
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: 9mmExGiZ2eQ+xjONyYSEvIYyPyxwx4VTHpNDqw9/iqE=
Subject key identifier: 5C:00:B3:CE:E1:A7:C9:AF:99:EA:54:C2:86:4F:96:8B:01:19:6D:40
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019FAB6408A919420AAF2550FD95A857510F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0B47
Signing time: Wed 29 Jul 2026 01:01:27 +0000
Manifest this update: Wed 29 Jul 2026 01:01:27 +0000
Manifest next update: Thu 30 Jul 2026 01:01:27 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: ilSyKNr0LCIBqyPWmuDZs8YW8W+tvGocL6eKZR6a6Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:08:a9:19:42:0a:af:25:50:fd:95:a8:57:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Jul 29 01:01:27 2026 GMT
Not After : Jul 30 01:01:27 2026 GMT
Subject: CN=5c00b3cee1a7c9af99ea54c2864f968b01196d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:63:ac:ab:17:7b:19:d1:45:aa:6b:38:b4:
81:29:f9:fa:45:cc:eb:e6:6a:b1:41:5b:dc:27:e7:
6a:00:0f:3c:7d:dd:71:f8:83:33:aa:4c:16:60:e2:
59:56:3b:7f:3f:48:51:eb:a5:8c:42:46:c2:42:c1:
ac:c2:3f:9c:f9:27:c9:38:0b:20:5c:19:4a:d1:f6:
c0:a7:ed:36:ad:00:b6:fe:77:2e:fe:3c:6c:5c:33:
21:07:2b:96:d5:f2:d4:8c:a3:3c:45:d2:3a:9f:51:
13:c5:74:a9:8c:ae:14:23:8c:31:08:be:49:d2:24:
e3:b6:cd:b8:17:29:ea:de:0f:b9:91:23:a1:e0:7b:
7e:d1:85:f1:7e:c7:05:b8:11:55:8c:2e:60:2a:35:
c9:9d:c5:5f:de:98:db:fb:78:5e:38:34:17:c8:35:
9d:03:d5:0d:3a:93:32:66:e9:00:56:e0:38:36:22:
14:80:cb:ff:fb:58:88:d4:b8:7a:84:45:b0:04:26:
cd:3f:0f:f8:2b:3c:7a:85:ec:6f:2f:5c:0b:e6:c0:
1a:75:5f:33:ec:55:14:3d:42:21:fe:8f:0e:12:de:
8a:8e:87:38:b3:90:3a:7d:a3:c3:75:87:8d:92:e9:
4f:f2:41:b2:13:67:1e:b4:ef:2f:6d:8d:1d:0e:15:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:B3:CE:E1:A7:C9:AF:99:EA:54:C2:86:4F:96:8B:01:19:6D:40
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:4b:83:13:b8:ce:00:b4:fe:dd:f0:29:c4:62:2b:4f:79:
2e:06:a4:43:05:b5:a5:1f:a9:3a:00:f6:f6:23:8a:d0:f9:44:
dc:ca:f8:fc:c3:1f:14:62:1b:4c:e1:25:36:a7:a1:f8:a5:b7:
85:49:10:e7:28:04:9a:ed:dd:34:9c:56:df:36:85:51:08:13:
fb:1f:9f:5c:1f:74:86:7d:82:b5:0c:19:7d:94:44:37:be:6d:
89:08:cd:89:3c:d8:8f:d0:19:97:24:58:d1:78:61:05:4a:13:
12:ef:2a:fd:36:16:bb:80:27:eb:d3:43:32:b1:90:4c:91:8b:
e2:b2:68:ba:cf:da:9f:f7:2e:23:f5:f0:d0:f5:d0:ae:66:23:
1b:60:55:75:e9:4c:e9:99:97:f8:58:5e:c0:24:62:58:54:8b:
8b:51:95:86:b8:8e:fc:47:86:dc:1c:e3:8b:00:38:32:42:17:
e6:d9:fe:af:fb:86:8f:ee:a6:24:16:51:4b:ef:94:27:c5:51:
b1:b8:0f:fe:43:45:28:06:8c:a9:89:97:58:f0:6b:48:32:04:
24:25:1c:28:dc:ec:5e:a9:3d:1c:be:3b:97:be:dd:43:d5:1f:
c9:f0:db:40:5a:0f:de:36:51:0d:10:e1:fe:4f:02:b9:2a:04:
85:3e:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:41:12 2026 by rpki-client