
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: NOaFZJziW57tyweu+eOPyZJkwlkxaOnzW6Rv2ix1wdI=
Subject key identifier: AE:0A:3D:D0:87:93:DC:DF:60:57:70:10:92:07:BC:60:B5:34:12:D1
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019EC25BA306969D712D42BF8228AA276E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 16BB
Signing time: Sat 13 Jun 2026 19:00:45 +0000
Manifest this update: Sat 13 Jun 2026 19:00:45 +0000
Manifest next update: Sun 14 Jun 2026 19:00:45 +0000
Files and hashes: 1: PKnIAhIJ1MzVjAQXI0_VYyNe5uk.roa (hash: 2+uHp+hvwIMWnnMuQUjkf9G75eaKGy1/wz0Pfj8UxD0=)
2: XwdOGh8ycNBpTq8G5zGL9gUi3JE.roa (hash: WHHEykz34YVsOI9ST91HLTQ8eMlE9IdCIj+UhWYkBxk=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: BwZtUpiJAM4uYat1YJnlTKVnPal/8IpzwsP/KVRc1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:a3:06:96:9d:71:2d:42:bf:82:28:aa:27:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jun 13 19:00:45 2026 GMT
Not After : Jun 14 19:00:45 2026 GMT
Subject: CN=ae0a3dd08793dcdf605770109207bc60b53412d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:6c:5e:01:6e:a2:72:bc:f0:a8:3f:f5:55:
eb:9f:b9:e3:68:b5:88:53:b0:32:dd:74:97:d4:7e:
c7:64:c4:3b:b6:e9:db:bf:0b:b7:8d:7d:44:a9:8a:
be:70:38:0e:32:50:77:9c:28:02:dd:35:ba:b9:bd:
a6:4e:f4:a9:97:2b:ee:c7:b6:87:f7:b9:79:26:35:
44:9f:bb:1e:9a:72:dd:16:46:f4:c1:0c:8d:38:f8:
ca:c6:2d:2b:a2:d2:d2:9f:df:75:29:1b:8a:36:38:
5b:a2:ae:89:6d:00:10:fc:2a:02:81:2c:8a:b0:7d:
67:32:04:60:2e:94:5f:ec:86:52:54:ef:9a:80:01:
46:be:2b:45:95:f9:80:b1:05:b2:eb:28:95:f0:74:
89:61:a5:6a:3c:e9:ec:52:1a:b9:e5:f8:c8:3c:61:
d9:fe:01:8e:8b:52:08:36:bd:6e:59:0a:6d:49:4b:
6c:1c:11:f9:89:b0:f4:c0:0a:48:e4:11:d5:07:08:
27:bc:98:f9:bf:85:4b:7e:37:a2:6c:3f:85:1b:49:
45:22:2c:90:cf:57:49:77:0a:a1:26:90:9d:2a:bf:
d2:64:99:25:52:05:fe:c4:13:b6:b4:42:4a:24:81:
d9:ec:a7:16:e1:d6:a4:ab:c0:69:96:91:d7:82:43:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:3D:D0:87:93:DC:DF:60:57:70:10:92:07:BC:60:B5:34:12:D1
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f4:5c:ff:63:bf:e0:49:8c:d2:b0:28:59:4b:61:92:5e:d0:
e9:92:ae:89:a4:7a:98:af:2f:e5:ff:b2:2d:53:c7:10:90:e1:
54:9c:be:cd:b8:4a:59:28:67:8a:c6:51:be:92:b1:d6:f4:0d:
ed:12:99:0c:19:8b:36:3a:52:d6:53:99:15:af:08:37:bf:c5:
03:a5:c1:b0:91:ff:d0:e2:91:e5:15:23:f5:0a:1b:d7:e8:9e:
92:2f:8e:f1:a5:8d:3a:c7:d2:f9:3b:d9:00:51:06:02:6e:e6:
23:5b:85:f8:9a:04:dc:56:94:d5:55:36:14:b3:46:79:bf:a2:
ad:82:ac:7b:19:fe:c2:9a:31:7d:30:17:d4:41:e2:34:f8:ce:
cd:ea:5d:3b:3a:fb:e4:ad:c4:df:e6:b3:a3:f2:9f:f7:dc:ea:
d3:8f:6e:cf:af:6f:97:fd:cc:86:73:e2:5e:58:41:4e:51:34:
4a:93:01:74:0f:a8:e4:79:b9:ab:b3:96:62:63:30:58:1c:29:
6c:f4:88:8b:7a:f6:74:de:a8:e2:c7:c5:93:e5:ce:e3:e4:05:
93:9f:bd:a4:34:f7:2a:92:59:f8:7b:b5:0c:1f:9b:36:73:a6:
0c:ad:37:63:30:fc:91:9b:9c:4d:56:35:dc:ee:3f:c8:4b:d0:
a6:7c:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:00 2026 by rpki-client