Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: 0N08+4e7LB5D+IB7lU2Fc42d8ScCClKl6K6D7Mz3OIw=
Subject key identifier: 74:3C:9D:23:5F:43:7A:41:1A:2D:9D:52:49:7F:D8:2C:38:B5:9D:37
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 01A17F61E1F103B046FF86FA5BF0A3030ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 066D
Signing time: Tue 27 Oct 2026 22:01:23 +0000
Manifest this update: Tue 27 Oct 2026 22:01:23 +0000
Manifest next update: Wed 28 Oct 2026 22:01:23 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: wOHwLsSfxh5oZPT6HQv6wCosYHTU+UiLxzTpIHYzVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:e1:f1:03:b0:46:ff:86:fa:5b:f0:a3:03:0a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Oct 27 22:01:23 2026 GMT
Not After : Oct 28 22:01:23 2026 GMT
Subject: CN=743c9d235f437a411a2d9d52497fd82c38b59d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:ce:4c:31:a4:5a:dc:12:61:fb:73:f0:dc:
59:46:c0:0f:5b:c6:02:7b:2a:8c:51:1e:c1:21:62:
26:58:a5:dc:b4:14:c2:97:14:08:23:f7:f3:40:c1:
bf:f0:8e:bf:41:d4:8f:16:e6:c3:f1:82:d3:6a:10:
eb:37:bf:48:04:18:6e:4c:94:59:28:fe:37:f0:ed:
68:f2:36:dd:de:fd:96:0b:54:dd:82:ea:67:bb:a5:
45:25:de:22:43:89:0d:18:30:c2:1f:8b:74:c8:d4:
c8:65:44:8b:89:a3:60:f5:e5:02:a4:a8:0c:fa:91:
6c:4d:36:06:6c:b9:37:c3:08:90:5b:16:80:5b:1d:
cd:30:6d:6f:4b:1d:f2:7c:76:a7:6b:5f:29:fb:38:
d9:48:0f:7f:12:22:f6:af:52:b0:e5:6d:26:e7:f3:
24:2f:15:92:22:59:0e:18:cf:b6:ce:97:41:b0:7f:
17:55:6d:be:48:dd:20:2b:57:7a:e0:db:17:ae:64:
63:38:46:48:c1:69:83:12:bc:c7:eb:27:20:d8:5c:
3f:ce:01:af:a9:6b:18:65:a7:5b:08:df:33:08:41:
b5:67:b9:f8:33:01:12:a5:a6:a1:a3:ef:16:28:28:
ed:95:9a:9c:9f:85:8f:1b:e5:f2:8b:64:89:61:44:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:9D:23:5F:43:7A:41:1A:2D:9D:52:49:7F:D8:2C:38:B5:9D:37
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:db:ff:b6:aa:12:4f:59:8c:50:cd:71:ca:91:58:af:1a:0d:
15:36:7f:f1:c3:c3:32:ff:71:9f:03:7f:3b:ca:ba:d3:ad:77:
7f:40:93:7c:ef:90:44:44:99:a2:c2:44:55:f8:5f:43:31:48:
21:be:60:89:21:e2:00:96:5b:36:c4:69:88:20:98:29:58:e3:
a0:f3:22:ef:87:81:8f:9a:95:0a:84:42:f6:6e:9a:8b:50:00:
3a:82:92:4d:38:f7:89:ce:41:3c:a6:36:c7:b3:99:70:bc:90:
8e:6e:1c:3b:a5:d8:f3:50:8a:f1:ac:d2:8a:61:6e:c2:39:df:
a8:94:3c:bd:39:26:58:7c:a8:15:bd:0b:7d:f9:b1:7b:14:f6:
95:1a:50:0d:90:2c:f9:0c:21:bb:c5:d6:4c:62:1c:88:0b:07:
26:45:19:d6:0c:35:f0:e0:e6:f1:c4:ce:37:6b:b0:26:7c:e3:
47:14:39:6f:ca:d1:b4:da:7f:46:e7:ac:5d:4f:85:4e:d3:e3:
82:c5:c7:12:0c:0e:4b:f5:db:92:74:a8:da:c7:94:ac:68:1c:
b9:b7:0d:5f:0e:f2:54:1b:bb:c0:79:c3:0a:2a:ef:13:71:8e:
70:e5:e4:23:7f:cc:89:d8:f1:8a:91:99:0c:e2:7c:13:55:cf:
d0:70:f5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YeHxA7BG/4b6W/CjAwrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjYxMDI3MjIwMTIzWhcNMjYxMDI4MjIwMTIzWjAzMTEwLwYDVQQD
Eyg3NDNjOWQyMzVmNDM3YTQxMWEyZDlkNTI0OTdmZDgyYzM4YjU5ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAnOTDGkWtwSYftz8NxZRsAPW8YC
eyqMUR7BIWImWKXctBTClxQII/fzQMG/8I6/QdSPFubD8YLTahDrN79IBBhuTJRZ
KP438O1o8jbd3v2WC1Tdgupnu6VFJd4iQ4kNGDDCH4t0yNTIZUSLiaNg9eUCpKgM
+pFsTTYGbLk3wwiQWxaAWx3NMG1vSx3yfHana18p+zjZSA9/EiL2r1Kw5W0m5/Mk
LxWSIlkOGM+2zpdBsH8XVW2+SN0gK1d64NsXrmRjOEZIwWmDErzH6ycg2Fw/zgGv
qWsYZadbCN8zCEG1Z7n4MwESpaaho+8WKCjtlZqcn4WPG+Xyi2SJYUSY9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ8nSNfQ3pBGi2dUkl/2Cw4tZ03MB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Nv/tqoS
T1mMUM1xypFYrxoNFTZ/8cPDMv9xnwN/O8q60613f0CTfO+QRESZosJEVfhfQzFI
Ib5giSHiAJZbNsRpiCCYKVjjoPMi74eBj5qVCoRC9m6ai1AAOoKSTTj3ic5BPKY2
x7OZcLyQjm4cO6XY81CK8azSimFuwjnfqJQ8vTkmWHyoFb0LffmxexT2lRpQDZAs
+Qwhu8XWTGIciAsHJkUZ1gw18ODm8cTON2uwJnzjRxQ5b8rRtNp/RuesXU+FTtPj
gsXHEgwOS/XbknSo2seUrGgcubcNXw7yVBu7wHnDCirvE3GOcOXkI3/MidjxipGZ
DOJ8E1XP0HD1lQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:20:10 2026 by rpki-client