Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: cA6PpaFXNz0zYThxyWTUWw7k1hqZ8x2K+OfZHdFmJGc=
Subject key identifier: 02:78:42:83:6D:71:16:7B:F0:36:66:41:4A:AA:63:18:DC:BD:9C:EA
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019CEF02A0F831D7C31B8467ED63F621ADD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 15C9
Signing time: Sun 15 Mar 2026 01:00:52 +0000
Manifest this update: Sun 15 Mar 2026 01:00:52 +0000
Manifest next update: Mon 16 Mar 2026 01:00:52 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: xBVDQVpmWZ9qku7IUPQCV99tK8tz1I/BzbMuwIxbw0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:02:a0:f8:31:d7:c3:1b:84:67:ed:63:f6:21:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Mar 15 01:00:52 2026 GMT
Not After : Mar 16 01:00:52 2026 GMT
Subject: CN=027842836d71167bf03666414aaa6318dcbd9cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:bd:c7:ae:9e:c8:47:ba:60:41:47:57:fd:
09:08:ff:f0:0f:ba:07:b9:d9:32:eb:61:22:e2:33:
6d:41:5b:1a:62:bb:f6:df:8f:5d:4e:50:70:3b:a0:
7d:fe:84:d5:b0:1c:29:dd:1e:c2:24:8b:2c:83:46:
47:6b:7e:46:23:2d:6d:c9:a2:84:60:f0:40:49:b0:
5e:ac:e8:f7:74:10:53:39:fe:8b:11:7d:b5:c4:ee:
77:a4:0e:e2:93:b9:c1:1b:19:65:37:06:f6:6c:36:
e2:49:80:be:68:61:07:aa:c1:e7:a5:3f:41:17:df:
6a:b5:c1:66:40:8d:e3:a6:7d:fa:e8:f9:e4:12:31:
68:82:02:2c:fa:99:72:97:57:21:59:32:63:e7:8c:
18:68:b4:0c:fc:35:06:37:d3:30:3e:fd:53:e8:70:
07:db:dc:cc:fc:36:07:19:0c:08:4f:1c:92:99:da:
8a:cb:28:c8:b1:96:e4:2b:43:e3:3e:6f:ff:d1:ea:
a9:65:5f:a6:82:c0:7f:0a:00:06:67:b3:5b:b4:f4:
6e:05:49:54:d7:3c:58:f9:08:95:80:a2:f0:a4:44:
eb:93:e4:d0:a7:b5:87:0e:94:ba:86:17:13:88:2c:
2a:fa:40:bb:20:54:9c:17:f6:e1:da:7f:b5:ba:2b:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:78:42:83:6D:71:16:7B:F0:36:66:41:4A:AA:63:18:DC:BD:9C:EA
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1c:9f:a2:e3:50:2e:05:8b:0f:c5:fd:ac:bc:b1:a7:ff:8f:
e6:87:44:d8:fe:b5:b7:a7:15:11:cd:14:c9:e6:b4:00:a3:8a:
da:35:81:ce:a0:e7:28:29:00:5a:6b:84:08:17:b4:d1:a0:72:
ab:a5:95:34:b7:b9:8e:c1:3f:14:85:cf:5e:79:8d:7c:e6:2b:
27:e1:87:76:92:0d:4e:73:a6:77:0c:cb:cd:80:64:13:f1:2b:
e7:aa:37:d1:e0:16:89:02:f7:c3:a7:65:fe:ba:d4:7d:52:4c:
4b:1b:89:bc:41:21:3b:77:fe:5a:e9:b3:02:bb:c7:3b:4e:1b:
d7:b0:aa:29:bd:ea:ac:bf:4e:6b:d2:be:d2:01:36:19:dc:8f:
0d:8f:53:6d:db:4d:15:1e:e2:5f:59:54:ba:77:3b:04:a2:ee:
3c:56:c5:ce:97:77:fe:bb:79:c6:92:ae:01:44:40:fb:ca:74:
11:c7:93:1c:30:23:4a:c5:86:a3:d5:15:31:ab:ff:73:95:75:
0f:33:41:3b:50:07:0c:49:31:31:57:66:af:2a:10:aa:ca:48:
4e:f7:5d:03:e9:85:d3:98:d6:0b:ed:72:81:54:9e:5c:9e:f8:
a4:a9:d9:60:d8:03:0a:2e:08:c9:71:15:67:2f:10:3b:49:b0:
73:43:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 02:59:05 2026 by rpki-client