Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: 7lgCrwd0NFDmzLdY90sbDsrXD5iL1EqMczEg0zfthNo=
Subject key identifier: 25:E5:98:44:68:33:1B:19:8E:C1:E2:BD:C9:A7:84:81:CE:DF:48:53
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019D06303CCDD6988E13B482B17F880560B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1878
Signing time: Thu 19 Mar 2026 13:01:57 +0000
Manifest this update: Thu 19 Mar 2026 13:01:57 +0000
Manifest next update: Fri 20 Mar 2026 13:01:57 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: lozUup/66UqKUbjle7sIg834lxY0zBHzDeMvWl48cE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:30:3c:cd:d6:98:8e:13:b4:82:b1:7f:88:05:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Mar 19 13:01:57 2026 GMT
Not After : Mar 20 13:01:57 2026 GMT
Subject: CN=25e5984468331b198ec1e2bdc9a78481cedf4853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:62:d4:a5:45:14:66:ca:ab:46:9c:02:c8:
80:1d:10:c9:e7:0d:77:1a:72:66:6b:53:b3:37:d8:
de:9c:a4:7a:87:33:50:9a:92:24:24:ee:e3:30:8f:
26:f4:26:3e:80:34:17:1e:b2:fb:6c:db:f1:cc:fe:
12:92:6d:5c:5c:06:2d:ce:c9:49:28:cc:b9:4f:94:
3b:b4:fa:2f:d0:03:9f:d6:b2:a7:59:d3:65:92:9e:
6f:a0:68:3f:dc:ba:e4:b3:bc:85:f1:a2:c5:df:87:
20:c5:29:4a:a0:f0:27:64:b2:2b:a3:2d:d9:84:99:
ba:91:84:24:40:f2:19:ba:99:2c:0e:8b:d0:51:78:
2a:bf:6b:46:a7:03:f2:28:a0:24:43:0e:1d:47:27:
8a:47:5b:47:6d:ef:9a:54:f2:2b:5f:f5:32:56:88:
64:ea:c6:40:7c:32:0f:ec:00:76:01:2d:8d:8a:5e:
5e:8f:65:cb:69:7b:1f:4d:39:37:95:b5:a7:e1:1d:
a7:96:4c:0a:b1:5a:af:bc:c3:9d:81:d0:03:23:65:
ac:9c:77:d0:ad:0a:dd:ec:89:f2:41:70:bb:eb:13:
83:71:99:ca:b4:dd:74:7c:26:0c:47:65:38:84:6a:
1d:15:4d:45:44:2f:30:c3:79:cc:92:93:0c:a0:ee:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:98:44:68:33:1B:19:8E:C1:E2:BD:C9:A7:84:81:CE:DF:48:53
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b5:92:f2:81:e4:95:33:a4:f4:d4:9d:3e:86:2a:5e:07:18:
81:aa:45:68:f8:63:e6:da:31:d7:9d:48:f7:b3:5e:09:03:3d:
67:68:e7:02:63:d1:05:64:27:82:7a:18:0d:95:66:9b:1c:a6:
b5:65:c7:63:25:7c:5d:84:fa:7a:de:e5:b4:b6:43:cb:3c:9f:
9e:42:19:f6:28:fd:05:01:bc:a7:1c:8c:4f:3f:0b:f9:36:98:
0d:e8:06:94:fa:bc:5b:f5:20:51:b8:92:72:f2:22:22:a1:69:
2c:c1:be:68:35:f9:d0:a9:04:34:e4:06:71:c3:e7:66:2a:3c:
42:3e:dc:7d:12:74:13:b1:9e:10:b7:96:39:26:66:12:71:a5:
ea:40:da:90:49:36:73:b9:8d:e9:b3:2e:c8:c3:6b:93:c7:97:
3c:66:da:6a:40:45:1d:66:c4:b2:02:1d:3e:78:75:29:2e:9d:
9f:dc:8c:3b:85:e5:9c:46:50:f1:be:e7:49:fb:1d:ea:24:16:
8d:c3:49:75:5e:59:7c:dd:ff:c3:f3:33:d2:d5:20:66:8d:9d:
9d:52:16:ad:ea:15:5e:80:3c:8a:b4:2b:16:76:9c:9a:24:b4:
86:18:e8:ba:b7:b1:43:ed:ae:8d:23:1c:98:49:25:9a:43:c2:
e2:05:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:14:58 2026 by rpki-client