Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: 4xALdJcL14whYwwtmLJu3l/FyRAPmM1EpVA7p/n9y6A=
Subject key identifier: 10:34:25:7D:71:A1:71:05:F5:72:68:91:D4:B7:A4:0D:21:E4:CE:9A
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 01A0DA96A9B97C3A5ABD20DC0E9144DBEA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0BE4
Signing time: Fri 25 Sep 2026 22:01:41 +0000
Manifest this update: Fri 25 Sep 2026 22:01:41 +0000
Manifest next update: Sat 26 Sep 2026 22:01:41 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: 7Gtffn47pNHG8iHz+RVPWZaeUpV/egi3N16gg1LvSDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:a9:b9:7c:3a:5a:bd:20:dc:0e:91:44:db:ea:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Sep 25 22:01:41 2026 GMT
Not After : Sep 26 22:01:41 2026 GMT
Subject: CN=1034257d71a17105f5726891d4b7a40d21e4ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:bd:15:a7:49:8c:93:9f:a7:96:33:17:32:
a8:eb:ee:9f:9d:34:51:4f:8e:9d:16:0a:27:3f:e5:
f7:87:5e:65:68:5a:e2:c1:dd:9c:f4:cc:12:da:51:
f8:1a:e4:fd:38:c9:74:f6:49:4c:55:93:e1:73:de:
89:6f:1e:7f:a3:b1:07:e1:1d:4f:cb:de:2e:95:eb:
5b:14:fd:d5:71:56:6f:ca:6d:05:c6:68:b7:86:9e:
1a:c7:97:ad:16:e7:f9:41:67:a7:99:3c:b1:7e:ba:
7e:37:5e:b0:51:76:cf:99:57:9c:dd:58:c9:53:7c:
e2:1e:40:2a:89:3a:1f:c8:ed:b1:1e:94:19:0f:fa:
f8:39:8c:7c:e2:46:39:fe:80:2b:c9:dc:c4:32:a9:
14:fe:ab:6c:bb:21:72:b1:21:42:fc:11:f1:5c:5f:
ab:29:1b:4a:08:a0:47:06:3e:ea:62:0c:56:5d:d6:
2d:c7:4d:c5:e9:75:0d:4f:7b:f2:1d:21:50:3a:1a:
36:06:33:d4:09:12:16:dd:9d:61:94:8f:1a:f8:93:
6a:58:44:0a:a4:49:d1:e4:ba:f4:9a:94:4b:22:2c:
99:70:22:b9:cc:9f:d5:fc:b2:af:07:6f:98:ef:f5:
46:dd:26:19:c5:51:24:92:b1:45:eb:da:3c:b4:00:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:34:25:7D:71:A1:71:05:F5:72:68:91:D4:B7:A4:0D:21:E4:CE:9A
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:ee:87:14:ba:5b:16:f4:bf:13:df:fb:76:5f:55:6a:4f:
ff:9e:55:3f:0a:b4:59:26:5d:86:83:61:cb:10:e8:fd:00:03:
ad:9c:22:ed:3b:0c:bf:35:5b:a3:63:14:3d:15:0c:ac:84:74:
27:27:63:76:b3:c0:b0:dd:f4:66:3c:34:01:53:85:f5:28:ea:
5c:39:09:80:e7:74:87:4a:ab:17:df:e9:39:24:b2:a3:d7:38:
a2:8b:b7:5b:70:27:1d:74:b1:5f:e9:e1:68:f1:63:4d:bb:31:
b4:70:8f:a8:75:6f:c3:7e:59:c2:81:60:e2:3d:61:2c:56:f6:
63:4f:5e:3d:a9:00:c1:59:bc:dd:4d:b9:07:35:21:a8:92:f5:
94:a7:d0:40:50:64:ac:95:3f:fa:95:2a:b3:af:73:82:29:1a:
75:b2:63:06:30:96:08:e5:6e:59:6b:43:55:26:b9:88:f1:af:
70:ee:1c:9a:4e:a5:94:46:3e:e2:4c:d5:f5:0c:6d:cb:1c:78:
9f:28:19:09:19:d8:20:ea:ba:5d:4e:8f:e6:2e:82:f5:b8:33:
00:23:47:e3:30:bc:7d:3d:34:b5:2e:cf:b5:62:a2:18:b0:77:
74:9d:d0:ed:a3:19:93:96:ea:99:f5:76:26:dc:98:cf:3b:c7:
75:92:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:56:23 2026 by rpki-client