Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: 73S3MDO+rGJUx0oqelHXhqKKB2XAXvOp4qPuiRm2hJo=
Subject key identifier: 2B:B2:C2:5D:EB:CC:4E:E5:F0:6A:B6:9B:39:DC:AF:9D:31:FA:AB:EF
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019DB3FE61CC6E8549B41F68F2D39FB97515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 0476
Signing time: Wed 22 Apr 2026 07:01:26 +0000
Manifest this update: Wed 22 Apr 2026 07:01:26 +0000
Manifest next update: Thu 23 Apr 2026 07:01:26 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: BPqXFEZttCqVRuBqRnQinD39RHy6fELcCJc7NIOiQKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fe:61:cc:6e:85:49:b4:1f:68:f2:d3:9f:b9:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Apr 22 07:01:26 2026 GMT
Not After : Apr 23 07:01:26 2026 GMT
Subject: CN=2bb2c25debcc4ee5f06ab69b39dcaf9d31faabef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:8d:19:6c:2e:74:63:7a:aa:1e:16:cc:4d:
e2:f5:e2:e5:d3:af:b9:55:87:df:27:d3:03:ff:9a:
dd:e7:4d:ed:53:81:72:68:0a:fe:bf:fd:d7:97:6d:
79:3c:47:69:ca:42:4f:0e:30:cf:0a:c8:ac:61:bf:
8b:fb:74:25:cf:ef:3c:fa:b3:3b:0b:5e:e7:3b:fb:
e1:79:4e:17:83:be:7e:5c:2a:57:0b:40:b4:d5:94:
78:1d:da:76:a1:25:10:f8:35:9e:c5:89:ec:05:4e:
5f:dc:19:6b:72:8b:5e:b9:ca:81:30:90:20:0f:9a:
13:0a:de:34:49:31:ab:86:78:cd:5a:9b:26:e5:bd:
3c:5a:e3:bf:6d:10:82:db:e5:d9:c7:cb:17:fb:0c:
82:ae:55:5b:14:ee:7e:f1:47:7b:6e:35:32:c6:4d:
f2:1f:3a:36:fa:e9:10:78:83:57:8b:d8:41:6c:7a:
46:0c:11:7e:66:e9:f0:2e:f1:64:fb:b3:dd:32:93:
1c:01:eb:11:c2:9a:95:3d:a4:30:50:dd:a0:1c:4d:
a8:56:55:0a:1b:e1:3d:29:6f:ca:ce:c4:c2:29:f6:
69:00:72:96:6e:f5:73:9d:28:1f:33:b0:b0:ed:d4:
d5:d0:58:77:94:b7:06:79:a8:e2:e5:eb:f5:7a:23:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:C2:5D:EB:CC:4E:E5:F0:6A:B6:9B:39:DC:AF:9D:31:FA:AB:EF
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:86:78:89:93:c8:82:a0:14:fc:4e:74:2e:f5:6c:88:d9:
6f:59:c1:3e:3e:25:fc:ff:d7:b6:20:ab:e2:bd:fe:9e:57:d5:
60:cb:22:ef:9d:56:93:a7:88:8f:b6:23:b6:48:7e:a7:91:00:
58:c4:9b:ba:fa:1d:18:ae:b6:df:96:17:c4:92:e8:03:b2:08:
56:af:d0:46:5d:87:09:9a:fb:8d:99:bf:16:7b:27:b7:71:10:
b2:57:00:86:5f:74:dc:54:9a:ff:af:af:86:64:03:83:97:2d:
f9:cf:bc:31:d1:06:f1:e7:c5:54:45:d7:89:44:db:82:a5:fb:
b9:8c:56:0a:1f:f7:d7:ba:e7:ea:dc:8a:1c:e8:aa:a2:63:f2:
4c:51:92:6e:4b:fc:bd:af:04:52:5e:6d:f6:cc:03:a2:84:1a:
44:0f:38:54:97:bd:36:29:ab:9a:a5:ae:55:0a:2e:15:fb:b0:
3d:57:96:7d:c6:00:78:eb:0a:70:ea:28:75:e0:45:af:d4:0f:
14:b0:15:a3:f1:1a:88:a4:8e:a8:e1:16:3b:b1:9c:27:fd:2b:
12:3f:69:d7:ca:1a:44:74:0f:3e:bc:50:e3:b5:a4:b2:4b:3d:
c4:c6:dc:d1:77:61:7b:61:de:ab:c2:9a:87:f0:6f:5a:ee:63:
a5:21:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:59:23 2026 by rpki-client