Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: //usa3/HDHTjRG6lrOWEmCiOCtkmuYs2LptAz0CFQOw=
Subject key identifier: 2F:60:58:74:EA:67:5B:10:65:07:95:9D:A9:02:39:94:52:06:C1:47
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 01A01FE82F7648AD613DEAC786D669E300F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1A13
Signing time: Thu 20 Aug 2026 16:01:45 +0000
Manifest this update: Thu 20 Aug 2026 16:01:45 +0000
Manifest next update: Fri 21 Aug 2026 16:01:45 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: uvHdxjvupS/njLUfF3GBE3VABdyp5qC8DNm5JUE+Vv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e8:2f:76:48:ad:61:3d:ea:c7:86:d6:69:e3:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Aug 20 16:01:45 2026 GMT
Not After : Aug 21 16:01:45 2026 GMT
Subject: CN=2f605874ea675b106507959da90239945206c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:e3:cb:c6:eb:d2:89:8c:53:f8:56:62:ef:
4f:17:b0:21:af:88:e9:98:3a:0e:56:1d:85:61:bc:
8a:56:30:a3:58:3d:c5:8b:d5:1d:ec:f2:1b:0a:4c:
8b:90:2a:f1:e3:75:e1:2b:66:7a:9d:be:88:c8:69:
56:dd:c9:f2:80:11:ac:12:12:c4:8d:64:be:15:56:
f4:3f:ff:2c:92:bc:3e:62:52:16:25:20:47:43:8c:
1b:55:84:d1:a4:b8:af:c0:21:f6:df:b5:61:c5:1b:
6a:af:e7:55:40:da:4c:55:6e:34:48:c6:cf:90:7c:
3f:57:d4:a1:3a:23:ee:a9:c0:d5:30:0b:68:d3:eb:
da:fa:b9:df:0f:b2:2b:5d:48:ea:96:d8:85:66:8b:
17:fb:f6:23:8f:a2:d4:14:c7:15:26:53:48:19:4d:
ae:04:69:47:f9:9e:ef:65:8c:20:19:35:62:62:03:
d6:e2:5e:59:65:48:d7:6a:e9:64:7a:03:0b:e7:aa:
e2:92:ec:75:53:64:3e:bb:b6:8d:9a:e2:a8:4f:17:
50:68:52:e7:a9:69:25:18:16:5a:21:f8:05:af:85:
86:fc:e9:11:49:ee:24:cd:cd:5b:19:2b:46:1f:98:
72:81:61:1c:1a:b4:74:e7:21:e8:ae:c5:c2:42:ac:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:58:74:EA:67:5B:10:65:07:95:9D:A9:02:39:94:52:06:C1:47
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:65:ea:96:6b:e5:b2:1c:b3:de:eb:c4:74:2a:36:c4:01:bc:
0a:c9:ff:7b:3f:46:00:5d:cc:f9:e5:20:b6:5e:9c:e9:48:d5:
95:b9:f0:db:b8:ee:0e:1b:b0:5e:8d:ae:7d:4a:68:d5:9f:04:
4b:20:37:04:91:42:74:8c:c9:04:ad:44:ba:f8:06:f0:64:df:
fd:ec:8a:66:cc:2c:94:fb:e6:e5:cd:ef:eb:a6:71:36:86:c8:
24:56:3f:cf:2b:8f:3e:31:5d:a7:a9:ac:0a:bd:07:d1:63:33:
3a:38:7c:c9:a5:44:73:c1:c5:e1:49:ba:26:6e:5d:61:17:65:
b1:5c:52:25:29:ad:94:40:7a:e3:5b:03:01:b6:fd:1d:f6:b6:
83:3e:f9:3e:57:0d:bc:d4:d6:28:b6:04:e1:fa:cf:2c:ef:c1:
9f:9a:a5:71:d1:ed:56:bf:74:38:36:5d:8e:4d:44:5d:40:a4:
97:9d:be:42:24:be:9e:e3:e5:ca:b6:3f:c5:b6:ea:dc:e1:47:
c2:43:78:23:04:46:d3:d4:14:d4:53:79:96:b7:12:56:79:bb:
79:19:d1:df:83:b9:f9:0c:0d:c0:50:fb:2a:9f:96:5e:63:79:
6a:7e:c8:4c:a4:80:65:4c:91:9e:87:a6:24:7b:05:61:8c:12:
25:81:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:09 2026 by rpki-client