Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: 1C0Z8TiHYcLbQRsAaAVMPJfVGjrD3UI9c9OcpUW+Hik=
Subject key identifier: D9:09:D8:37:84:6D:D2:5C:68:6F:3F:C5:3D:EC:A1:B0:A7:90:61:3E
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 01A1980E5B32392075924FA7FF98117FFFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 18FB
Signing time: Sun 01 Nov 2026 17:00:39 +0000
Manifest this update: Sun 01 Nov 2026 17:00:39 +0000
Manifest next update: Mon 02 Nov 2026 17:00:39 +0000
Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: zcVY8+fQ7IphtIh3DuC1IwYNnPeVcn3k6EIsdLORe7k=)
2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:0e:5b:32:39:20:75:92:4f:a7:ff:98:11:7f:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Nov 1 17:00:39 2026 GMT
Not After : Nov 2 17:00:39 2026 GMT
Subject: CN=d909d837846dd25c686f3fc53deca1b0a790613e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:2e:53:1a:a1:63:dd:89:12:1c:d6:38:aa:
a2:fb:e8:1d:53:6f:e4:5c:99:75:db:2e:06:44:29:
02:91:a2:94:ce:40:3c:73:9c:f9:3a:92:61:a7:5e:
2b:e9:27:2c:ac:3c:d0:86:b0:ad:e2:61:87:58:0b:
52:ef:46:1f:f6:31:ca:93:1f:e1:ea:f1:23:8e:5a:
5a:df:63:ff:37:db:06:ca:e9:90:5c:25:e5:36:8c:
88:3e:3e:73:da:47:c9:44:b9:08:d7:95:f1:b0:3b:
65:db:8f:ea:ec:eb:05:89:74:09:c0:6e:1e:d7:be:
30:71:c5:b3:fa:17:d6:0e:00:fb:8a:ee:11:e6:ed:
21:ce:cb:86:93:ef:18:d6:78:1b:5f:ed:ff:7b:47:
c3:a8:1e:96:a6:26:00:fb:72:24:f5:e9:eb:f9:fc:
db:ed:b3:db:6e:f8:ca:35:7c:69:37:b4:ac:8e:53:
8f:d6:d6:dc:89:13:34:b5:1d:f3:a7:94:76:5c:ac:
4c:49:b6:8d:ea:ee:03:23:cf:02:31:84:81:3d:eb:
31:dc:22:70:48:64:ed:01:8a:d6:bc:92:2c:44:78:
41:9a:bd:b2:02:12:5f:74:d8:db:58:52:30:27:4e:
ff:b5:20:db:ed:48:d6:28:96:14:87:76:48:ac:c7:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:D8:37:84:6D:D2:5C:68:6F:3F:C5:3D:EC:A1:B0:A7:90:61:3E
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:c5:9b:00:69:59:4c:a6:db:3f:10:cc:de:de:72:b8:df:
84:da:37:92:9a:97:3e:1c:e3:6e:27:6c:69:21:03:6d:4a:e8:
f7:81:4d:e8:60:d3:87:19:43:09:2e:a6:83:46:8a:4f:a3:e4:
d1:80:db:19:4f:1d:b9:21:06:fb:5b:1a:e0:35:e8:44:6b:5f:
52:9c:13:ce:10:2b:b6:52:d0:a5:bc:bd:13:7d:a5:a6:7f:26:
8a:7a:f7:31:a6:e7:88:4a:a6:b4:29:08:b3:3a:b1:47:f8:64:
3c:2b:be:dc:1f:8b:ac:a8:4f:ae:19:21:14:18:45:f5:9b:07:
a3:7e:c8:cc:0b:04:39:10:08:05:50:85:f8:a4:f4:03:40:a1:
42:e6:4a:56:b5:d9:75:15:b5:fd:61:a8:21:ed:06:35:33:1e:
5b:fd:d9:35:d2:24:13:35:d0:ab:66:ab:8e:de:75:fb:13:45:
36:32:e9:bc:85:b8:8d:25:87:fc:d9:63:9f:95:14:32:58:5c:
b1:9a:db:64:da:91:94:46:15:9b:6a:70:e2:d6:53:f7:24:cf:
1c:fa:69:5f:1a:0e:38:ab:a5:28:02:40:ef:6c:da:6d:20:d0:
02:3a:33:eb:9c:d6:3c:fd:f4:80:d5:3e:23:8a:08:1c:76:aa:
70:9c:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:05:05 2026 by rpki-client