
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: /QxlMQ4PuT5WjB0knKpTqbF2GadF7jH4kwpdimOnpHM=
Subject key identifier: FC:E4:F0:F2:19:B9:87:4B:D8:D5:94:A8:94:58:EC:26:DA:7C:0C:48
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019EC1B68911D818EB374CD860A332BE6904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0ACE
Signing time: Sat 13 Jun 2026 16:00:25 +0000
Manifest this update: Sat 13 Jun 2026 16:00:25 +0000
Manifest next update: Sun 14 Jun 2026 16:00:25 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: OQISNdHRY++AL8kaN4QwDSL3YnE7h1onw2ELOHpXeBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:89:11:d8:18:eb:37:4c:d8:60:a3:32:be:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Jun 13 16:00:25 2026 GMT
Not After : Jun 14 16:00:25 2026 GMT
Subject: CN=fce4f0f219b9874bd8d594a89458ec26da7c0c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:09:8f:09:40:34:0b:4c:a5:b2:db:b5:d9:
54:1f:49:35:9b:70:1a:02:8c:2d:e7:08:4c:83:00:
1b:ee:e9:5a:c2:b3:ad:fc:4f:89:50:c6:b4:dc:e2:
e6:5a:f1:d2:ce:51:50:d1:33:f6:2f:0e:22:60:51:
89:44:71:01:27:a4:16:64:c8:53:12:41:14:32:52:
6e:4f:c2:8d:8d:82:0b:c2:c2:d2:cd:58:94:e6:c0:
d2:27:a3:e5:d6:9b:be:e1:7c:9e:74:64:3f:ce:43:
a9:86:2c:43:57:68:00:4a:5d:b9:fa:f6:a6:c4:99:
7d:e7:f0:13:db:d4:f8:ba:dd:21:27:6c:8c:2a:69:
3c:9d:b0:41:4f:a5:93:10:a7:42:e3:bb:79:98:2c:
c6:50:20:61:ee:ff:4e:eb:ce:26:da:30:09:55:c1:
be:9a:17:01:3e:0d:28:b0:69:ab:38:f5:36:7b:c0:
bf:b4:66:de:a3:61:6e:9f:5d:0c:60:9d:f6:c8:8e:
bd:c1:11:3d:0d:06:c1:74:33:98:1c:78:ac:d9:c2:
ee:2f:d3:e3:10:91:e6:04:6f:48:2e:27:1e:cb:eb:
9e:2a:4e:35:c8:1c:e6:26:c1:f5:a4:e1:49:cd:d6:
0f:4a:c9:ab:0d:c7:e1:c4:84:e5:88:3a:af:69:e9:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:F0:F2:19:B9:87:4B:D8:D5:94:A8:94:58:EC:26:DA:7C:0C:48
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d1:ec:a5:aa:4f:9b:26:9a:2e:c8:f5:20:e4:79:2b:79:e0:
d7:c1:87:f3:1d:b9:a0:30:4f:10:f3:60:e7:62:d4:df:c2:3e:
7c:5c:3a:3a:06:79:58:ef:ec:d9:f6:3e:90:2c:4f:b5:a7:01:
e2:b2:20:90:f4:a2:6f:5b:98:03:e2:fe:77:61:8d:0a:e9:ad:
ba:7f:c8:05:e8:3f:79:ec:0b:4f:3e:17:5e:52:a3:59:0f:43:
29:58:29:49:d8:ea:0a:a9:58:6d:7a:86:31:30:b5:d6:fc:13:
ca:95:d1:09:45:75:a3:fd:22:17:e3:c1:af:91:c8:9e:7f:64:
05:ef:e1:80:3a:d9:46:80:ef:b8:20:58:48:fc:e5:9f:60:b7:
57:b8:12:2e:d8:f3:6c:75:f1:76:66:f3:72:84:1b:ab:09:3b:
3c:0d:3f:34:88:da:f0:c2:2c:e6:90:8b:28:91:a1:f3:9a:7a:
8b:48:af:3b:70:b2:e7:82:50:92:f9:91:46:3a:c8:74:bc:64:
3f:42:c9:cd:98:e4:76:e3:8e:b5:c5:c5:d7:bd:49:ef:fc:a7:
79:f9:92:94:f3:c4:79:ef:32:e9:a7:56:4c:37:53:0d:ed:7a:
89:12:8f:cd:be:43:a4:3d:34:23:3c:30:d2:7c:7c:2a:a7:d1:
64:8d:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:13 2026 by rpki-client