Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: dpRJJR9sk9ZwvVSavJlM4fQiI6I1KKkxTChs8LHFRrM=
Subject key identifier: 57:76:CB:7B:C8:9B:7A:37:87:FD:59:1C:0B:EB:D9:B9:9C:D7:91:1E
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019FF6B4D34030469A5842A6FE5080D6484A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 10E1
Signing time: Wed 12 Aug 2026 16:01:13 +0000
Manifest this update: Wed 12 Aug 2026 16:01:13 +0000
Manifest next update: Thu 13 Aug 2026 16:01:13 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: bYK67NSQMCEJm3CIRYjYSM9JB1V1bnpY+CzVn+EhSWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b4:d3:40:30:46:9a:58:42:a6:fe:50:80:d6:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Aug 12 16:01:13 2026 GMT
Not After : Aug 13 16:01:13 2026 GMT
Subject: CN=5776cb7bc89b7a3787fd591c0bebd9b99cd7911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:6c:e2:32:9e:f7:29:76:fa:d5:c7:23:37:
c1:7e:18:d4:72:da:41:8d:f2:32:1f:fa:f0:1c:3b:
33:ba:ce:ca:c3:ad:61:b3:f1:29:2f:b4:c1:2a:7b:
14:bb:a1:84:ff:81:9e:98:32:89:9c:cd:67:c1:0c:
c2:f1:75:8d:3c:6a:98:87:d5:27:b7:f5:3b:91:1f:
70:ab:f1:8a:f0:9d:39:df:4c:af:62:ae:ad:cc:32:
25:03:29:da:77:41:8b:f1:a5:5c:56:e6:77:6c:ea:
c7:5f:c4:37:ef:65:61:80:0c:e6:b7:b2:52:95:01:
4c:c0:57:65:cb:dd:6a:4f:b3:91:b1:3a:ed:19:1b:
2a:15:96:87:3f:16:10:09:bb:39:98:30:61:6a:04:
6e:c1:be:a4:a8:77:76:3d:b1:12:75:7e:5c:ac:b5:
17:11:11:d1:b4:2a:22:5d:34:da:23:4d:cb:e3:36:
45:dc:09:ab:da:33:42:cf:b0:37:76:06:04:e4:e5:
29:c3:ef:c2:e8:69:47:8e:ca:a1:f5:f0:1f:ca:73:
44:37:84:a2:df:9d:b0:26:5b:6a:b8:8d:60:9b:51:
f1:a7:f7:87:52:1f:21:49:ff:3c:96:e7:38:01:0e:
f1:26:16:0b:d6:46:a3:57:25:61:aa:6d:05:a0:15:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:CB:7B:C8:9B:7A:37:87:FD:59:1C:0B:EB:D9:B9:9C:D7:91:1E
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:c6:0c:f7:9b:10:6c:ff:9c:a1:3a:37:4d:2a:fa:b6:e3:
a5:cf:11:38:34:2e:a2:46:d3:9d:24:98:ac:c6:7e:34:3b:6a:
03:ee:7a:8a:20:20:fc:4d:11:84:38:a2:0d:1d:85:4a:2e:8c:
b3:6e:22:90:cc:70:3c:28:24:b9:e7:f2:f0:33:8e:f6:16:6d:
f1:91:ea:f7:59:98:af:01:5c:7f:bf:07:3e:e5:a4:f0:0b:a7:
9b:d7:29:47:e7:6a:1c:e3:aa:53:53:29:d0:08:f3:a3:99:8c:
48:58:ea:2a:0f:8c:e9:12:9f:2a:9b:82:69:b2:26:bb:4b:36:
3d:b5:c2:4e:df:62:fb:36:e4:73:aa:64:97:7f:81:84:8f:de:
57:c3:41:f0:eb:f5:76:be:7c:63:12:aa:fd:ad:60:65:a4:e9:
6b:3c:38:51:0f:c1:26:5d:ad:b8:8e:33:18:4b:2d:16:a3:e3:
c3:8b:e1:8f:a0:8d:ba:eb:b3:2a:41:d5:bb:8c:12:d9:ce:f0:
d2:8b:7d:6a:19:b5:2f:dc:e4:18:26:97:ae:49:ad:c9:a3:b0:
f6:89:a1:99:39:68:42:71:79:4c:73:3d:08:82:20:5f:b5:1a:
5d:cd:09:aa:d1:f8:db:13:4e:de:d8:1e:19:ee:40:3a:d7:8b:
18:07:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:14:50 2026 by rpki-client