Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: PpeXTgnW5QJxcmESGIqiP0bip52mf9OGHLxbxbgkLk0=
Subject key identifier: 33:2E:2F:17:08:60:E6:B3:57:62:E1:38:04:38:AC:7D:02:E6:18:55
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019FAC086E2C11BDDE145118AB9397DE0181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1734
Signing time: Wed 29 Jul 2026 04:01:01 +0000
Manifest this update: Wed 29 Jul 2026 04:01:01 +0000
Manifest next update: Thu 30 Jul 2026 04:01:01 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: EdDHVjOg1ysV7RB0T0PNin/KOhf7Za8CLj2HejGOrio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:6e:2c:11:bd:de:14:51:18:ab:93:97:de:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jul 29 04:01:01 2026 GMT
Not After : Jul 30 04:01:01 2026 GMT
Subject: CN=332e2f170860e6b35762e1380438ac7d02e61855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:dc:41:45:30:24:65:4b:6c:82:80:6c:06:
33:f5:48:0e:c5:47:7b:9e:87:1c:ce:c1:fe:74:0f:
3f:a0:75:7b:c5:18:e6:7f:36:35:af:a6:b6:8c:09:
2f:18:65:75:75:e8:3a:05:a1:20:e2:49:0a:ea:30:
20:ea:1d:80:0a:91:5f:0d:cc:6a:eb:4c:ae:bc:81:
81:71:2e:86:90:93:a6:06:05:31:16:ed:29:49:0c:
19:86:40:5b:97:f3:51:ec:d2:72:ec:d4:56:dd:bc:
31:47:44:ce:fa:70:09:88:5e:64:ca:7b:61:bf:a8:
8e:7d:86:74:cf:d8:7f:17:da:c1:22:b2:99:bd:0c:
ef:57:e1:61:f6:27:54:da:a4:aa:eb:7f:e0:d4:d2:
33:9a:01:ad:ca:a0:9e:3a:35:54:4d:d5:8f:97:94:
10:57:30:95:95:91:82:6c:9e:c7:ef:b0:4e:a9:07:
4b:b8:d5:03:f6:c9:a5:95:f5:e1:b9:76:44:d4:e2:
31:f1:a6:05:52:45:34:76:09:65:f5:55:0c:9c:fc:
fa:27:30:a8:c2:0b:90:10:d0:68:d3:be:f6:0b:be:
7f:fe:c2:2b:c3:b9:16:a2:01:43:21:4c:34:40:68:
1c:22:e8:ed:c8:68:1c:37:b9:01:37:7c:53:0f:e6:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:2F:17:08:60:E6:B3:57:62:E1:38:04:38:AC:7D:02:E6:18:55
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:b7:d3:c8:55:db:d5:70:57:58:1e:fd:2b:f8:99:e5:d8:
c4:7e:ab:5f:7e:ea:be:fb:25:2f:47:84:80:28:16:72:e5:04:
52:b8:2f:0f:c7:bd:6c:41:fe:04:17:be:e3:f9:f9:8c:e8:b9:
f4:0e:b1:a8:1d:12:02:4e:c2:2c:be:ec:11:fc:e9:77:92:d4:
85:59:43:a1:43:18:23:8f:b3:d2:a8:bd:a0:17:94:16:31:1f:
b9:01:f4:a0:d9:0a:8f:59:f5:b2:34:e3:9c:fa:dd:1d:64:5f:
f6:c6:ef:95:94:13:04:46:42:9e:38:f7:52:7f:dc:81:6c:c1:
69:99:f0:80:9c:d5:4c:95:79:2c:b4:7f:7d:5e:b4:ef:fe:78:
98:a9:99:2f:d1:2b:12:4a:8d:1c:cd:29:b1:f9:68:89:9b:45:
b5:b0:fd:13:bd:8f:84:68:bc:b2:10:28:5b:c5:72:fc:a3:5e:
d3:c4:8b:75:4b:e3:b7:11:fe:da:cf:35:42:c1:72:ee:2b:99:
82:5b:33:ec:be:da:21:12:dc:cb:3e:3c:94:5a:ad:bd:73:c5:
e3:99:ed:58:33:1f:68:ea:9f:e3:bf:21:30:9d:99:87:bb:60:
3b:10:c3:8b:b0:fb:83:97:32:75:10:0d:76:bf:e8:58:d3:3c:
71:66:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:15 2026 by rpki-client