Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
File: MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json)
Hash identifier: OQHWJaFvmVXcA1o5frQhalkAsxVI9l2yzOqWmAl0/Nk=
Subject key identifier: 20:A3:BD:70:39:D4:BE:23:B4:BD:E7:FC:98:25:EA:3E:10:92:3E:1E
Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
Certificate issuer: /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Certificate serial: 019D389BCA27E26C5265E6D57FB374B262D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
Manifest number: 067A
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: sPHGCxPjPUMl05FefiYjWc/ldSyputO3u1d2RJfBuZs=)
2: e6hHV9sCUc7s1khP8XoEDf8NVHo.roa (hash: TMmfCLj9EVDBcAPJhOcf7tnYbYq8PeLIXmBm9+66U44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:27:e2:6c:52:65:e6:d5:7f:b3:74:b2:62:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=20a3bd7039d4be23b4bde7fc9825ea3e10923e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:5e:99:e1:9d:8e:6f:6c:bd:a3:71:0b:8d:
68:1e:30:46:b6:31:e5:35:8d:bc:87:c6:27:d3:e8:
96:f2:37:89:11:b5:32:58:5d:e6:fd:a6:7d:e3:1e:
4a:81:7f:9e:f1:85:5e:aa:df:bf:73:5c:62:3a:dc:
07:a7:b1:c5:bd:64:88:66:d3:18:92:09:c9:fc:36:
08:d7:06:fb:46:e7:e3:d2:77:15:16:1a:41:89:c6:
da:14:f5:d1:37:6b:67:b6:ac:1b:7e:e5:12:0b:ce:
de:6e:b3:51:3c:c6:84:59:ee:6a:dc:7d:85:c7:6d:
f6:16:b3:13:2a:3e:fc:26:0c:12:30:2c:28:cf:fb:
e7:30:dc:f7:ee:ad:b0:19:eb:c4:84:94:24:02:05:
5d:e8:32:70:51:9c:12:15:3c:1c:4b:7b:24:82:5c:
dd:5c:0f:21:b6:31:ed:b3:ad:97:2d:81:4d:77:9b:
95:86:1a:d8:15:b8:ce:f8:38:48:ea:4a:0a:96:88:
9b:b8:d9:65:69:4a:83:3e:f4:25:1d:7e:b2:47:72:
75:b9:a0:8c:20:a6:6e:e7:af:79:26:f5:31:54:0e:
8d:e4:c9:38:8a:95:d1:8b:60:4c:c5:05:94:46:d2:
a1:68:80:61:be:33:44:21:ce:e5:e2:fc:ec:10:af:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:BD:70:39:D4:BE:23:B4:BD:E7:FC:98:25:EA:3E:10:92:3E:1E
X509v3 Authority Key Identifier:
keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8f:79:72:23:df:85:96:f5:dd:3e:a8:2c:44:d1:44:68:75:
25:1b:a4:0a:cf:28:c3:4e:fa:f3:fd:84:7a:ff:9f:44:fb:c7:
89:b3:7a:c5:cc:36:7f:77:70:5a:de:19:3a:37:f8:43:22:f2:
87:3c:92:ab:9d:ee:67:4f:ae:f2:d0:90:66:8c:14:72:c5:b7:
7a:fc:64:6f:89:be:6b:32:00:b3:59:13:b0:3f:8d:d1:5d:02:
03:73:83:e9:39:02:03:5d:10:e6:7b:97:fd:96:12:79:71:1a:
8c:48:63:86:16:fe:45:db:f9:e9:44:84:b0:d7:00:34:b6:db:
56:80:19:68:5e:08:c1:41:fc:5e:a3:3d:00:2a:34:47:39:ea:
b6:a6:5c:b5:1f:58:eb:a0:65:bd:82:bd:02:da:f0:e5:52:7c:
ec:71:0f:bc:9c:ed:2f:74:bb:5e:6f:e4:21:8a:be:84:e5:ab:
d1:6f:a6:7f:ad:0d:2f:e0:13:5f:b2:6b:80:f2:d9:13:7e:a8:
1e:f3:6a:f9:2d:be:f1:83:f6:b7:84:0a:0a:14:bb:88:31:49:
84:00:62:87:6b:67:43:a7:38:ad:77:a2:b4:8a:9b:92:c7:a0:
1a:37:c1:ee:43:01:8e:cf:e4:d6:20:dc:b6:1e:cf:98:fb:d7:
9b:18:1f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8on4mxSZebVf7N0smLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzVkODdjMTk3YTBmYTA0ZGE4ZjIyNTM1OGQzZmFmNzg2
ZjdkMGIwHhcNMjYwMzI5MDgwMDI3WhcNMjYwMzMwMDgwMDI3WjAzMTEwLwYDVQQD
EygyMGEzYmQ3MDM5ZDRiZTIzYjRiZGU3ZmM5ODI1ZWEzZTEwOTIzZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+demeGdjm9svaNxC41oHjBGtjHl
NY28h8Yn0+iW8jeJEbUyWF3m/aZ94x5KgX+e8YVeqt+/c1xiOtwHp7HFvWSIZtMY
kgnJ/DYI1wb7Rufj0ncVFhpBicbaFPXRN2tntqwbfuUSC87ebrNRPMaEWe5q3H2F
x232FrMTKj78JgwSMCwoz/vnMNz37q2wGevEhJQkAgVd6DJwUZwSFTwcS3skglzd
XA8htjHts62XLYFNd5uVhhrYFbjO+DhI6koKloibuNllaUqDPvQlHX6yR3J1uaCM
IKZu5695JvUxVA6N5Mk4ipXRi2BMxQWURtKhaIBhvjNEIc7l4vzsEK8itQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCjvXA51L4jtL3n/Jgl6j4Qkj4eMB8GA1UdIwQY
MBaAFDB12HwZeg+gTajyJTWNP694b30LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEt
ODk5ODFjOGY5ZTdiLzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEtODk5ODFjOGY5ZTdi
LzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwI95ciPf
hZb13T6oLETRRGh1JRukCs8ow0768/2Eev+fRPvHibN6xcw2f3dwWt4ZOjf4QyLy
hzySq53uZ0+u8tCQZowUcsW3evxkb4m+azIAs1kTsD+N0V0CA3OD6TkCA10Q5nuX
/ZYSeXEajEhjhhb+Rdv56USEsNcANLbbVoAZaF4IwUH8XqM9ACo0RznqtqZctR9Y
66BlvYK9Atrw5VJ87HEPvJztL3S7Xm/kIYq+hOWr0W+mf60NL+ATX7JrgPLZE36o
HvNq+S2+8YP2t4QKChS7iDFJhABih2tnQ6c4rXeitIqbksegGjfB7kMBjs/k1iDc
th7PmPvXmxgfkA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:37 2026 by rpki-client