Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: 4g2B9D7qVRGHIGdFTWukn/wWsJeFP0vFaDnXbd5xygQ=
Subject key identifier: B0:19:18:D0:8B:39:1D:0B:AA:F0:EF:E1:FB:A1:42:50:6A:5E:9B:30
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019F85681E536C3345975176DAFA3E14F3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 0567
Signing time: Tue 21 Jul 2026 16:00:20 +0000
Manifest this update: Tue 21 Jul 2026 16:00:20 +0000
Manifest next update: Wed 22 Jul 2026 16:00:20 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: yI63rOI7zorXIS9HyQMERo5Ei40sZKFtNHxSOwXgKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:1e:53:6c:33:45:97:51:76:da:fa:3e:14:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Jul 21 16:00:20 2026 GMT
Not After : Jul 22 16:00:20 2026 GMT
Subject: CN=b01918d08b391d0baaf0efe1fba142506a5e9b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:0b:c3:d7:ea:ac:90:b7:05:8d:0a:f6:e4:
24:c5:4a:61:ed:d0:2b:57:0a:d8:43:5c:98:b0:52:
7c:b2:e3:8f:a9:7d:3c:62:b5:7b:aa:76:71:44:c3:
da:2e:32:66:0b:4d:d7:02:8c:b4:ac:95:54:a6:16:
0f:fb:22:5d:20:bf:ef:60:fc:7b:b0:2b:cc:8a:50:
79:50:53:8b:03:15:42:77:29:21:79:b3:43:83:77:
93:6a:6a:e8:03:54:98:29:da:1c:3f:9f:d7:43:d0:
ee:10:cb:df:d4:92:ff:9e:ea:90:b4:3a:ea:f1:29:
3d:be:40:fa:97:20:42:45:2a:44:15:8b:a1:55:03:
be:bb:87:64:48:b4:1d:d2:71:e0:5b:1b:44:cc:f9:
12:5a:7e:06:05:f4:6b:8f:0c:b1:4a:33:3b:57:95:
15:5a:86:4f:e2:70:5f:31:c8:d3:d6:00:d7:24:a6:
cd:9b:9c:a6:27:88:cf:62:a8:17:15:48:78:88:7c:
1f:92:1a:8a:31:77:6f:21:f6:6b:c1:d9:b6:9d:34:
54:40:e7:f0:c3:05:b1:da:fa:c3:c8:85:c7:7e:6c:
ad:0c:c6:2b:f9:fe:55:f2:d0:2a:ea:dc:c2:97:5b:
92:fa:e6:00:60:bf:3d:5f:e7:ce:5a:73:ef:35:16:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:18:D0:8B:39:1D:0B:AA:F0:EF:E1:FB:A1:42:50:6A:5E:9B:30
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:7e:ce:5c:bd:20:51:c2:dd:13:fb:66:93:a8:06:12:aa:
b4:68:f5:56:ce:d2:76:6f:48:cb:3a:74:78:e7:f9:9a:a7:75:
89:c3:12:77:0a:50:2d:48:af:69:92:4d:ba:08:a5:24:0e:7e:
c2:24:7c:5c:31:db:2d:6b:f0:74:f1:00:76:19:fc:6b:39:40:
2f:1a:7c:eb:f1:54:57:b9:81:a0:6a:15:5c:1a:6b:f5:1f:bb:
ae:4b:92:84:70:43:32:ec:8f:2b:33:88:7c:b1:ba:81:af:91:
d0:52:e2:d1:07:06:36:89:40:1b:f6:2a:bf:e0:81:cc:3f:91:
9e:37:a9:8b:76:a4:c9:a5:75:08:91:92:b1:31:cf:1e:b0:31:
96:a3:41:97:b1:cd:98:8d:9e:2b:29:d1:57:d6:b4:99:24:5f:
99:0e:18:cc:c4:e9:f7:19:22:3c:7d:ce:eb:fc:74:b3:c5:a0:
c4:9a:40:62:49:47:4f:46:02:f3:06:f3:cb:e6:cf:bf:20:60:
9d:a6:a1:4f:0b:00:3b:61:17:2a:b6:a1:ec:e6:d7:04:b3:c4:
37:3a:76:db:f6:b7:d6:df:50:d0:2a:70:2a:6b:88:2b:56:fa:
32:9b:d3:5d:06:35:de:28:5b:a7:6a:13:11:07:03:25:26:a4:
28:fb:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:42:30 2026 by rpki-client