
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: EGEDClBERcXk3D9gVZyOKD9sQvdsyzGKgq+4qbiWANQ=
Subject key identifier: CE:8A:8C:87:D6:9C:2F:27:D0:75:61:0C:9E:69:6B:83:19:67:DE:3C
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019EC036BBAD6F5E0ACF95FCF8EB25A5003C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 09:01:12 +0000
Manifest this update: Sat 13 Jun 2026 09:01:12 +0000
Manifest next update: Sun 14 Jun 2026 09:01:12 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: bjPLrmaq3OMzhbrjoQymrh3cwaodLfe+p83ivAA9X+k=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:bb:ad:6f:5e:0a:cf:95:fc:f8:eb:25:a5:00:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 13 09:01:12 2026 GMT
Not After : Jun 14 09:01:12 2026 GMT
Subject: CN=ce8a8c87d69c2f27d075610c9e696b831967de3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:41:07:cf:66:f7:a3:1e:2e:d7:a6:06:c9:
96:0c:31:57:06:16:a6:a5:13:d3:e9:63:b8:0d:a4:
2f:56:44:0e:5b:f1:6f:63:65:f5:00:e6:0d:ba:55:
b2:24:e2:7c:53:e7:65:41:fb:2f:84:0a:e4:2d:7a:
ac:8e:c5:9c:e4:7d:d7:7a:19:72:27:60:66:2c:de:
ca:66:48:c2:2c:d8:c6:0c:ef:b6:c7:5e:96:14:20:
41:8c:97:1c:8d:5b:91:15:44:b2:4d:2b:57:25:a2:
c5:a0:9a:79:1d:0f:b6:77:97:46:c4:fd:9d:d4:3d:
71:81:9c:12:97:0b:3d:22:22:57:f1:f5:27:a9:f7:
c2:3a:62:98:fa:47:e9:e1:21:34:f7:4d:d2:4c:41:
44:5f:18:ad:85:0b:13:37:5a:cb:66:fb:aa:13:9d:
a5:c7:e1:aa:4d:b9:c5:92:83:f2:fb:2a:a9:fb:ea:
ab:7a:af:12:f4:e9:70:e8:3a:3d:7a:77:bd:50:51:
6c:0d:b0:1f:e4:81:57:00:a4:9e:1b:23:68:94:f7:
e9:be:07:5e:b8:a3:d8:e6:f8:15:9f:d1:a2:52:99:
dd:83:b6:7e:19:dc:d8:34:66:13:c4:85:e0:75:6d:
fa:85:71:1b:08:af:36:c3:95:63:3e:98:7d:1c:7b:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:8C:87:D6:9C:2F:27:D0:75:61:0C:9E:69:6B:83:19:67:DE:3C
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:e4:b2:6b:08:ee:c9:df:5d:9a:2d:a4:93:b6:51:ef:a2:
45:74:11:cd:54:d9:ee:92:57:1e:e9:93:5a:00:80:d7:66:d2:
db:30:c4:bd:73:8e:5e:ea:80:2f:38:09:8b:78:05:20:56:14:
39:89:58:8a:e0:3a:05:18:1e:22:be:ec:30:8d:73:56:1b:0f:
83:3b:27:74:4c:9b:f5:80:8f:69:72:93:84:2f:83:d5:6a:f1:
96:7f:00:d9:81:b4:aa:1c:fa:c9:7b:1c:b2:1c:dc:5e:ba:c1:
6f:85:5c:f6:d8:28:4b:94:0d:b9:db:d7:36:e4:8c:07:9f:b4:
7d:54:7c:ca:17:fa:22:a6:5b:c8:9f:d5:73:fa:6a:70:c8:f4:
b8:5e:db:5a:53:15:eb:c9:1d:24:50:26:b4:17:17:2d:95:d3:
4c:a2:c9:f9:e1:8c:fa:5b:e9:5c:1b:5f:dd:fe:15:46:da:e0:
5c:ce:b7:a4:b1:94:01:64:af:2b:e1:dd:5c:7a:47:c4:2e:c5:
fe:4c:b0:c3:13:1f:78:02:e8:ed:f0:f8:b3:06:59:46:a2:6e:
52:0a:d8:b5:c0:7a:7c:3a:2a:d8:49:c0:4b:25:88:9d:e3:98:
2c:51:91:42:dc:86:de:e9:28:74:30:d9:29:8c:cf:90:8c:92:
27:b7:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:36 2026 by rpki-client