Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: uf1F2OBxCjKYu5o8IADdRCg94UJsAV8HMii3zQVskeg=
Subject key identifier: 41:F5:D9:FE:C3:EC:58:BB:93:61:97:46:FF:20:BE:26:B6:94:61:D8
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019F92B5EEC95EBE8042D431D2CDB4E75FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 06:00:24 +0000
Manifest this update: Fri 24 Jul 2026 06:00:24 +0000
Manifest next update: Sat 25 Jul 2026 06:00:24 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: g3cvKxZu601oxGcZeoU/AHiHw7ko7CBuJQIPvo+nf1c=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:ee:c9:5e:be:80:42:d4:31:d2:cd:b4:e7:5f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jul 24 06:00:24 2026 GMT
Not After : Jul 25 06:00:24 2026 GMT
Subject: CN=41f5d9fec3ec58bb93619746ff20be26b69461d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:aa:9b:e4:17:29:8c:8b:eb:34:cc:1a:23:
06:2a:be:02:7a:90:8e:0f:99:f5:e0:1a:cf:c6:8a:
7c:d8:61:c4:6e:7f:f3:9f:60:e9:64:e5:29:4f:77:
07:36:56:a9:6e:9a:d0:b1:54:6a:81:a8:a8:90:1b:
9d:71:f7:2a:08:b8:bc:7a:e9:06:19:6b:8f:85:fa:
35:50:78:49:c4:8f:d4:da:13:2c:5c:d2:fc:17:02:
ac:38:aa:eb:d8:55:ec:c9:17:1e:0a:e4:9e:00:ca:
5e:a2:04:4f:2a:a8:54:e2:4e:c5:f5:9b:d6:d9:cd:
c4:93:54:35:7e:9b:c1:31:cd:5d:66:39:b2:17:4b:
70:af:a0:ac:7b:ef:d5:2c:d1:5a:14:b9:27:1a:72:
47:d6:29:10:cd:3c:d7:2c:e8:95:6b:3a:ce:79:bb:
98:bd:b8:aa:33:cc:ca:f6:23:df:bf:5c:5a:94:89:
ec:8e:a2:7e:5b:42:d6:52:ae:4a:41:c8:05:e6:da:
b6:c6:30:6c:d4:ff:d2:9f:73:49:55:ff:36:c9:df:
fc:d6:5e:c8:dc:b2:48:48:8d:70:93:4b:7f:89:bb:
88:b7:15:7b:0d:7a:8e:8d:49:44:92:7d:e1:05:6e:
e1:c4:5d:ac:b8:3e:c2:01:cc:f9:58:11:ca:e6:93:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:D9:FE:C3:EC:58:BB:93:61:97:46:FF:20:BE:26:B6:94:61:D8
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4a:ed:51:cd:85:8f:9a:75:6c:96:74:30:a1:ed:65:27:c2:
44:9e:6c:7b:3f:04:f9:8c:b8:ca:cd:96:18:58:28:63:4a:27:
d3:40:11:ce:bf:93:7b:bb:83:f6:93:3a:0a:af:b5:4e:d2:3b:
30:88:e1:8a:b0:1e:26:bc:9b:a8:71:d6:c9:a4:84:b2:f2:e7:
07:07:75:71:a1:42:2b:60:5d:ed:c4:fe:95:35:eb:04:cf:95:
a4:51:3c:93:98:06:9d:c6:fb:93:1c:3f:0c:4e:ff:70:be:45:
87:59:de:12:71:ea:51:5c:58:e7:41:74:0e:79:9d:83:19:5d:
f3:0c:db:21:f5:12:34:c6:69:ef:27:a8:64:2f:a5:ee:36:0c:
aa:27:ed:1c:5b:81:6a:5e:f2:5c:75:5f:a7:c7:2b:a6:72:c6:
78:78:6e:62:ba:50:47:da:dd:3d:c1:1f:27:41:68:c1:5c:4e:
fc:28:87:ea:8b:bb:9c:50:9f:0d:36:7b:d5:c9:cc:b6:cd:27:
0f:70:e9:9c:b3:9c:10:3e:9f:e7:13:71:66:4e:4d:e7:5b:ac:
26:83:2f:3a:0e:b5:96:52:5b:c8:30:9a:f1:71:fa:11:7a:f2:
03:31:69:7d:62:e0:7b:11:1d:eb:2a:58:2d:44:6e:fe:c7:54:
68:8b:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:45 2026 by rpki-client