Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: FwESjaeGhZQsS09tZXpJGspqN9ipXmChYWIVhTpcb8U=
Subject key identifier: 3B:42:2E:D4:99:B5:17:2B:0C:E3:6E:03:5D:B3:BF:BC:28:EC:D3:2A
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 01A08C0D0ED563B06CA0DDFDDD13722D3295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0EB4
Signing time: Thu 10 Sep 2026 16:01:00 +0000
Manifest this update: Thu 10 Sep 2026 16:01:00 +0000
Manifest next update: Fri 11 Sep 2026 16:01:00 +0000
Files and hashes: 1: AbVQaKQEw8WVeNiGif6x9RD1dvY.roa (hash: o6ZCXdoQRyBHIynvo2/Nzx+Ep3zCN6VCUl5Zpi2zpAs=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: f1V0eT3llzo+RK06uiMsu8Zgz03hPOQkNL/+K5ydbZg=)
3: a3_EOJMPNZFOCWBEs6y6sNyscZQ.roa (hash: ToCWN1QeYW63JQoVANy2WXpAi8Y9kSXsrgbre5mQvao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:0e:d5:63:b0:6c:a0:dd:fd:dd:13:72:2d:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Sep 10 16:01:00 2026 GMT
Not After : Sep 11 16:01:00 2026 GMT
Subject: CN=3b422ed499b5172b0ce36e035db3bfbc28ecd32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:2a:b4:1d:fd:d7:78:f0:34:75:ff:e2:f7:
d4:f7:51:fd:d6:f9:47:e6:82:47:31:74:91:36:f6:
87:eb:64:b5:80:a8:20:66:74:f5:4d:5d:be:1c:a1:
f7:c4:48:22:89:b6:5b:38:fb:85:d7:2f:17:5a:3c:
3a:18:77:6f:63:7c:6d:7f:41:f8:3c:39:48:3c:4e:
2c:85:bc:2a:d6:15:c2:0c:d0:29:10:27:4a:a0:e1:
0d:d4:9a:2a:08:52:b7:dc:35:ba:7f:08:2a:50:63:
e2:8f:d4:66:25:39:e5:14:19:d1:eb:8a:b2:60:c0:
f4:c4:99:ba:07:db:f3:6d:41:b9:9d:0c:d7:1b:bf:
9d:23:b5:28:f6:e3:c0:bb:f0:51:14:4f:d6:12:b1:
7f:45:b8:53:ba:28:22:90:da:30:f2:7d:3f:00:21:
35:9a:f0:0c:8e:2e:16:04:f0:5e:9a:2c:20:df:0b:
9e:a3:a6:86:db:af:e4:64:04:6f:3a:4d:b4:12:c3:
95:04:4c:41:c8:3b:c0:e9:b9:08:39:88:13:23:c2:
1a:58:f7:bd:c3:e0:1a:9a:12:18:23:2f:3e:09:b0:
42:56:4c:7c:d0:5d:11:67:45:a7:12:09:52:9e:6f:
82:49:a0:50:f3:1b:db:d0:da:cd:1e:bf:79:08:d2:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:2E:D4:99:B5:17:2B:0C:E3:6E:03:5D:B3:BF:BC:28:EC:D3:2A
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:7d:11:91:50:80:0f:56:3e:e7:8d:d3:10:81:f0:32:9a:
85:ed:ed:75:b4:7a:7b:13:0d:b1:7e:9f:7e:60:62:c9:04:35:
f1:8a:e7:b5:31:ff:5e:e9:14:a9:30:54:92:ea:03:06:8e:83:
f9:ee:d1:f6:b2:0b:f1:7b:38:f7:67:70:9e:e6:6a:82:ce:a9:
65:23:02:9d:76:5e:38:ea:a6:6c:b0:2a:0c:8f:e1:c6:26:08:
f0:b0:25:c2:62:3d:c8:d5:3c:6f:d9:7c:1c:c7:e7:7c:83:c1:
5b:1d:61:04:f2:b8:42:2a:7f:a4:6c:d4:8b:0b:60:dc:81:3f:
ad:95:1b:91:39:79:8e:ad:b2:65:10:57:d4:14:b5:ff:a3:c3:
7c:98:55:fc:ad:11:74:b3:c6:59:ca:54:16:3f:71:2d:f9:9b:
37:6a:9e:2c:4a:2e:fe:55:b9:97:74:b2:65:30:43:a6:9a:7f:
c8:7f:c4:38:f1:b1:0e:86:73:56:1e:5d:ff:06:a4:ca:c8:0d:
df:21:93:94:5c:aa:c4:e2:9b:cd:a3:9f:dc:b5:09:42:92:2e:
19:8a:df:ae:50:d2:c7:af:f2:64:88:cf:b7:3f:bc:a8:74:22:
75:b1:6c:c3:34:81:08:25:93:0e:53:1d:64:5e:ac:22:76:81:
9f:08:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:08 2026 by rpki-client