Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: /WFVCLC8vPzAz5+WG/hmtfghB4LjM+Zths3mZN3QLfo=
Subject key identifier: 2C:25:58:71:2C:A0:CD:37:4E:56:93:2A:C0:65:E1:4C:B4:99:B7:57
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019EC1495C47ED034D76591AA149A34FB9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 14:01:10 +0000
Manifest this update: Sat 13 Jun 2026 14:01:10 +0000
Manifest next update: Sun 14 Jun 2026 14:01:10 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: 04EAAdzz/+Crp0pYjqioFt9IH9elV/fwoUh2QgUtbXM=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:5c:47:ed:03:4d:76:59:1a:a1:49:a3:4f:b9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jun 13 14:01:10 2026 GMT
Not After : Jun 14 14:01:10 2026 GMT
Subject: CN=2c2558712ca0cd374e56932ac065e14cb499b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:42:72:37:0a:09:15:e4:5a:4e:df:c0:64:
dc:2a:0b:76:62:de:4f:2b:04:be:bb:6c:5c:51:cd:
3b:c0:e2:00:00:8e:3f:c6:ea:eb:c0:ac:b6:29:01:
7f:46:8b:05:50:d3:31:69:a6:9b:29:dc:30:f4:f1:
da:71:0d:db:c7:96:72:bd:26:80:3b:f3:aa:2a:e9:
45:b6:5e:81:83:35:6d:f8:45:d6:fb:fc:03:ff:f6:
f1:03:81:98:97:5a:69:a7:c2:4e:71:6d:74:b0:6b:
fc:f0:c5:0b:71:a0:01:0b:b0:be:01:80:8a:54:70:
20:71:85:31:a4:78:86:44:b8:aa:40:10:77:cc:01:
33:87:26:db:fd:eb:f8:6e:41:31:0b:5f:81:1f:e3:
b3:ed:df:31:18:d0:b3:9a:cf:0e:76:e8:ed:7e:c7:
ea:e6:71:5f:e7:af:69:54:ce:98:62:29:03:cc:7a:
f4:a4:8f:61:a5:42:ed:f7:01:78:c8:97:9f:0f:7f:
74:ab:6f:9e:b2:e2:d1:7e:9a:00:04:3b:71:10:22:
9b:fb:14:f6:e5:93:41:74:75:47:88:18:c1:76:8d:
b1:34:20:0e:38:b7:7f:3e:96:1e:9c:25:db:1d:c2:
d7:42:03:28:d7:2e:f7:e7:46:00:49:0e:f2:f1:6e:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:25:58:71:2C:A0:CD:37:4E:56:93:2A:C0:65:E1:4C:B4:99:B7:57
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:2a:19:40:52:c3:23:a6:9a:14:a9:dd:4b:9f:2a:ed:43:
4d:dc:41:25:69:8d:c0:47:93:8d:bb:37:3b:05:67:4e:dd:bc:
18:5d:fd:12:9f:7e:ad:46:17:b7:c6:5e:7d:ed:f3:26:4e:c3:
00:50:8e:47:91:43:c1:07:d3:8c:ec:a4:3e:b1:62:b3:3f:a8:
42:7e:bb:24:3c:de:f8:9f:2a:24:c6:42:13:ad:fa:f5:97:94:
9f:28:94:1f:6b:55:14:ff:e9:b8:f6:3c:f3:d0:ff:55:c0:b1:
62:1d:39:43:88:2b:03:60:26:df:ae:c2:98:5d:23:69:88:05:
49:e3:6b:be:82:db:a1:97:8b:01:fd:6f:ff:3b:3f:34:5e:90:
fa:2b:1c:6a:0d:97:26:69:a5:be:6f:09:ad:78:a3:81:77:0c:
1a:da:ee:10:d4:7f:fb:da:e2:49:b5:ab:3e:d1:b2:d1:88:c9:
16:0a:4e:a7:76:dc:72:79:dd:eb:b4:4c:bd:f0:c9:a2:66:e4:
32:41:a3:1f:3d:af:68:10:d9:9b:2e:a5:07:f3:3a:8b:01:3f:
dd:6e:1d:20:b3:64:f7:0e:2e:20:cf:79:e5:c5:1e:54:67:65:
6e:ee:39:93:d5:a9:75:1c:ac:5f:af:d5:71:06:71:3a:ee:b8:
3a:b7:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:05 2026 by rpki-client