Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: wzodETWrXEFvmfR4P2J/QRLcCEICDHBuwR5UIIXiHHw=
Subject key identifier: 56:56:C5:8B:03:9E:9D:AE:58:56:2A:CF:BC:CE:DC:C9:9F:C4:3A:32
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 019D386686B63CC7C8B100952D7EFF318F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0CFB
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: AbVQaKQEw8WVeNiGif6x9RD1dvY.roa (hash: o6ZCXdoQRyBHIynvo2/Nzx+Ep3zCN6VCUl5Zpi2zpAs=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: EsvSW3nJqyPjbp8rUWxiN606GXVE33VzuDANEFBv9qs=)
3: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (hash: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:b6:3c:c7:c8:b1:00:95:2d:7e:ff:31:8f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=5656c58b039e9dae58562acfbccedcc99fc43a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:9c:ea:47:cd:35:6c:dc:68:9d:30:4a:b7:
9d:6b:91:fd:ef:a5:53:2e:20:41:c0:f3:41:6c:ce:
14:3d:7f:60:13:10:c9:33:e1:10:43:a9:eb:1a:90:
18:f4:95:1d:31:74:4f:40:49:e7:a7:09:83:9f:f3:
dc:80:e8:da:14:8d:6f:1e:da:40:bd:2b:6c:61:d2:
da:68:12:25:9b:4f:eb:18:f5:95:f2:c1:9d:67:d0:
0a:e1:b9:4e:86:3e:96:95:48:29:f8:8b:0e:f3:db:
a2:bf:ab:03:8d:5b:b5:e5:22:cb:f4:25:73:89:7c:
0c:65:fc:8e:79:de:a3:5a:95:c6:a4:48:94:bd:01:
81:f6:3e:85:ff:0b:8a:32:2d:bc:07:5d:e0:91:65:
1f:94:39:9c:02:67:65:fc:ac:8f:73:d3:f1:39:02:
a3:9c:53:72:ab:d8:5b:b2:e8:54:c5:d1:64:0f:79:
a6:ca:bc:d5:3b:8f:b2:be:f8:b7:e6:0f:78:14:c4:
8a:dc:8d:b1:1b:c4:1c:06:c0:bd:00:5d:26:dd:ab:
13:cd:e7:9d:9a:c3:9e:a0:b2:7d:f4:eb:3a:8d:c1:
49:43:5b:c9:0c:65:09:81:eb:69:3c:0d:0a:7f:b1:
83:a6:dc:51:61:85:02:c2:21:7b:37:66:9b:0a:2d:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:C5:8B:03:9E:9D:AE:58:56:2A:CF:BC:CE:DC:C9:9F:C4:3A:32
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:dd:60:4f:2f:d2:28:c7:d1:10:7a:ac:c4:4e:ef:11:09:
bd:8f:b3:7b:24:e5:9c:27:ea:63:80:e3:74:3d:b5:ff:05:69:
c5:e5:20:6d:b8:72:0a:51:d6:a8:b6:d6:1b:00:61:4c:32:5b:
a4:f2:dd:21:ea:09:c3:71:84:f8:56:24:d1:ea:2a:0c:1d:c8:
0c:d1:87:cd:69:ae:5a:43:d6:14:9a:d8:a1:cc:5a:a1:b6:9e:
69:a3:92:1d:7c:de:fe:c8:2c:c1:71:68:c1:56:61:df:11:9f:
97:38:60:87:ac:e7:0f:a4:0b:41:63:81:1c:b1:cb:8b:54:eb:
15:2e:4a:9f:e1:f2:54:84:7e:33:ba:8d:dd:7b:28:8f:ea:6f:
2f:fc:06:3f:31:da:dc:8e:7b:74:f5:72:99:e3:77:99:12:8b:
fe:dd:dd:ff:2b:2e:46:92:78:4f:48:8d:74:b8:22:ee:04:d3:
0d:31:d8:a5:44:fd:9e:19:be:68:b0:0c:e1:dc:2e:44:57:d7:
fb:54:1e:f0:e2:cf:15:fc:91:53:a8:39:33:4c:e0:9d:31:91:
3a:e9:58:93:bb:c4:61:10:4d:6b:37:c7:7f:8f:11:27:8c:cc:
7e:db:e0:13:8f:96:db:63:ac:5e:01:e5:a0:d4:69:00:0b:68:
f0:6b:15:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zoa2PMfIsQCVLX7/MY9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm
ZTJkOGMwHhcNMjYwMzI5MDcwMjE2WhcNMjYwMzMwMDcwMjE2WjAzMTEwLwYDVQQD
Eyg1NjU2YzU4YjAzOWU5ZGFlNTg1NjJhY2ZiY2NlZGNjOTlmYzQzYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubec6kfNNWzcaJ0wSreda5H976VT
LiBBwPNBbM4UPX9gExDJM+EQQ6nrGpAY9JUdMXRPQEnnpwmDn/PcgOjaFI1vHtpA
vStsYdLaaBIlm0/rGPWV8sGdZ9AK4blOhj6WlUgp+IsO89uiv6sDjVu15SLL9CVz
iXwMZfyOed6jWpXGpEiUvQGB9j6F/wuKMi28B13gkWUflDmcAmdl/KyPc9PxOQKj
nFNyq9hbsuhUxdFkD3mmyrzVO4+yvvi35g94FMSK3I2xG8QcBsC9AF0m3asTzeed
msOeoLJ99Os6jcFJQ1vJDGUJgetpPA0Kf7GDptxRYYUCwiF7N2abCi3ZnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZWxYsDnp2uWFYqz7zO3MmfxDoyMB8GA1UdIwQY
MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt
Mzg5YTMwOThlYzJhLzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh
LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR3dYE8v
0ijH0RB6rMRO7xEJvY+zeyTlnCfqY4DjdD21/wVpxeUgbbhyClHWqLbWGwBhTDJb
pPLdIeoJw3GE+FYk0eoqDB3IDNGHzWmuWkPWFJrYocxaobaeaaOSHXze/sgswXFo
wVZh3xGflzhgh6znD6QLQWOBHLHLi1TrFS5Kn+HyVIR+M7qN3Xsoj+pvL/wGPzHa
3I57dPVymeN3mRKL/t3d/ysuRpJ4T0iNdLgi7gTTDTHYpUT9nhm+aLAM4dwuRFfX
+1Qe8OLPFfyRU6g5M0zgnTGROulYk7vEYRBNazfHf48RJ4zMftvgE4+W22OsXgHl
oNRpAAto8GsVWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:03 2026 by rpki-client