Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: 1R4xJhDqvXfM5yZXyNAeLoEoXZ1Njy7AgXDe/r/lPE8=
Subject key identifier: 08:E0:1A:09:E3:F1:25:06:F7:F2:64:C8:21:22:4D:8F:F7:C1:9C:86
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019D04411F69349E77BF83FC311C5BCF239C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1877
Signing time: Thu 19 Mar 2026 04:01:09 +0000
Manifest this update: Thu 19 Mar 2026 04:01:09 +0000
Manifest next update: Fri 20 Mar 2026 04:01:09 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: UwLGG6uWJUpHevP4UOmF5E2iX0mFHLDECV/q0Ly4SS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:41:1f:69:34:9e:77:bf:83:fc:31:1c:5b:cf:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Mar 19 04:01:09 2026 GMT
Not After : Mar 20 04:01:09 2026 GMT
Subject: CN=08e01a09e3f12506f7f264c821224d8ff7c19c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:8a:6b:a1:02:25:ea:4f:ae:90:8e:20:10:
54:a6:eb:25:3b:50:c9:75:ba:0c:c5:fe:a9:87:d6:
80:8c:f4:db:85:32:82:c0:2d:fc:17:4a:18:a4:fa:
db:b7:53:dd:a4:2d:89:1c:9f:3a:8a:97:a0:96:83:
58:f5:05:d8:f7:9e:c4:4e:07:66:63:7c:dc:d2:a5:
65:f6:f6:a6:67:1e:54:fd:d1:11:48:86:01:6f:87:
a0:8d:d1:53:22:a2:4c:f2:ed:82:d6:dd:3d:58:95:
02:53:35:c7:62:a4:04:95:1a:58:59:ca:58:6d:0b:
ca:39:c1:24:0c:19:e2:16:0f:68:69:59:eb:cb:5b:
a5:89:cf:c7:59:fb:44:2a:07:0f:35:db:80:ba:66:
66:30:d6:3f:ac:7f:c3:f3:f7:5f:35:65:7d:18:5b:
82:73:35:24:03:c1:14:02:14:f2:d3:cb:f2:36:e5:
97:c5:da:12:25:0b:0f:4c:2f:00:15:63:ca:cb:c6:
df:3c:08:05:0d:d0:e6:5c:a6:b1:0b:6d:0f:97:c8:
e0:8a:41:22:19:69:92:3c:7f:32:e7:ed:f3:9b:a2:
63:9c:ff:2f:85:9f:16:0a:26:e8:eb:db:a2:46:1f:
57:df:df:92:20:66:98:79:46:33:6e:3a:c4:6d:50:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:1A:09:E3:F1:25:06:F7:F2:64:C8:21:22:4D:8F:F7:C1:9C:86
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fa:fd:7b:b6:ad:b8:b1:c9:4a:3a:1f:b0:6e:d3:bb:90:46:
d5:fc:71:0d:0d:eb:7a:9f:9c:5d:fa:f4:ca:90:ac:74:54:0d:
62:15:03:38:d6:6e:43:02:04:86:ce:84:cd:ec:90:e4:db:b5:
76:f5:66:bc:c5:bf:14:89:d8:94:09:81:db:fa:cc:cc:66:0a:
c4:07:9a:cd:b6:c5:09:71:4a:c3:20:d3:29:11:65:25:9c:e4:
76:b7:70:9b:30:e8:d1:4f:d1:71:cf:88:8a:f6:16:92:6c:ba:
7f:81:1f:f5:9c:a3:e4:b6:29:e5:c4:87:54:8c:89:ff:af:40:
23:10:c8:fd:ff:e3:b8:7c:20:43:00:08:37:eb:5f:6e:96:ba:
b6:ca:2a:11:8e:12:c1:40:ac:d7:63:ef:3d:94:68:0a:0f:fd:
a1:e0:15:17:f7:5a:26:8a:84:4a:f0:e2:84:f7:43:45:e7:8a:
ac:6a:d7:59:97:c6:1c:2b:ca:a9:32:30:77:89:95:cc:40:f7:
ec:c7:c0:4c:7c:a1:ef:b4:54:f0:75:b0:c7:b2:5e:fd:9d:34:
bc:9b:19:72:f3:25:cf:18:d7:9d:ab:81:0f:f5:11:49:e1:01:
af:12:5a:36:ca:d7:11:8a:51:20:11:d4:29:19:31:e3:fd:d5:
10:ae:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:48:41 2026 by rpki-client