Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: wWhHpxWBai8dx5iRtoU7grKqj0UdnBoYmigSWvcKzOk=
Subject key identifier: 0A:97:65:A0:85:57:FE:B9:6E:3D:62:37:2A:AF:CC:92:B5:DA:34:A6
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019D9A3EFE9C5042373383979748A6D4BDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0A35
Signing time: Fri 17 Apr 2026 07:01:52 +0000
Manifest this update: Fri 17 Apr 2026 07:01:52 +0000
Manifest next update: Sat 18 Apr 2026 07:01:52 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: WjiStJzwuHo8Ew+zvv0OFh1ecqtJ9Zztda6SSDoSX1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:fe:9c:50:42:37:33:83:97:97:48:a6:d4:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Apr 17 07:01:52 2026 GMT
Not After : Apr 18 07:01:52 2026 GMT
Subject: CN=0a9765a08557feb96e3d62372aafcc92b5da34a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:a0:bb:f0:18:4a:63:c9:51:05:a5:61:62:
d4:79:d8:6f:e8:67:3c:03:8f:d6:74:6f:dd:61:2d:
be:dc:b0:b4:0f:74:96:42:b9:f5:d6:f8:47:e4:37:
99:71:84:e4:de:52:12:3d:f2:26:c9:a6:82:16:d4:
ac:10:d0:97:e7:63:78:b6:13:f4:55:04:de:5f:c7:
01:d6:b1:42:f1:bb:be:3b:fc:76:9c:f1:76:34:b8:
61:39:5e:e5:dc:9e:68:28:da:ae:1f:59:88:8d:64:
f0:ad:4d:11:c4:8a:4b:9d:0f:8c:05:c0:2f:18:02:
5e:36:35:ca:e5:8c:24:98:4b:0e:f9:3c:73:ea:30:
b7:76:68:96:09:75:fb:c4:a7:2f:02:07:69:22:22:
e4:52:4e:cd:9e:7f:49:05:08:af:6a:b7:3b:08:47:
76:0e:80:36:66:30:a7:47:7f:10:7c:a9:58:de:0d:
33:81:14:3b:e4:99:76:97:27:1b:b9:87:d1:08:7a:
9b:e9:f1:ab:4d:6f:72:4c:a8:46:5c:1d:b7:30:b1:
df:6f:10:90:95:ac:c7:d3:67:e9:3a:bd:74:e2:b3:
c8:7c:13:94:e6:30:fd:fb:bc:09:59:46:67:ee:e1:
69:fd:c0:df:5b:2f:a1:88:ca:39:28:e3:42:b7:8e:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:65:A0:85:57:FE:B9:6E:3D:62:37:2A:AF:CC:92:B5:DA:34:A6
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:37:4c:86:48:79:dc:20:b1:54:31:e4:1d:09:e5:e5:bf:f1:
02:6b:bb:a1:a2:90:23:fb:73:6f:54:36:22:69:92:1a:21:ca:
0d:fc:29:1d:c5:72:aa:69:4a:31:e4:2b:4a:52:ec:80:7c:bb:
87:f8:c3:7c:f5:38:f7:24:44:14:01:b7:29:14:e7:26:08:a2:
a8:03:3f:2b:b2:e9:02:71:b5:61:31:be:f0:ab:da:d4:cd:03:
4a:c9:3c:1a:a9:b3:ba:32:9d:03:14:2e:8d:22:7f:df:b4:15:
8b:da:80:a5:df:33:a1:c7:ad:af:98:11:0b:80:fa:76:3d:9c:
4c:3b:59:1d:1c:94:b4:ae:ec:3f:04:83:d3:9b:09:61:82:64:
71:9e:b0:01:b6:8f:b8:0e:0c:1e:79:5d:6f:5f:c9:a3:d3:41:
8c:8f:27:05:b5:77:09:a9:05:89:23:b1:df:c7:2b:ce:77:4b:
10:5a:72:86:e2:74:48:85:63:da:8c:86:40:87:9d:8b:b6:77:
6f:6a:74:b0:96:27:25:28:27:48:9e:7e:f3:e8:41:82:ff:e9:
78:47:c4:8e:a0:05:7b:e3:9c:b3:92:37:4f:bf:e5:72:44:63:
bb:cd:60:4b:86:05:7f:fc:bb:f0:56:a5:73:e1:e6:b5:93:e1:
b8:ff:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:08 2026 by rpki-client