Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: cPvJLJ8eHGFqsd6lTDxFl61QMaJrKD9d1s1D9Fvtt/o=
Subject key identifier: 68:F1:DB:31:7A:A6:EA:E3:FE:5A:E9:5B:70:35:FF:34:D7:1D:70:5D
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 01A117BD51C560366473F2F7FBB3271535BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0EF0
Signing time: Wed 07 Oct 2026 19:00:45 +0000
Manifest this update: Wed 07 Oct 2026 19:00:45 +0000
Manifest next update: Thu 08 Oct 2026 19:00:45 +0000
Files and hashes: 1: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: Daz9KUWR7It+uan32LylKPrGBqhWUKS1gs8LnXUAUtg=)
2: N_ijFCSvEAh4jcjSazZABa1f9xI.roa (hash: +4BuilcfoCDx9HbGYCFSYCKk2WOaVXp2uqEtuszVVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:51:c5:60:36:64:73:f2:f7:fb:b3:27:15:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Oct 7 19:00:45 2026 GMT
Not After : Oct 8 19:00:45 2026 GMT
Subject: CN=68f1db317aa6eae3fe5ae95b7035ff34d71d705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:f1:bc:ef:c7:d4:25:72:57:72:9d:41:28:
27:36:6b:8d:5a:3b:52:ae:a6:09:d9:70:5a:82:44:
db:d1:44:9c:b5:30:c7:3e:d5:46:e4:ad:03:00:b3:
e7:86:47:35:cd:d1:89:39:72:f5:c0:84:c3:8d:ce:
49:34:0e:33:42:9d:23:18:16:c5:d3:2b:37:ed:d5:
2d:5a:1d:35:81:81:f3:5e:58:bf:2b:e2:da:b6:03:
fa:ca:32:85:2b:51:98:83:a8:07:5d:5a:10:bc:ee:
dd:27:c4:a3:c6:2d:f5:da:c3:8f:79:5d:bb:48:e3:
af:42:05:2b:26:76:2f:a9:13:7a:bc:1b:d2:1d:eb:
18:37:09:92:54:14:35:dc:08:dc:22:8b:c9:6d:d3:
22:4a:cd:85:e0:7d:03:78:1f:d5:fb:bb:33:ec:e2:
bb:cc:ee:58:b3:8b:1a:10:0f:8b:ef:f1:d0:99:e2:
76:94:37:b7:6c:06:2d:18:37:61:48:bc:f1:70:f4:
ca:7f:36:f5:92:e5:29:9a:2e:76:e3:34:38:5e:d1:
4b:7f:ab:69:15:26:97:56:97:1c:b7:8e:88:45:eb:
aa:e0:0f:ca:de:c0:f9:90:fc:9b:2f:c4:17:df:b8:
e5:39:e4:47:7b:3e:d1:f9:f1:00:d2:e0:d2:2f:3f:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:DB:31:7A:A6:EA:E3:FE:5A:E9:5B:70:35:FF:34:D7:1D:70:5D
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a4:d6:bb:d5:b7:66:ef:69:9e:b2:e1:28:8c:41:77:ff:e3:
51:a6:20:a9:77:89:26:83:ae:df:89:cb:fb:31:fa:f1:af:2f:
de:1b:70:4f:a8:b8:1b:62:06:09:49:23:68:af:0b:75:07:35:
05:62:eb:c1:8f:d0:90:5a:06:f0:68:c4:31:a7:03:fc:45:d3:
eb:73:45:b5:3b:8f:d6:8c:61:62:d4:da:01:f0:cd:1e:d0:8c:
93:f5:bd:1d:c3:26:cd:16:1c:90:c4:5e:09:f9:57:04:80:11:
df:b9:2c:9e:19:09:c2:0c:3a:55:dc:4a:47:bc:76:6d:d9:31:
59:89:b7:e8:75:e8:59:8f:6a:26:fd:5e:32:d7:22:58:a6:95:
03:74:f8:67:8b:9d:9b:d7:03:33:29:91:a7:46:e1:d0:05:d1:
d7:8f:09:6d:8a:c6:a4:ad:49:54:16:46:71:9d:04:15:2d:b0:
75:ac:f9:9d:ab:ff:c9:01:d8:b5:4d:9b:f8:cf:75:17:df:7a:
0d:87:92:6e:c0:d4:e1:48:75:7d:ee:e7:ce:44:85:26:71:5f:
24:8f:19:43:3c:84:46:01:05:72:4d:dc:3a:68:03:41:c2:7f:
f6:30:aa:56:32:49:57:fb:46:a0:59:19:bc:ae:f7:bd:93:9f:
24:c8:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:49:47 2026 by rpki-client