Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: rb/AzPu2hUghFVsiPES2vu3uC9u2n7sKbE/8uI8clDY=
Subject key identifier: BE:0D:9F:5A:76:A8:08:AA:14:35:22:18:19:39:6A:C9:72:A6:05:4D
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 019EFA5F291A42717A444608E3D04320BA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 197B
Signing time: Wed 24 Jun 2026 16:03:20 +0000
Manifest this update: Wed 24 Jun 2026 16:03:20 +0000
Manifest next update: Thu 25 Jun 2026 16:03:20 +0000
Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=)
2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=)
3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: Pyu8P7aqXJHV6+EvZmG/+VCVZAhYjMSxnEZf9bdw65k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:5f:29:1a:42:71:7a:44:46:08:e3:d0:43:20:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jun 24 16:03:20 2026 GMT
Not After : Jun 25 16:03:20 2026 GMT
Subject: CN=be0d9f5a76a808aa1435221819396ac972a6054d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:e0:06:21:72:31:ac:a0:67:9e:fb:0a:96:
1f:1f:63:b0:f4:4e:b5:63:35:65:51:bd:6d:9c:69:
b1:ef:b2:7d:50:87:74:b6:68:5a:12:23:5e:e0:81:
a5:c7:ab:49:31:5b:07:93:02:80:7d:1f:11:e4:3b:
44:6a:49:12:81:91:fd:5e:2f:70:14:aa:e8:c2:ef:
6d:e8:33:f0:bb:1c:7b:7f:75:4d:40:09:24:1a:62:
51:a2:96:1c:10:99:14:4b:f9:2b:25:c7:bb:f7:ce:
50:77:12:03:c0:47:de:36:28:fa:dc:db:a6:c2:ad:
84:54:cc:54:48:f7:fc:84:7e:ea:f8:b6:c0:37:ac:
a3:82:05:a6:b3:3f:cf:a3:27:22:9c:28:58:42:67:
de:f0:26:38:71:4e:08:07:42:cc:5b:7e:41:ab:c8:
f5:a3:db:36:50:b0:f3:7b:e5:18:72:6e:00:36:02:
3e:72:90:0f:5f:8c:82:49:d9:0f:c7:81:a6:14:d5:
54:14:3e:82:a1:ee:c9:39:f6:83:f6:f1:74:c1:96:
5c:ec:ea:8c:e0:aa:8a:94:73:f2:61:ea:52:21:b7:
39:b5:22:7a:cc:f5:3f:d8:ce:b0:ef:a3:c8:64:db:
b8:d8:1d:0f:b4:e0:c9:de:0c:46:25:a8:61:b5:4a:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:9F:5A:76:A8:08:AA:14:35:22:18:19:39:6A:C9:72:A6:05:4D
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c4:9a:86:5b:0a:cf:ea:16:10:8e:48:dc:94:30:26:bc:af:
2d:94:25:a1:ba:49:42:c6:17:e3:26:12:7d:7e:de:f6:b6:f9:
89:7e:04:c0:4f:7f:99:ef:65:35:49:90:8c:3c:27:68:18:d7:
ae:d4:76:8b:7a:aa:09:b2:cb:be:db:15:08:55:ff:6c:73:c3:
5d:e6:6d:69:fd:c5:d8:70:d6:31:9f:eb:de:55:d4:5a:4e:9e:
9c:9d:b7:92:16:91:3b:6c:1c:3b:98:e0:e3:83:bd:f0:46:b4:
f4:05:d6:ec:36:af:ed:e3:95:b4:e8:23:9b:f3:e2:10:68:d8:
47:6d:24:ce:f5:f8:83:c9:2a:22:c9:49:87:06:fd:b0:7f:70:
ae:8e:28:64:e6:c3:16:e6:38:9a:06:15:15:af:90:a0:61:e3:
79:de:99:20:05:fd:a9:22:a6:17:58:89:d7:ea:eb:e0:fc:28:
5b:ab:11:4d:d4:fa:d1:e7:32:0c:8c:53:3d:89:65:17:41:da:
38:16:eb:d7:a1:62:2f:91:55:a0:4e:05:3d:f6:1f:2a:9a:02:
51:4b:3c:63:e9:22:c4:3a:e5:1a:bf:b7:98:fe:5d:e3:8d:15:
fe:8a:5e:2e:af:d9:b7:6a:97:08:92:05:f7:bf:80:4a:28:9f:
a5:3a:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:33 2026 by rpki-client