Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: P/9wrHb41JlSICLL8B4lTe+IWJ7G/mQUIWGA9Nz68Ds=
Subject key identifier: 71:A9:09:03:1C:74:20:AF:90:88:F9:4D:8F:DC:54:5F:43:C0:E4:45
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 01A135FEFBD03DEB95EA009A939C16EC9625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1800
Signing time: Tue 13 Oct 2026 16:01:05 +0000
Manifest this update: Tue 13 Oct 2026 16:01:05 +0000
Manifest next update: Wed 14 Oct 2026 16:01:05 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: HuBbguyrgGpdRR9z/LrFQS6SL28hRasqZHUz3Qydnl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:fb:d0:3d:eb:95:ea:00:9a:93:9c:16:ec:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Oct 13 16:01:05 2026 GMT
Not After : Oct 14 16:01:05 2026 GMT
Subject: CN=71a909031c7420af9088f94d8fdc545f43c0e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:a5:7e:4e:96:60:ec:f2:a3:ce:f6:49:53:
1c:54:4b:f1:d4:81:58:8b:db:79:5d:9b:d7:05:1e:
3d:82:37:7d:94:51:04:34:6c:aa:4f:9f:f3:38:39:
33:e4:a1:cb:4b:d8:88:a4:62:94:a3:db:20:64:4b:
a0:0d:5f:26:68:5e:37:73:24:9a:7d:a3:71:64:06:
a4:f2:a5:6f:1a:92:03:f1:33:6f:1d:b1:5a:b7:b5:
aa:ec:e5:25:92:f7:3a:f6:90:c6:a8:33:9b:e6:e6:
ed:50:e4:cb:62:96:26:b4:f9:bc:c0:33:6f:21:8b:
69:7c:3d:26:a7:0b:48:73:46:40:82:40:b0:63:23:
d4:9a:7b:66:f1:a1:fc:92:2c:2e:6c:1a:27:1a:48:
55:3c:1b:73:f8:68:b3:04:90:53:6f:e5:55:3c:21:
48:71:8b:27:2a:e5:58:ee:c5:5c:95:a2:cf:7d:1c:
7f:d9:49:72:0f:55:af:4e:34:b3:51:ff:23:c0:1a:
46:0a:d9:28:8d:73:d4:0c:46:c0:3d:96:ff:f0:df:
2a:3f:b5:35:e6:85:28:e0:b5:08:db:44:08:be:b5:
64:43:01:82:4e:e9:82:30:a8:72:33:0c:36:f6:52:
49:d2:ff:e1:bc:7d:e0:0a:5c:28:b0:97:72:7c:4d:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:09:03:1C:74:20:AF:90:88:F9:4D:8F:DC:54:5F:43:C0:E4:45
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:59:83:24:22:04:36:f1:04:57:8b:cd:f0:73:77:f9:b3:
40:11:23:2d:12:ad:a0:a5:fb:09:bb:8b:61:2d:18:a5:78:b3:
8e:d7:8b:70:e4:3c:2a:95:95:11:a9:8d:5c:41:1b:e4:52:d4:
81:8f:08:02:c1:ff:7c:51:aa:6d:10:08:0d:b0:93:94:30:57:
5e:fe:9c:6e:0b:2b:12:1d:2c:c6:f0:01:fa:3d:7b:4b:89:79:
9b:b5:1e:d7:4c:a1:02:1f:fb:67:47:bd:42:b6:1e:2f:01:2c:
84:14:bd:ae:7e:ab:e2:9b:74:c5:a5:2e:89:47:19:c3:c0:12:
18:ab:d8:38:e7:1a:96:8e:1a:ee:c5:ee:1e:9e:a7:46:70:1a:
db:d6:a1:75:42:c5:aa:c2:2c:8d:53:c0:57:d3:a0:26:f4:b6:
dd:c9:0e:39:3f:82:e1:1a:7a:a7:1f:d5:13:14:f1:e5:24:fe:
8a:21:9c:d1:16:3f:9f:f5:91:52:7a:c7:94:4a:3a:0f:23:63:
c8:79:55:2b:4f:f7:15:bb:7e:3a:96:61:1c:da:b5:2f:ec:40:
e8:67:20:80:32:23:2b:8c:9d:4b:4e:1f:b5:67:4c:ce:d3:c8:
d7:f6:b0:89:bb:9e:b5:aa:be:10:b6:d2:24:31:37:56:18:14:
63:78:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:44:21 2026 by rpki-client