Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: A4mroIUOHxKkRuHYCtMgTuR0dw5nAUJKrxQnB1o0s0Y=
Subject key identifier: 46:F9:88:0E:32:AB:4C:33:74:88:CA:16:38:84:93:42:19:43:92:48
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019CCA5178D15B1193E47F4021387BDA5633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 03FD
Signing time: Sat 07 Mar 2026 22:01:02 +0000
Manifest this update: Sat 07 Mar 2026 22:01:02 +0000
Manifest next update: Sun 08 Mar 2026 22:01:02 +0000
Files and hashes: 1: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (hash: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=)
2: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: w+iBopzqpHZtpDAAPELRpRotj65708MpyQvp/aU9tmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:51:78:d1:5b:11:93:e4:7f:40:21:38:7b:da:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Mar 7 22:01:02 2026 GMT
Not After : Mar 8 22:01:02 2026 GMT
Subject: CN=46f9880e32ab4c337488ca163884934219439248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:84:44:29:cf:26:8c:65:ee:e8:dd:97:0c:
b3:59:24:09:93:14:06:a7:d0:25:ec:d3:01:d4:93:
29:ab:de:e1:29:0b:bd:1e:10:f4:d8:4a:be:77:7f:
f8:79:db:48:98:1d:d4:7e:3b:70:da:88:da:6b:32:
1d:5d:b0:ee:a2:17:cb:b4:a5:e6:36:40:d2:b9:18:
5e:ca:54:c0:2a:04:3c:84:42:f4:75:dc:b0:0e:e8:
31:be:fe:a7:68:6f:ea:44:ab:04:08:75:b8:db:f4:
72:4a:6d:73:85:ec:95:18:ca:77:06:ec:1b:43:81:
0f:d8:e7:b9:d2:22:b0:b3:f9:26:ba:d0:61:26:39:
bc:41:ad:6f:ba:ba:db:33:3b:04:3f:8c:13:9c:00:
d4:cb:f4:7c:b5:da:23:f9:19:b2:fc:45:e4:c4:15:
7f:b0:11:2d:73:8d:30:a2:7a:a7:42:e3:8e:37:cc:
cf:54:a3:8e:6c:dd:ba:8d:6d:87:6c:52:ca:79:9a:
06:08:0f:10:e7:b0:33:92:87:27:c4:44:8d:8b:9a:
64:8d:fb:b1:d3:10:c4:44:7b:01:43:d5:61:68:5d:
5b:fa:5a:83:32:01:6c:e5:fa:86:07:59:f7:5a:49:
97:9d:90:77:4c:92:5f:b6:57:25:43:46:1b:e5:94:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:88:0E:32:AB:4C:33:74:88:CA:16:38:84:93:42:19:43:92:48
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:d1:56:16:f4:0b:a5:e5:de:97:66:e5:0a:0f:21:32:75:
19:7c:42:eb:6d:25:39:1e:77:8b:78:27:72:99:66:e4:81:f1:
a5:11:b7:4a:bd:55:44:31:57:47:bc:5e:9e:c4:3c:f4:bd:7c:
40:57:3d:db:76:8d:e4:d6:3f:5c:65:43:6b:0f:b6:c3:92:4d:
b5:15:8a:b7:34:b8:f1:c3:4f:bc:1d:03:be:f2:0f:03:75:eb:
d9:fd:b8:22:ae:12:ce:f1:27:77:21:a7:b5:dc:d9:df:96:f4:
8c:5c:69:9d:1b:ad:28:21:82:9c:8e:d3:27:a8:90:a3:8f:91:
4b:39:31:be:b1:5c:6c:ef:aa:69:0e:58:bf:0b:74:5b:e1:51:
76:94:d0:d1:44:e5:5d:23:87:29:d4:8f:3f:ea:82:76:06:af:
41:db:06:8c:17:38:1e:5c:24:67:2d:16:42:af:c5:6f:da:03:
d9:d2:46:61:f8:65:97:c8:1d:30:ce:2e:00:bc:df:33:61:be:
f6:e0:63:a3:8a:c4:1f:d8:59:21:00:9a:e6:cd:49:3e:7c:08:
10:52:a1:8a:c2:8d:57:c0:a5:d0:3e:8c:5a:0d:7f:0b:08:3b:
e9:c8:fa:8e:a1:8b:7c:51:2b:8f:22:58:e4:ca:d2:de:c5:48:
ff:95:9d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzKUXjRWxGT5H9AITh72lYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjYwMzA3MjIwMTAyWhcNMjYwMzA4MjIwMTAyWjAzMTEwLwYDVQQD
Eyg0NmY5ODgwZTMyYWI0YzMzNzQ4OGNhMTYzODg0OTM0MjE5NDM5MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f2ERCnPJoxl7ujdlwyzWSQJkxQG
p9Al7NMB1JMpq97hKQu9HhD02Eq+d3/4edtImB3Ufjtw2ojaazIdXbDuohfLtKXm
NkDSuRheylTAKgQ8hEL0ddywDugxvv6naG/qRKsECHW42/RySm1zheyVGMp3Buwb
Q4EP2Oe50iKws/kmutBhJjm8Qa1vurrbMzsEP4wTnADUy/R8tdoj+Rmy/EXkxBV/
sBEtc40wonqnQuOON8zPVKOObN26jW2HbFLKeZoGCA8Q57AzkocnxESNi5pkjfux
0xDERHsBQ9VhaF1b+lqDMgFs5fqGB1n3WkmXnZB3TJJftlclQ0Yb5ZTPZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb5iA4yq0wzdIjKFjiEk0IZQ5JIMB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGTRVhb0
C6Xl3pdm5QoPITJ1GXxC620lOR53i3gncplm5IHxpRG3Sr1VRDFXR7xensQ89L18
QFc923aN5NY/XGVDaw+2w5JNtRWKtzS48cNPvB0DvvIPA3Xr2f24Iq4SzvEndyGn
tdzZ35b0jFxpnRutKCGCnI7TJ6iQo4+RSzkxvrFcbO+qaQ5Yvwt0W+FRdpTQ0UTl
XSOHKdSPP+qCdgavQdsGjBc4HlwkZy0WQq/Fb9oD2dJGYfhll8gdMM4uALzfM2G+
9uBjo4rEH9hZIQCa5s1JPnwIEFKhisKNV8Cl0D6MWg1/Cwg76cj6jqGLfFErjyJY
5MrS3sVI/5Wd7A==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:31:21 2026 by rpki-client