Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: 0pvLSsHHamViEFzBWixW8o0F2RIRqVFaf5b0OSBdbrs=
Subject key identifier: 7C:B9:FB:4F:17:54:4F:45:EA:5C:AD:B6:BA:CB:39:B0:2E:C7:2D:CE
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019CAD59CFF23EAF2DFE452E226E52D87AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 15A7
Signing time: Mon 02 Mar 2026 07:01:10 +0000
Manifest this update: Mon 02 Mar 2026 07:01:10 +0000
Manifest next update: Tue 03 Mar 2026 07:01:10 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: L8sbh6ChBJhIacXfydGpxefoBLqrgxtinmLIIFAh7dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:cf:f2:3e:af:2d:fe:45:2e:22:6e:52:d8:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Mar 2 07:01:10 2026 GMT
Not After : Mar 3 07:01:10 2026 GMT
Subject: CN=7cb9fb4f17544f45ea5cadb6bacb39b02ec72dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:50:bd:84:81:9e:df:ca:53:e4:bb:92:e1:
97:fa:19:11:7c:c9:5e:31:48:af:3f:e3:f2:a1:4a:
f5:28:8e:fb:3a:3f:a2:07:d2:97:2d:58:2c:32:4f:
fe:84:83:70:94:ac:fe:08:63:a2:b6:69:ec:18:83:
1b:ea:8c:92:40:66:e3:8c:c9:41:9a:82:f5:f3:92:
27:b7:d0:5c:d9:3a:28:c7:33:20:8b:0d:6a:1f:a4:
da:97:aa:40:60:27:c4:4d:32:64:cb:c2:95:48:4e:
7f:fc:ad:fd:01:04:2f:79:d9:56:0f:ff:99:ce:7a:
6c:8f:f0:dd:97:67:00:c4:13:34:63:2d:2b:be:d8:
3a:f1:6a:18:97:c4:62:87:18:cd:c0:36:7f:9d:8c:
f3:8f:65:09:d0:61:19:61:07:83:a9:ec:14:53:24:
47:4f:7c:a8:2d:98:dc:98:f5:c5:58:dd:b9:a7:6b:
47:7f:76:cf:e5:42:58:f7:6b:15:61:79:9d:a1:cd:
1c:de:37:20:27:76:d6:f7:05:19:9b:38:d7:43:d3:
19:57:de:33:03:99:02:f9:d4:c9:d1:45:9e:f8:39:
e2:34:43:88:09:93:5c:9b:c0:27:36:4f:09:67:64:
fa:81:35:e4:82:b7:d9:b5:17:ae:be:26:82:c7:05:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:FB:4F:17:54:4F:45:EA:5C:AD:B6:BA:CB:39:B0:2E:C7:2D:CE
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:26:5d:9f:d8:e4:91:2d:f1:f5:64:bb:ce:1e:b6:c4:94:
ce:ae:81:19:f5:b5:9f:13:be:02:49:66:56:86:45:18:b6:7e:
97:18:13:ea:57:fd:f0:44:d9:4c:e0:f3:c9:27:10:88:84:11:
3f:6d:01:78:a2:f5:79:bd:44:06:1f:3e:4b:e4:6e:95:48:02:
1b:a9:c0:8d:2d:9a:bc:0a:d3:24:bd:2a:66:d3:04:32:af:e3:
c0:5b:a2:d4:49:cc:46:0c:72:ba:43:af:4e:30:7b:62:3c:63:
7a:12:28:e6:5b:69:f9:8b:eb:90:9a:7b:fe:dd:d8:86:57:9a:
42:78:2e:54:08:df:c7:17:d3:72:24:7f:37:28:6a:93:5f:02:
66:3c:d6:b9:b9:c0:54:fb:94:a9:63:06:f6:0e:bc:1c:4c:d0:
b0:e1:86:83:bf:e8:05:03:10:f8:43:8d:53:22:28:a5:fe:fd:
f9:45:1f:be:34:00:d4:5c:dd:8f:9b:ae:65:b0:b9:1d:fb:a0:
b1:b0:f7:73:61:c0:49:cc:1e:4e:d6:e7:bc:0f:d0:27:2b:52:
4f:66:52:d5:14:51:5d:9d:d0:cb:d6:a0:81:39:d6:44:2a:71:
fe:da:0b:d7:78:87:c7:33:43:10:0e:eb:6b:19:5e:a4:7e:63:
62:2b:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:29 2026 by rpki-client