Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: nmchhIKZEblv0W13SwfLxxx/1ESqtf/NiQ4XuzPzspc=
Subject key identifier: 7B:5F:76:C0:BE:78:89:3E:39:92:F2:1A:34:77:98:6D:3C:7A:1D:92
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019F0B19BD22406EC4AC0EB42ABE4C7119F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 1067
Signing time: Sat 27 Jun 2026 22:01:03 +0000
Manifest this update: Sat 27 Jun 2026 22:01:03 +0000
Manifest next update: Sun 28 Jun 2026 22:01:03 +0000
Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: vCyrrdloguCQf9+UcoQMk4bFBneVsrplL7mFwX7/loA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:19:bd:22:40:6e:c4:ac:0e:b4:2a:be:4c:71:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Jun 27 22:01:03 2026 GMT
Not After : Jun 28 22:01:03 2026 GMT
Subject: CN=7b5f76c0be78893e3992f21a3477986d3c7a1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2b:a7:00:34:d1:17:5a:31:76:05:12:c7:20:
54:24:29:b9:79:1d:c5:46:2f:74:32:75:53:a5:c3:
25:e1:e5:75:4a:69:cf:70:d7:f7:96:d6:3d:5b:cf:
b7:e1:29:23:8a:e3:9e:14:62:3f:1c:a2:93:d1:28:
3c:3e:b4:c4:f6:a9:68:9f:7a:ca:23:06:6d:26:98:
b3:94:63:b0:1c:b8:a1:f2:83:86:2c:02:81:9a:77:
95:ea:f1:f5:4b:cb:a2:16:b1:ea:60:a4:e6:46:95:
ae:1e:0b:44:90:58:d3:56:e0:e2:3c:fe:01:fd:6d:
d4:f1:0e:ec:9a:c3:82:8f:f9:0c:da:29:76:db:c1:
33:e3:bb:d7:0a:9f:c9:cb:89:68:31:54:09:21:c4:
cf:d9:6e:26:42:3a:ac:2c:23:a5:c8:e4:1e:3a:b8:
93:9a:8f:d9:ab:20:ad:36:14:d3:6d:20:cf:54:61:
2c:6c:76:90:d7:50:a3:6c:73:16:16:7a:15:87:3a:
5e:21:1c:c4:23:e7:09:72:ff:46:ee:44:41:0d:91:
cd:0a:51:6b:cc:39:ea:3d:e7:97:24:40:25:af:61:
26:4a:d8:d2:62:2a:b4:11:2f:68:d2:aa:12:7b:8f:
3d:41:7b:11:b8:e6:2f:b5:30:86:5a:06:24:69:b5:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:76:C0:BE:78:89:3E:39:92:F2:1A:34:77:98:6D:3C:7A:1D:92
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9c:ef:ad:3b:ad:3b:ff:d0:82:8b:72:28:b4:60:1f:49:58:
b9:fb:bc:01:09:4a:de:b2:5a:d1:fb:d3:e6:ba:de:82:99:a7:
6c:37:44:31:f4:40:9c:cb:b2:0d:b4:ba:7e:81:70:e5:40:08:
f0:bf:68:f5:2f:8f:f7:e1:24:47:36:10:61:74:de:28:17:94:
2a:20:69:5c:ad:de:a3:47:ff:ce:bc:7f:19:33:66:18:df:12:
36:fc:e6:37:41:d8:6b:9f:b8:1e:ae:5a:04:0a:e2:06:ba:bd:
c9:9e:d2:2a:ea:d8:14:14:b0:41:14:16:ae:ca:58:c6:ce:cf:
b9:74:9d:97:6c:2a:8d:57:d9:ff:84:2e:99:f4:60:37:fd:c7:
39:85:38:fb:92:5a:ab:5e:70:3c:1c:2e:f5:f4:42:62:bd:f3:
aa:7e:19:d8:da:18:42:07:bf:c5:e3:f1:7e:6c:d9:d3:a3:2d:
22:95:6f:aa:3f:5f:93:76:cf:63:29:22:ef:36:d3:f6:59:1c:
a9:bc:4c:3f:37:a5:75:53:ea:1a:a8:ee:b6:0d:42:e3:99:71:
53:3a:a9:77:58:9f:d6:3d:04:92:4d:8b:98:bd:bc:64:f5:1d:
c5:bc:d5:02:1c:24:d3:4f:62:bf:30:5b:5a:44:66:30:76:ea:
ad:dd:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:23:56 2026 by rpki-client