Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: P26v0YH6YncXK4I5cIIK5X43v47Q9FarkWY77/Eb8Lw=
Subject key identifier: 8F:25:F7:2E:C1:0F:7A:77:E7:F0:4A:35:3A:5A:9D:17:F2:E5:BD:66
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 01A18909388CFF9DB00B7701644B02823E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0F37
Signing time: Thu 29 Oct 2026 19:00:45 +0000
Manifest this update: Thu 29 Oct 2026 19:00:45 +0000
Manifest next update: Fri 30 Oct 2026 19:00:45 +0000
Files and hashes: 1: AbVQaKQEw8WVeNiGif6x9RD1dvY.roa (hash: o6ZCXdoQRyBHIynvo2/Nzx+Ep3zCN6VCUl5Zpi2zpAs=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: pddXXVYFi0tbhWZCnB5mkxq6s5NtFdHb2Mp/SfeVXwc=)
3: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (hash: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:38:8c:ff:9d:b0:0b:77:01:64:4b:02:82:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Oct 29 19:00:45 2026 GMT
Not After : Oct 30 19:00:45 2026 GMT
Subject: CN=8f25f72ec10f7a77e7f04a353a5a9d17f2e5bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:3d:10:d7:36:0f:f1:dc:6c:28:39:67:b0:
5e:08:8b:df:bc:b1:b2:c9:64:65:8f:c3:48:27:45:
7b:8b:f8:a5:b9:4f:b4:e3:d7:00:79:d1:b4:12:21:
7f:47:44:80:cc:9f:93:5d:c7:48:85:a0:19:33:a8:
70:55:45:d5:4f:a0:3e:0e:5d:97:82:b5:f3:86:b4:
4f:a2:6c:cd:e4:1b:a2:a6:1c:a7:4c:38:6e:77:3d:
78:b4:07:7b:9c:10:8e:23:85:96:66:a7:5c:8c:96:
00:b0:7f:4a:8a:9a:4b:7a:1f:96:ce:34:94:01:8e:
fa:5f:5d:63:0b:f4:3f:03:3a:c0:e2:35:fb:be:5e:
25:41:19:78:26:0c:04:67:29:36:a1:72:70:16:2b:
3d:4d:90:53:0b:f1:47:fe:0e:e7:54:4a:7c:02:ae:
b1:5d:c4:31:3a:7c:1b:56:c8:bd:ce:9a:f9:37:8a:
38:fa:8a:c5:4c:26:d2:aa:d3:37:2e:6e:85:37:fe:
bd:87:3c:b9:b5:22:fe:73:a9:b5:41:c8:d3:f4:b0:
d8:ab:71:6e:f3:16:fe:2f:b8:90:b8:bc:06:e4:c1:
a8:a3:57:9e:52:4e:9d:b1:57:fc:12:1f:b1:12:17:
54:53:db:65:6d:36:98:7f:cc:d2:39:26:77:2e:92:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:F7:2E:C1:0F:7A:77:E7:F0:4A:35:3A:5A:9D:17:F2:E5:BD:66
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:18:42:70:60:d5:4c:e2:92:14:25:7b:48:02:f3:ab:2b:
85:81:8c:6d:c1:d8:e6:df:33:d8:ee:e5:9c:25:8b:29:58:7d:
e7:e5:3e:ba:6d:91:eb:23:4b:3a:64:0c:8b:3a:77:f8:70:ac:
ff:eb:c5:eb:bc:b5:be:f0:b4:f6:ca:4f:c7:0e:53:32:0d:66:
54:e8:70:81:d2:d2:f4:7e:9e:97:27:a4:24:af:6b:6e:92:2b:
65:1d:0b:34:2a:0e:e4:82:5a:1b:ad:f7:27:03:91:a3:47:33:
f1:a3:4a:f6:de:88:eb:35:58:d8:6c:21:14:d8:e5:d8:17:e8:
c2:3c:ac:b6:66:bb:58:c9:55:9a:d7:85:9a:12:69:a4:9d:41:
28:36:39:47:b1:24:92:a6:cd:09:f1:1d:a6:ab:e7:03:1a:32:
63:a5:5f:d9:af:a3:9e:9e:e5:d9:11:da:5a:ad:15:ba:85:c3:
e3:b2:b5:de:6c:2a:e4:42:76:c6:42:00:bf:28:98:45:49:f5:
08:08:30:67:dc:f5:c6:52:e1:2a:72:82:be:3d:b5:3b:bf:2c:
ac:1b:ba:84:c0:ae:72:23:82:c0:55:bb:21:85:aa:fa:fe:aa:
7d:5c:45:29:e9:9f:3c:f6:6b:50:e4:b8:70:64:ad:2e:da:13:
6e:ad:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:17 2026 by rpki-client