Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: CCzBKVi2gKoG1Ds3vbE3Hv7bAP6jlBGko/5NOfS1E9U=
Subject key identifier: 80:F5:CA:3B:01:76:92:A4:2B:28:15:48:B6:49:21:FA:24:22:58:AE
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019E2024033CED37C7421D96A74CE7B40535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1667
Signing time: Wed 13 May 2026 07:01:31 +0000
Manifest this update: Wed 13 May 2026 07:01:31 +0000
Manifest next update: Thu 14 May 2026 07:01:31 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: tIkqWe5l1r2/RkPShqd/Z6eaHkvteNleoQtQSydNqA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:03:3c:ed:37:c7:42:1d:96:a7:4c:e7:b4:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: May 13 07:01:31 2026 GMT
Not After : May 14 07:01:31 2026 GMT
Subject: CN=80f5ca3b017692a42b281548b64921fa242258ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:f3:c5:cf:c1:a1:59:e4:3a:5d:36:15:2f:
60:bb:51:45:80:19:59:6c:3c:bf:bf:e5:b4:64:9f:
a1:21:ac:24:11:4f:ba:29:8f:3a:9b:72:23:36:8c:
ae:8f:8e:d1:b9:dc:13:a6:33:fb:0b:84:37:da:af:
08:af:a5:fb:af:14:f5:fe:53:03:58:ee:f7:51:4a:
c6:8f:70:c1:64:48:6b:7f:45:06:5c:89:4b:9e:51:
35:ac:38:4f:21:e1:d1:b5:d4:93:ea:cc:d5:df:1f:
7e:22:c6:6a:07:9d:7a:c9:f3:5b:de:14:de:a0:58:
65:8d:54:7d:f3:93:fb:f3:0f:4e:2d:51:6d:58:54:
b6:67:65:49:7c:22:07:65:ae:79:7e:2e:a1:2a:c7:
ed:85:48:18:3b:11:1f:19:06:51:61:a0:c9:23:dc:
75:cc:44:51:9b:37:6e:5b:05:33:6a:ff:2e:77:e5:
37:6e:4c:2a:ac:85:68:72:4b:80:10:65:a4:41:77:
02:24:02:17:9a:e8:a9:83:3e:0d:dc:30:a9:ad:fa:
ef:14:de:4b:31:b5:7b:66:f1:35:8b:39:5c:83:14:
8a:41:6c:23:10:d0:4a:88:a6:73:f6:c3:af:6e:57:
80:ea:3d:51:a2:52:aa:f6:ff:c8:dd:b6:76:8e:7a:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:CA:3B:01:76:92:A4:2B:28:15:48:B6:49:21:FA:24:22:58:AE
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3b:86:0a:c1:2d:5d:ae:37:32:ac:fc:13:93:98:c7:c3:0b:
06:25:e0:09:fc:d7:c2:cd:02:98:6c:17:a4:65:d3:1c:71:d0:
d3:52:f8:81:84:7f:23:78:9c:e2:34:92:26:61:63:39:22:63:
02:eb:57:5d:0a:1e:87:92:33:e7:01:ff:92:75:ed:89:91:e6:
0f:db:36:b6:79:0b:a4:7b:8d:e3:02:b7:83:3e:aa:4e:a2:12:
7e:92:1e:1a:de:71:6f:fe:26:15:0d:26:42:a9:6a:a2:eb:08:
e7:ee:43:2e:44:b9:95:74:0e:d4:b3:bc:75:0e:95:1f:0d:ef:
9b:37:39:03:0b:3f:a8:d9:e2:b1:6e:02:9a:e4:2d:ea:76:98:
11:a7:bc:85:c8:4f:f4:4d:a4:42:10:bd:71:83:e4:ec:a9:fa:
e5:ae:53:36:f4:e6:2f:f6:46:0a:43:ec:27:ed:40:f5:af:00:
c4:e0:4d:69:5c:c4:1f:58:bb:42:ed:54:c7:4f:27:93:84:fc:
6f:d0:c3:20:d4:91:6e:0e:59:d2:2e:c5:3a:3d:9e:b6:c2:03:
51:51:e9:f7:f7:c9:f8:f5:45:1a:a1:99:d5:dc:0d:12:a9:ed:
20:a3:3f:0d:d9:2c:83:d0:e6:73:69:81:dc:fa:2d:a0:3f:fe:
38:87:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:49 2026 by rpki-client