Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: oFLkS/tfrMRmqK+iGXOjQcTNr+cab3+D+fqdLVjru0k=
Subject key identifier: 3D:FE:AA:96:04:B0:DE:EB:5B:B7:89:74:5B:B4:BE:EB:38:A4:AC:63
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019F94374995D7AF8FFE5AFBEB4CB1C2E199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0B3B
Signing time: Fri 24 Jul 2026 13:01:18 +0000
Manifest this update: Fri 24 Jul 2026 13:01:18 +0000
Manifest next update: Sat 25 Jul 2026 13:01:18 +0000
Files and hashes: 1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: pTto+B03VB180BU7ABAWHobnhr5D8hcnAhEdyrhphw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:49:95:d7:af:8f:fe:5a:fb:eb:4c:b1:c2:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Jul 24 13:01:18 2026 GMT
Not After : Jul 25 13:01:18 2026 GMT
Subject: CN=3dfeaa9604b0deeb5bb789745bb4beeb38a4ac63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:17:b2:43:66:d8:cd:de:61:20:20:67:86:
5d:33:0f:23:42:28:08:bb:45:30:66:71:13:43:bc:
dd:a3:dc:01:68:65:d1:3e:ef:89:5e:be:7c:a5:76:
15:f4:a0:a7:99:ff:b2:b4:f5:f5:94:2a:27:42:ab:
7c:30:9c:2b:de:4d:83:5d:5b:e1:65:a9:27:9d:40:
c2:a0:b8:2c:03:b2:12:e8:15:c1:f7:c9:c3:00:e8:
26:0e:ad:4f:ed:cf:87:17:c0:f4:c9:83:bc:98:dd:
81:20:81:0b:19:d1:e6:79:85:66:a3:fd:b0:15:80:
38:3a:d3:0a:c9:b1:75:31:59:58:4d:3c:33:b9:0e:
a0:1a:87:b7:ef:8b:f8:a9:b2:5a:5a:05:1d:5e:d1:
80:2f:60:3c:3c:bc:2a:92:be:24:df:20:48:00:23:
f3:84:bd:7f:40:d2:0e:1c:8a:50:74:de:78:f5:a5:
16:23:72:07:33:48:e8:eb:78:5e:71:99:b1:a7:a0:
23:bd:8b:bf:2b:ee:62:b9:88:b4:02:82:c1:76:df:
be:c0:c3:ca:95:f1:23:a3:cb:fb:d9:df:7f:92:45:
e3:1f:9f:6e:60:a4:5d:19:8b:09:8f:98:1a:78:9d:
7b:45:a4:20:bf:2c:b2:92:56:e9:66:89:e4:3e:13:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:AA:96:04:B0:DE:EB:5B:B7:89:74:5B:B4:BE:EB:38:A4:AC:63
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:e1:21:0e:87:d2:88:69:ea:a7:08:e8:23:e1:75:39:2f:
6f:d0:0d:05:52:05:bd:f1:61:c9:ae:12:e0:67:de:08:46:5b:
db:af:f5:e4:c9:7e:ad:8d:46:3c:e8:25:d8:d4:b5:a2:5f:51:
93:e4:23:60:43:e2:50:e8:58:84:13:c0:de:2e:0d:a4:d1:19:
03:bc:a9:d9:91:23:6e:65:ab:1b:e0:cd:41:ed:27:5a:02:03:
68:2f:d9:bb:52:1f:be:c4:6b:a1:03:2b:13:7c:4c:bc:57:aa:
f3:0b:bd:91:55:d8:36:20:76:68:ad:0f:fd:3a:d4:a2:c9:54:
16:ef:70:e2:1a:58:2f:bd:71:37:05:5a:8b:21:d9:54:c0:20:
e3:df:e3:cd:87:51:e2:08:d8:c8:67:cb:87:a3:3c:49:77:2f:
8d:f7:b6:ae:ac:49:e9:00:7a:c0:5b:53:b0:1b:23:7e:a5:f8:
39:e0:68:dc:5b:8d:ec:90:e5:53:7a:e4:9e:31:2b:18:70:c7:
37:1d:84:24:a1:b5:6e:d5:ad:2b:6b:0b:c0:14:54:81:54:fe:
6d:e6:58:32:63:59:82:cb:d7:cd:47:31:79:b4:64:a3:eb:b1:
65:d0:b6:13:fd:cb:b4:6f:df:f6:1a:0e:d6:61:40:48:1c:a0:
ea:97:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:37 2026 by rpki-client