Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: 4/GWObvyFP1Dg0RNcy1hLtieDRe4wZJ9BfVfBxWGnVo=
Subject key identifier: 51:93:8D:A4:E3:BB:C8:D6:3E:E8:28:DE:1D:70:B8:10:F8:42:31:17
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019E1EA2FCFC9CE407CD0773CACD5F6447AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 14D9
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (hash: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: Vt5coR4EAe5ExvYT54QNeGHuUw4e+h+/P36kNMiWIxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fc:fc:9c:e4:07:cd:07:73:ca:cd:5f:64:47:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=51938da4e3bbc8d63ee828de1d70b810f8423117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:1a:f3:8e:10:3b:55:1a:a3:ac:96:66:c1:
fc:16:41:1a:b0:bb:b5:d8:c4:a3:d2:8c:32:8b:23:
df:5c:8b:9d:8c:5b:e2:b8:02:e6:63:18:5a:13:e6:
97:57:be:14:e2:49:52:94:2e:8e:4b:63:a8:ed:23:
71:4d:7c:c1:71:8b:ba:39:8a:70:e3:13:c9:e4:f1:
9a:ff:bd:f6:00:df:e4:f9:ad:28:72:aa:61:f9:7f:
c2:6e:a6:7d:de:38:b6:ce:94:d4:81:ef:6c:3f:2e:
cb:58:76:04:40:e8:82:98:45:33:55:a7:ba:41:f5:
cd:f4:bc:6c:33:b8:87:3c:f1:fa:b0:91:e3:c6:a9:
e7:67:c8:61:3d:0e:67:0f:1f:4a:94:6d:f7:c6:5e:
e1:e5:de:87:2b:4c:85:9b:1d:a2:9a:be:19:7e:9e:
c3:1e:0b:ee:7d:09:04:32:a6:c3:15:ad:91:1b:f5:
6f:50:cc:d4:99:02:c2:75:89:c1:55:02:b7:cd:e4:
b1:1d:be:51:22:a9:35:c7:d1:3b:8a:24:8d:db:96:
4a:46:f2:fa:55:71:ae:2f:46:27:5f:23:5b:5b:5b:
fd:0b:0c:be:fe:3b:17:46:82:8d:9e:e0:0b:f8:17:
08:87:cd:52:80:e1:d3:26:12:65:8c:6f:5b:a6:2b:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:8D:A4:E3:BB:C8:D6:3E:E8:28:DE:1D:70:B8:10:F8:42:31:17
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:62:2c:2f:01:1f:d1:5b:db:15:6f:01:e8:ae:0a:fc:70:6e:
fb:cc:d8:bc:f4:58:86:ff:74:f0:27:26:0d:36:3a:65:d3:d1:
78:01:e1:fd:00:0d:ae:1d:04:92:76:d1:b3:a0:e5:32:bd:0c:
64:f8:b1:21:17:66:66:f3:dd:16:8e:4b:50:6b:45:48:89:67:
ad:47:72:ca:41:b1:d6:49:ae:58:74:cc:70:fd:2d:27:f6:f4:
b7:e2:92:f4:be:7f:9b:28:1a:1c:1b:82:91:16:6a:fd:74:a2:
f9:f8:22:6c:68:cd:ae:84:9d:25:4a:a3:fc:34:a2:e4:06:27:
d6:98:95:44:70:4f:28:d9:97:db:30:3d:7d:8e:88:0b:f9:6b:
22:7e:5c:16:c4:9c:20:90:64:74:d7:dc:0b:8e:ff:fe:e1:92:
e6:2a:26:5b:37:cb:f8:3a:d3:53:fd:21:de:95:97:a3:ed:6d:
56:18:3a:84:56:e0:64:ec:0a:fc:d7:a6:9d:24:7c:75:91:9e:
1d:d2:bf:87:cb:dd:17:9b:4f:95:0c:25:a3:0b:d5:b0:4c:b5:
ac:e4:c8:53:fa:85:f0:32:16:31:be:cd:3e:1c:bc:b7:bb:f0:
8c:8d:dc:8d:36:87:a9:6f:3a:36:5a:2a:19:65:4b:f4:8d:36:
99:ac:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:05 2026 by rpki-client