Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: q7hvbyFBrey0Y3kNPs3Ff9FHeNkHUHmqK50U8438Cqc=
Subject key identifier: CA:54:68:49:00:E1:DA:9C:BC:A9:E7:70:10:FF:25:00:98:BF:AE:D8
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 019DD841FE322385A54EFD0D009362BC748F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 170A
Signing time: Wed 29 Apr 2026 08:01:36 +0000
Manifest this update: Wed 29 Apr 2026 08:01:36 +0000
Manifest next update: Thu 30 Apr 2026 08:01:36 +0000
Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: MnpS39B1NpshA4y3z8w/wth5pewYPUHvDJw/5lbHMGU=)
2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:41:fe:32:23:85:a5:4e:fd:0d:00:93:62:bc:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Apr 29 08:01:36 2026 GMT
Not After : Apr 30 08:01:36 2026 GMT
Subject: CN=ca54684900e1da9cbca9e77010ff250098bfaed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:80:16:ba:92:bf:14:fc:a9:75:75:2f:0d:
4c:72:fa:65:6e:67:af:1c:94:4f:3a:4b:14:73:56:
06:66:1c:34:c8:d1:af:d4:bd:fb:eb:af:28:a3:87:
6b:c3:8f:80:2f:3f:30:62:b6:6a:8a:2d:de:da:f9:
72:c9:45:c4:34:e5:a4:1a:e1:af:13:82:ef:2b:49:
c4:38:55:dc:a3:10:32:b5:c1:3b:c5:1f:72:a9:ae:
db:c1:5d:12:29:2b:cc:32:5f:1b:0c:10:9b:84:76:
3e:33:66:13:a9:b2:34:59:d2:99:81:cb:c0:21:3a:
02:14:64:24:a5:bc:0e:26:5f:3f:b8:57:67:7f:03:
ad:05:e4:8d:44:1a:a4:dd:82:73:ff:05:26:8e:e4:
84:9c:d3:62:32:14:94:27:97:dc:de:91:8c:d8:d3:
bb:95:50:35:5c:79:d0:70:28:28:9c:ba:be:91:63:
e2:b1:93:69:8a:be:41:7e:7f:5e:03:e8:03:48:88:
be:a9:e6:74:07:5f:fe:1b:48:72:cb:3d:8e:91:1c:
9e:a5:42:d9:3e:3a:8a:eb:9c:f2:89:8a:46:a6:c2:
ee:d8:d3:a1:99:e8:6d:91:f4:f8:26:ab:3e:38:1a:
3e:47:b5:13:3b:13:8c:90:a4:b3:a5:e8:ea:2c:e8:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:68:49:00:E1:DA:9C:BC:A9:E7:70:10:FF:25:00:98:BF:AE:D8
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6b:4c:88:fa:6c:54:83:fb:24:ba:c1:a1:8e:45:66:0d:c7:
1e:5c:dc:8a:7b:00:53:9c:e6:ee:a3:7b:1c:3d:de:ca:48:9b:
66:ca:e8:8f:f9:53:83:c5:0a:0d:ac:ce:6f:5c:ad:63:d2:cb:
eb:67:7c:c5:f3:e3:fd:00:28:40:b3:51:b8:04:2e:b2:cf:8e:
98:d4:86:bd:6e:b3:cc:e0:a0:c2:d2:94:c3:8f:de:68:8e:71:
de:95:c9:dc:99:ef:98:97:c4:f6:7c:fb:0c:34:71:8e:28:48:
a0:6a:77:c3:7b:0f:9b:0f:52:a4:8f:ae:2c:f6:5d:eb:bd:e6:
cd:e3:de:bf:e5:fb:96:bd:4e:4d:58:2b:bf:2c:65:ce:58:3c:
a0:2e:aa:80:2a:77:52:9c:4e:b7:05:63:f1:f5:91:9a:bc:f3:
9d:5c:7f:7f:78:b6:e0:f9:29:db:09:c8:b7:23:51:8f:ea:7e:
69:e3:97:59:95:cf:9a:17:d9:72:a7:4e:80:68:cf:57:fd:04:
19:55:7b:c9:5a:ca:d0:73:4c:95:24:fc:2a:a8:53:11:fd:d1:
d5:12:6b:a6:2e:84:2e:86:e9:79:f1:9f:a5:5e:b3:ce:b1:0b:
6b:2d:b0:29:10:10:c4:0d:79:81:2a:68:3b:dc:7e:c4:4d:7d:
7a:e4:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:50:06 2026 by rpki-client