:01:30 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: hX6A2M6cQBD6IaXQNlLVtfJe5X/8c2x51neFELCVT1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:42:eb:be:03:fa:67:30:69:f3:19:3a:a1:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Oct 6 10:01:30 2026 GMT
Not After : Oct 7 10:01:30 2026 GMT
Subject: CN=b79ed93380b894d8d0d4dc5d778bfdbacf5cc25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:a5:9b:63:38:cb:dd:62:ea:90:67:ef:47:
a7:09:4a:23:5d:5f:62:0d:0e:c0:77:4d:c1:4b:b1:
59:14:1c:28:6f:b5:e9:b1:39:05:5a:98:9f:c3:0a:
c9:c1:f1:c9:24:9b:b8:76:9d:32:4f:82:9c:84:1a:
02:88:66:17:6e:91:8f:66:bb:6c:83:42:c0:dc:2c:
26:5b:68:68:b9:7d:6c:53:cf:19:05:ad:6f:28:dd:
b5:b4:35:9d:c5:b4:fc:58:c3:89:19:db:bc:9e:6f:
4b:dc:ba:75:9d:91:c7:fa:38:ba:03:15:24:e1:5d:
ce:fd:56:72:75:08:d7:1b:7b:a7:e4:6a:49:f0:e1:
d6:04:d7:72:d9:fa:9a:0e:c5:a5:3e:33:b3:87:80:
ea:a0:45:ff:e8:a6:b1:e9:b6:00:6a:77:33:dd:cb:
87:01:ad:5b:83:62:d7:7a:e2:d3:e0:89:23:a5:23:
a2:c8:5b:61:bc:4c:40:ea:cb:eb:48:b1:99:92:0b:
a3:18:8c:81:bc:af:73:55:7e:88:65:11:f3:1a:28:
2a:0a:58:75:57:f4:5b:92:de:e0:ae:c0:da:2a:f2:
3a:eb:c8:1b:91:80:98:e8:58:f2:08:b4:bc:48:d5:
9d:37:d9:92:c1:ad:e2:00:fc:69:cd:c2:d9:dd:22:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9E:D9:33:80:B8:94:D8:D0:D4:DC:5D:77:8B:FD:BA:CF:5C:C2:5E
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5a:4a:a3:30:17:f0:6f:96:7c:81:d6:c1:ab:80:f3:67:b6:
7b:1a:91:23:5c:a5:33:72:df:43:47:ef:c2:90:f6:95:ab:3a:
cf:2d:a7:96:78:c5:31:63:62:ad:cf:7d:41:ca:99:f8:d9:cd:
cc:ec:90:6d:1f:f9:49:7c:c7:1d:c5:42:d0:3f:e2:41:87:7a:
fb:d5:98:b6:40:f9:62:46:e0:7f:bd:f2:17:ce:a1:53:78:f5:
ff:cd:19:c0:cb:81:9b:09:44:bf:d5:bd:55:e1:3b:b7:33:42:
93:9f:d0:f0:70:17:12:93:ed:b7:af:6e:07:bc:a4:d2:13:b4:
0a:40:c0:4a:63:57:e5:1d:7a:46:ab:60:f3:8f:02:5c:22:b5:
09:cb:ff:cd:95:94:75:d5:6c:e3:d0:96:0a:ef:35:81:cc:52:
a5:83:27:f1:22:81:09:73:4d:f7:7c:94:09:4c:eb:70:6a:f6:
12:35:34:22:f6:5a:91:a6:9a:75:45:95:ec:f7:a9:eb:b0:8b:
05:de:03:c6:8b:7a:57:5a:2a:e5:ed:db:59:20:fd:c6:bd:bd:
79:87:70:53:ce:c4:d7:7a:bf:54:77:5d:0a:f1:b2:85:ce:e0:
18:77:4e:c0:00:dc:c1:07:de:25:c6:f0:18:03:92:66:9a:71:
78:6e:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:28 2026 by rpki-client