Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: qby3ysfPkGdnO00233j6i6jqEfLwO6fmZanQs8HdGjo=
Subject key identifier: 8F:B1:E1:7C:4C:BE:58:45:5C:0B:C9:36:7D:ED:FE:F7:BD:F4:8C:DD
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019E1F7F64B5CDFD067F46BD4F7B792E5942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0FED
Signing time: Wed 13 May 2026 04:01:42 +0000
Manifest this update: Wed 13 May 2026 04:01:42 +0000
Manifest next update: Thu 14 May 2026 04:01:42 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: I0rqwQdtU0cgdA+mj2mIxW5ndJgs31J9LQsG3ULtQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:64:b5:cd:fd:06:7f:46:bd:4f:7b:79:2e:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: May 13 04:01:42 2026 GMT
Not After : May 14 04:01:42 2026 GMT
Subject: CN=8fb1e17c4cbe58455c0bc9367dedfef7bdf48cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:6f:55:84:aa:65:aa:6b:c8:61:49:f3:43:
b7:1b:4c:48:a3:af:ba:c9:6d:80:d2:43:09:d2:53:
a8:11:0d:9b:20:e5:c1:bb:ef:f6:f4:16:8f:8f:fb:
bd:09:c5:00:36:38:75:d9:64:9a:c9:2c:ef:fc:ce:
d4:5f:02:b3:97:fd:7e:73:0d:1b:2b:4d:fc:98:1d:
af:45:e6:7b:4e:48:93:09:a7:4e:5c:70:b9:4f:85:
68:da:92:92:76:3e:43:46:39:b4:84:df:c0:c8:a4:
fa:bb:59:0c:c9:78:66:80:1b:d5:78:7e:9f:55:8f:
f9:58:f1:0f:77:4c:c2:9f:9a:10:82:68:69:30:58:
67:83:65:66:2c:9d:f2:a8:7a:98:26:a1:40:e8:9c:
0b:f5:78:7c:44:8d:84:60:96:88:f4:26:1b:bb:ad:
ec:60:21:21:a6:b7:14:88:f2:bb:87:ef:c7:b8:ec:
95:de:1b:83:2e:10:1e:7e:7d:1a:70:d2:67:b8:fc:
c2:99:0a:d1:dc:48:68:80:fb:49:f4:10:28:13:ff:
c2:d7:16:5f:66:1b:28:5a:88:bf:11:f4:74:03:0e:
e6:c6:e0:71:9b:1f:a1:ba:7d:a5:36:53:1e:03:c4:
b9:83:05:36:f4:cd:f6:38:55:33:c9:72:8a:78:ee:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:E1:7C:4C:BE:58:45:5C:0B:C9:36:7D:ED:FE:F7:BD:F4:8C:DD
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:ac:9c:af:00:d4:12:80:d4:de:41:fb:d8:62:b2:3b:41:
03:5e:8d:ce:c5:4c:2f:9f:10:4e:00:c6:40:0d:c8:49:3f:ee:
a1:48:7f:4c:b9:8b:9f:af:91:72:c0:19:14:f7:65:8f:ca:45:
5a:1d:6f:d5:0f:13:39:c0:d9:73:6b:ba:94:da:dc:74:4a:f9:
ee:5d:42:46:6f:25:82:30:e2:d6:b8:55:97:62:11:d3:68:33:
54:83:bd:3d:d9:83:fb:20:35:1b:d1:c0:6c:93:6d:9c:27:ed:
ec:24:d7:bc:e7:9d:00:cc:f5:7b:dd:9b:23:98:0f:72:a5:b2:
97:77:39:0f:0f:c2:05:01:2b:f3:51:7c:98:45:82:4b:f5:95:
ad:6e:c9:87:c5:ea:31:38:2f:26:b0:bb:97:0a:6c:49:d2:4f:
fc:70:d4:c0:2a:55:1a:41:e1:18:51:23:00:86:e4:3e:33:0f:
a8:c2:4f:ee:cf:90:8b:87:1c:50:da:6e:02:bc:b2:9d:a8:09:
dd:a3:e5:8e:4a:34:36:10:3e:46:af:11:05:34:00:4b:42:14:
77:3b:23:9e:0b:fd:8d:8d:9b:25:0d:67:87:7b:15:00:a3:f9:
c6:d2:a2:8e:a4:5d:fa:bc:5e:ad:19:f7:5c:29:ae:60:9d:6c:
d0:1d:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:27 2026 by rpki-client