Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: 8ZL1tPqPJHlmq09d9O9jhILUOw3Fm6iLHUL6c26+mX8=
Subject key identifier: AA:EB:D6:59:87:BB:2D:F6:48:49:04:D3:3C:0D:64:71:D4:13:99:03
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019F92ED2306FD695B07276641111C5F7BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1727
Signing time: Fri 24 Jul 2026 07:00:42 +0000
Manifest this update: Fri 24 Jul 2026 07:00:42 +0000
Manifest next update: Sat 25 Jul 2026 07:00:42 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: BKBF+za//1rAAZmMUjedWcJoM31tAU37mBfBMgBWcd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:23:06:fd:69:5b:07:27:66:41:11:1c:5f:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jul 24 07:00:42 2026 GMT
Not After : Jul 25 07:00:42 2026 GMT
Subject: CN=aaebd65987bb2df6484904d33c0d6471d4139903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:63:60:fc:c7:33:9d:41:6c:e3:9d:e6:77:
65:72:a3:54:a5:2d:d6:67:a7:9c:f9:dd:d1:dd:0b:
ef:aa:8e:74:c2:f1:1c:70:21:fb:07:0b:a6:23:81:
72:d5:f6:c9:06:aa:f0:a0:cc:b7:28:6e:1f:61:1d:
8d:60:57:07:5e:c7:47:ea:fe:54:8d:c3:c2:a9:f0:
0c:4a:8e:7f:96:d6:d9:10:4f:a6:8d:9b:8f:ed:84:
a5:d6:11:fa:d5:13:08:e3:fe:04:61:ad:c2:b3:c8:
af:7e:09:b6:bf:f8:ec:3e:ad:de:51:d6:01:5f:c0:
db:f1:d0:96:eb:1e:0c:52:87:37:c0:97:1c:28:7f:
37:86:6d:37:a8:3f:c9:39:8b:f4:3d:e5:42:64:fa:
ff:fd:27:73:9c:36:1a:92:c1:00:da:73:cc:b2:6b:
19:36:e5:5f:29:f9:90:1c:4f:0f:db:c6:46:75:d9:
64:dd:d6:ff:ad:ec:e5:4a:56:0e:05:4e:09:e6:48:
75:f4:ea:fc:0d:9a:85:93:55:88:ae:5a:82:f1:31:
54:6f:ad:8e:7f:08:36:ad:0f:92:c5:a5:c2:27:a7:
74:cd:e0:85:a3:d5:85:40:65:8e:28:ff:65:f0:59:
75:d7:2a:20:ff:9a:fa:72:eb:98:0d:2c:2b:71:a0:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:D6:59:87:BB:2D:F6:48:49:04:D3:3C:0D:64:71:D4:13:99:03
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:52:35:86:2f:86:3e:6f:92:61:00:ca:4f:24:f3:2f:c7:b7:
2d:2f:45:17:b9:98:de:13:6e:96:9b:35:aa:ec:85:85:20:1e:
c9:c2:f8:73:55:e9:7c:05:cb:fe:d9:1b:e9:3c:8a:41:e4:ae:
94:24:71:34:b8:47:ef:52:99:58:05:e1:20:bd:ff:a6:0c:4d:
ed:fa:76:86:67:6e:eb:d6:98:77:e2:b9:01:0e:68:7f:20:86:
6c:fa:da:8a:f5:f7:c8:a8:46:88:56:40:ba:c8:db:2f:46:51:
84:78:3e:8e:43:5e:f8:46:ce:28:7b:5e:ce:4a:1c:eb:0a:43:
61:df:14:e5:9d:6d:b0:18:32:fe:13:d9:ad:68:dc:b9:2b:e5:
8d:63:44:93:a9:7c:3a:57:91:b4:fa:64:85:d9:b0:a2:cd:c0:
d5:c6:5b:4e:37:57:8c:a1:c8:18:aa:e8:20:5e:07:39:f1:35:
9d:80:b6:c2:fe:3e:ae:ba:7b:e1:fe:d0:e1:f5:a3:59:ca:97:
c3:4b:52:81:2d:c0:cf:a2:a5:44:91:24:54:a3:3f:27:b6:15:
0a:4b:2e:06:d5:11:ee:39:fe:e2:aa:53:5b:a7:fd:6d:f4:e9:
85:09:cd:9e:d1:c7:3b:20:47:8b:17:18:fe:94:f7:3a:f0:1e:
13:d2:33:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7SMG/WlbBydmQREcX3vOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3
MmZmMTIwHhcNMjYwNzI0MDcwMDQyWhcNMjYwNzI1MDcwMDQyWjAzMTEwLwYDVQQD
EyhhYWViZDY1OTg3YmIyZGY2NDg0OTA0ZDMzYzBkNjQ3MWQ0MTM5OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo5jYPzHM51BbOOd5ndlcqNUpS3W
Z6ec+d3R3Qvvqo50wvEccCH7BwumI4Fy1fbJBqrwoMy3KG4fYR2NYFcHXsdH6v5U
jcPCqfAMSo5/ltbZEE+mjZuP7YSl1hH61RMI4/4EYa3Cs8ivfgm2v/jsPq3eUdYB
X8Db8dCW6x4MUoc3wJccKH83hm03qD/JOYv0PeVCZPr//SdznDYaksEA2nPMsmsZ
NuVfKfmQHE8P28ZGddlk3db/rezlSlYOBU4J5kh19Or8DZqFk1WIrlqC8TFUb62O
fwg2rQ+SxaXCJ6d0zeCFo9WFQGWOKP9l8Fl11yog/5r6cuuYDSwrcaAngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrr1lmHuy32SEkE0zwNZHHUE5kDMB8GA1UdIwQY
MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt
MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk
LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlI1hi+G
Pm+SYQDKTyTzL8e3LS9FF7mY3hNulps1quyFhSAeycL4c1XpfAXL/tkb6TyKQeSu
lCRxNLhH71KZWAXhIL3/pgxN7fp2hmdu69aYd+K5AQ5ofyCGbPraivX3yKhGiFZA
usjbL0ZRhHg+jkNe+EbOKHtezkoc6wpDYd8U5Z1tsBgy/hPZrWjcuSvljWNEk6l8
OleRtPpkhdmwos3A1cZbTjdXjKHIGKroIF4HOfE1nYC2wv4+rrp74f7Q4fWjWcqX
w0tSgS3Az6KlRJEkVKM/J7YVCksuBtUR7jn+4qpTW6f9bfTphQnNntHHOyBHixcY
/pT3OvAeE9Iz0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:47 2026 by rpki-client