Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: 9YuxlVuZJXwpjDMIdKvbyitDSIaHEHFsz3ke5P1iCm8=
Subject key identifier: A8:D7:CC:69:29:90:D4:C5:C4:64:89:09:1A:A4:90:8C:8B:94:D3:79
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019EC44A00ABE3A34EDF5A791A39BC6A958A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 16BC
Signing time: Sun 14 Jun 2026 04:00:44 +0000
Manifest this update: Sun 14 Jun 2026 04:00:44 +0000
Manifest next update: Mon 15 Jun 2026 04:00:44 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: aOCAOhSUG6qe/Bl/+ke4Sw0ujjaxaY9gOEvQHYZFPhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:00:ab:e3:a3:4e:df:5a:79:1a:39:bc:6a:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jun 14 04:00:44 2026 GMT
Not After : Jun 15 04:00:44 2026 GMT
Subject: CN=a8d7cc692990d4c5c46489091aa4908c8b94d379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:57:ca:62:cf:06:c1:e6:f4:c4:1e:28:b5:
b4:2d:e7:07:9a:e1:6f:d2:0e:ea:be:68:7a:cf:9a:
22:94:0b:6a:73:87:f4:f6:be:9c:65:4d:bf:13:59:
ef:60:77:d3:52:d4:67:9e:f9:28:5b:3d:84:8e:22:
c8:c9:39:ea:2a:12:25:45:91:1a:96:60:a3:4a:47:
d2:a5:ea:4c:ca:09:1a:54:20:31:5e:cb:e4:0d:04:
c1:a9:ec:21:76:19:f9:ea:d3:82:b4:8e:2e:d9:76:
98:b3:6d:0f:54:69:2b:3f:2e:29:5e:4f:3d:35:a4:
6c:46:eb:c5:67:86:cb:42:65:c1:50:3f:4c:f4:a4:
bf:f5:7f:eb:43:85:c7:f0:92:a1:89:02:a8:06:7d:
6b:5a:78:b1:19:03:f0:0c:3f:f6:49:f6:23:b9:fb:
d2:cc:a8:39:16:1b:5b:f2:e4:f2:07:45:8e:d8:52:
67:68:9a:ac:32:75:c2:e9:49:12:2d:70:2d:15:be:
e3:c8:69:6e:65:78:2e:42:40:d0:36:bb:80:02:f0:
71:6a:50:fe:37:ab:ba:65:50:a8:13:b5:aa:00:93:
74:ac:c6:45:d6:06:db:1c:1a:3b:10:e8:59:d9:50:
f2:27:5c:64:8c:f9:98:93:2b:20:8e:5d:6c:60:53:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D7:CC:69:29:90:D4:C5:C4:64:89:09:1A:A4:90:8C:8B:94:D3:79
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:05:bc:8e:30:04:17:ef:36:64:59:c9:d1:79:b9:37:4a:
8e:b5:14:25:a5:82:fd:b3:8d:a1:aa:43:f1:04:82:a7:b7:fe:
43:ba:7f:66:ec:d6:80:11:1d:61:42:fb:c2:69:83:d9:1f:0c:
fd:3d:91:ae:3a:2d:3c:ff:37:90:4d:70:95:3e:01:ad:bb:fa:
69:56:6b:ee:05:f9:b8:f8:78:49:42:bc:12:74:27:97:fe:e4:
42:a4:f2:6f:01:25:8e:a3:b1:fe:56:74:b9:30:32:63:b9:ad:
c8:a6:8d:6f:34:85:cd:ea:f9:d8:22:50:04:85:97:41:3b:27:
34:59:f7:d6:e8:94:b7:09:32:59:c1:03:0b:09:0a:02:5c:61:
27:d4:b6:6e:dd:de:5e:8a:10:24:3e:aa:59:74:6a:23:43:d9:
5c:27:c1:05:b4:f9:82:29:d3:97:f2:e2:c4:47:a1:b5:d1:ee:
a4:97:fb:3f:a3:65:59:44:93:3c:86:ab:db:9b:88:7d:f2:40:
88:3b:04:96:83:4b:ca:08:39:d6:0c:a2:d6:f4:ca:12:9a:29:
b9:ba:85:53:13:dc:a8:c1:e5:30:c2:8d:c2:96:98:f4:91:de:
65:52:47:61:fb:a6:b1:a1:29:dc:4f:ab:88:2d:14:0f:40:c4:
f9:4c:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:57:05 2026 by rpki-client