Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: ZlvRVXdE8Nhqwm0uteyfFxCbZcpkgz+dxxzCEz48Yfo=
Subject key identifier: 30:21:F0:CB:59:68:15:8F:36:F0:20:F3:9E:1D:57:D4:04:BE:6E:82
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019D33E35FC2A7548ACD3B21595658C3DF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0F73
Signing time: Sat 28 Mar 2026 10:00:32 +0000
Manifest this update: Sat 28 Mar 2026 10:00:32 +0000
Manifest next update: Sun 29 Mar 2026 10:00:32 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: KtgLr0AtVnZaHSD0G9r5pK+bQfEtMr2DCS//YUhLptQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:5f:c2:a7:54:8a:cd:3b:21:59:56:58:c3:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Mar 28 10:00:32 2026 GMT
Not After : Mar 29 10:00:32 2026 GMT
Subject: CN=3021f0cb5968158f36f020f39e1d57d404be6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:bc:5c:74:c1:06:f5:37:18:a1:0d:62:29:
e2:fc:13:11:dd:49:63:ca:b3:7f:72:dc:be:af:dc:
f2:53:6c:d3:a9:c1:08:82:29:86:30:5d:e0:1a:46:
57:f5:c5:2b:11:44:ee:80:aa:a7:ab:53:81:7b:96:
c8:44:42:48:58:8a:83:06:7e:e8:b3:4e:f4:61:01:
4f:e3:72:fe:c1:0e:7f:70:0b:7c:86:bf:30:be:f7:
48:0e:a6:11:3c:0a:e0:d4:bf:1c:73:02:b7:9f:34:
a4:f2:3b:04:94:8a:56:ac:72:4b:f0:ff:54:db:8d:
1f:c9:53:32:1e:d7:e6:16:82:46:e0:10:92:fb:1a:
db:b9:e2:e7:28:b5:1e:55:b1:e5:8e:c9:5a:bf:e7:
48:54:54:05:8d:a4:eb:6b:e2:c5:1e:26:c9:7f:a3:
ca:b2:e3:45:26:00:7c:13:ee:1f:b0:25:55:e9:fd:
64:8a:01:3b:ee:6a:bb:75:d0:ab:e6:51:a9:bb:2f:
6c:b9:37:a1:3e:ac:aa:3b:dd:b9:d0:7b:25:9d:c6:
1e:13:51:a3:b0:cd:a2:76:a3:72:33:23:79:9d:07:
b6:5e:37:a6:0d:b5:25:ca:3e:8e:30:76:97:ed:6c:
77:61:3d:6a:ec:85:ed:40:4a:f9:2d:d7:7d:8e:b6:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:F0:CB:59:68:15:8F:36:F0:20:F3:9E:1D:57:D4:04:BE:6E:82
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:46:0a:d2:18:40:d6:71:d1:f9:e8:b5:38:a2:d8:33:a3:
5b:0c:9c:fb:2b:65:cb:27:c7:23:50:d1:91:2b:e9:4f:fd:6c:
a7:40:98:28:39:5a:f7:a7:1f:18:d4:35:18:8f:3c:33:06:c5:
39:85:87:5a:52:6f:5f:c6:44:cb:f8:f6:13:85:d2:99:2a:96:
32:90:ed:94:7e:5c:f2:16:8f:f5:f8:4f:20:91:0a:34:f7:2d:
dd:15:91:78:c3:30:ac:3d:e9:92:04:77:87:dc:47:a8:cc:9c:
af:16:dd:dd:ed:be:6d:62:62:93:69:ef:9a:73:7a:ae:e1:5f:
e9:7a:91:5a:e4:14:e4:4f:4e:a7:1b:bf:23:c9:f4:36:67:2c:
4b:7b:ca:75:99:a4:76:e6:dd:f5:40:23:2d:fc:ca:10:46:89:
e4:79:0a:69:3e:e7:81:7f:f0:75:52:a9:0b:8c:b6:db:20:f9:
bf:90:38:be:0a:11:cc:3a:62:c6:38:17:66:f0:8b:4e:e3:e6:
70:e8:5b:e1:99:2d:ea:18:3f:2b:33:a2:4f:15:93:d7:87:a2:
1c:63:7e:b4:5f:5f:29:ed:1e:d5:47:0f:c0:fc:b4:2f:3a:19:
25:f9:7b:24:44:57:14:10:de:b6:10:7b:8b:e0:88:f0:26:97:
e7:4b:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:46 2026 by rpki-client