Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: 4mEtzCWWaFu+rKfymf1kR19iAJG2232Z72CtcZHOQV0=
Subject key identifier: 7E:CE:07:C6:3E:7B:3F:A6:B1:D7:A1:B8:F6:8E:8A:98:2C:EE:39:11
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 019EB8B4359D5B19ABFBA93C0C359C00EFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0DC2
Signing time: Thu 11 Jun 2026 22:01:18 +0000
Manifest this update: Thu 11 Jun 2026 22:01:18 +0000
Manifest next update: Fri 12 Jun 2026 22:01:18 +0000
Files and hashes: 1: AbVQaKQEw8WVeNiGif6x9RD1dvY.roa (hash: o6ZCXdoQRyBHIynvo2/Nzx+Ep3zCN6VCUl5Zpi2zpAs=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: fBJ1qP1pgcq8Jlvh0DVd8m3tcatxCgXX2JkTp7kRS1M=)
3: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (hash: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:35:9d:5b:19:ab:fb:a9:3c:0c:35:9c:00:ef:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jun 11 22:01:18 2026 GMT
Not After : Jun 12 22:01:18 2026 GMT
Subject: CN=7ece07c63e7b3fa6b1d7a1b8f68e8a982cee3911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:af:38:b5:8d:6e:7f:ac:4f:71:bf:b4:15:
69:cd:74:99:5d:1e:55:84:39:df:fe:e1:96:28:fd:
d4:88:15:a3:87:48:5b:91:2f:e4:19:05:f1:63:e9:
7e:99:19:30:2a:e2:1c:4a:25:08:82:20:6c:f0:ac:
f5:73:48:f5:22:6a:45:96:c1:38:14:b4:e3:72:1d:
a3:37:6f:c1:7f:b2:3c:f3:99:33:f3:4e:45:43:b4:
17:e0:51:98:88:6e:a1:cf:49:68:f5:ff:70:18:62:
60:1c:18:97:51:40:1c:a6:74:67:ac:6e:bd:45:2a:
9d:2f:ee:93:00:c8:d0:f3:59:a2:e3:0a:9a:4d:60:
28:b3:9e:9d:e5:82:cf:cd:f5:a2:ef:92:1a:ce:4e:
92:ba:2b:03:52:e7:19:1d:17:84:3c:98:fb:3c:25:
84:aa:2c:97:fd:bc:7b:98:e0:ce:f1:17:99:ef:53:
56:5d:b1:31:70:b6:2f:8b:c3:5e:fd:74:5d:1c:f7:
d8:9d:6b:63:16:f7:d6:ed:43:0b:26:90:ff:6d:30:
dd:35:31:76:97:26:3c:e1:fe:ac:5c:4a:bb:98:05:
30:26:27:c8:93:c7:2f:71:9e:14:e0:54:c0:fc:ed:
e1:8e:20:12:c9:20:41:52:c7:2c:bd:e8:f2:dc:d6:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CE:07:C6:3E:7B:3F:A6:B1:D7:A1:B8:F6:8E:8A:98:2C:EE:39:11
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f0:45:89:e7:98:ce:1b:56:9a:20:cb:5a:cd:1b:92:74:56:
92:4d:e3:1d:31:9d:3e:ad:2f:d8:29:32:a7:51:f7:a4:0f:05:
ee:67:87:86:87:5a:04:21:ec:ca:0b:b7:9a:4e:a7:fa:dd:d9:
c1:93:ce:99:e0:80:e6:fc:74:24:0f:f8:17:a1:e6:76:00:08:
cb:c4:28:47:88:77:a8:81:e9:b1:ab:bd:5e:eb:10:d1:65:d9:
c0:82:de:02:5b:ce:42:44:a6:a6:2c:63:10:30:c6:6b:8c:32:
a0:49:b7:1b:91:40:ce:b6:fa:cc:96:e2:58:fe:76:d1:6e:93:
5f:46:37:cf:78:87:b0:6f:83:78:e7:e8:cc:84:68:8c:29:b1:
df:df:23:37:49:92:35:9c:fb:0b:f2:d1:2a:06:10:6c:27:b0:
bf:ee:2c:a3:e0:08:76:af:5a:3f:27:af:14:12:a2:73:a7:76:
c5:53:90:57:27:ba:6a:c1:66:09:10:ff:02:a3:1f:9a:1c:b5:
0a:69:bb:ac:f3:70:f2:2d:02:e9:d2:6e:ea:b0:6f:47:71:eb:
c4:89:d0:f3:67:72:fb:b9:78:e7:01:f6:1d:fd:a4:83:82:02:
40:b2:e5:db:ed:69:25:82:a3:7c:10:8f:3e:67:26:ed:09:66:
3f:f4:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:47 2026 by rpki-client