Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: kCoWJpIryGqDsQUkgzi9FLmZsVLL2slk/pf9v8y/Pc0=
Subject key identifier: D1:EE:1C:1D:EC:EE:CF:CB:39:FC:D1:BB:4F:19:25:3B:BA:6B:A3:48
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019EB68EBBF853D90EC289C1C35A94DED7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 12:01:07 +0000
Manifest this update: Thu 11 Jun 2026 12:01:07 +0000
Manifest next update: Fri 12 Jun 2026 12:01:07 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: nK1s0c2U9yvw7DDZJBKCcU3XdkKKwxuIG4iAKpBA5fg=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:bb:f8:53:d9:0e:c2:89:c1:c3:5a:94:de:d7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 11 12:01:07 2026 GMT
Not After : Jun 12 12:01:07 2026 GMT
Subject: CN=d1ee1c1deceecfcb39fcd1bb4f19253bba6ba348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:9b:4b:c5:3e:55:68:84:e5:f7:47:83:d2:
24:de:88:1e:dd:e2:c0:23:2a:c1:b0:c3:82:67:dd:
02:10:d3:01:ab:95:29:8e:20:19:f1:f6:f9:ed:3f:
be:3f:cd:10:f3:1f:f3:4e:35:bb:4b:3f:04:89:bf:
fb:bb:a1:93:de:bb:85:52:e9:dd:25:01:f3:c3:33:
fb:c9:5d:d1:11:b6:9a:26:c7:e1:e7:7a:fc:7d:75:
d6:40:b3:cb:28:8d:4f:19:68:aa:5e:d8:68:5b:8b:
25:36:47:c7:e2:f7:6a:cf:77:10:d0:96:52:b1:f1:
0b:4a:20:05:79:84:84:3b:86:5b:ac:3b:a9:85:15:
09:46:8e:c8:38:6a:05:32:d2:de:a3:09:64:af:c1:
20:11:80:c5:05:a6:79:0e:4b:91:8d:78:63:02:ab:
e9:29:a0:46:77:04:61:60:8c:5e:af:7c:10:0b:dc:
17:a3:64:47:31:c6:2a:70:db:30:2e:f8:e3:1a:1d:
91:97:65:1d:27:b8:2b:97:54:af:c7:6d:b5:1c:7e:
25:04:f6:e1:95:38:f6:38:ad:f5:73:ad:09:0d:73:
bf:6a:a8:30:23:e9:dc:bf:91:f0:4c:36:ac:88:41:
7b:4b:7d:b6:bc:5d:5c:63:c9:2d:d3:3c:c5:de:6a:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:1C:1D:EC:EE:CF:CB:39:FC:D1:BB:4F:19:25:3B:BA:6B:A3:48
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:b7:09:6e:a1:f0:f2:aa:7a:b5:a1:1d:59:85:b4:f0:41:
a0:77:fe:49:41:82:e7:16:3a:55:80:df:9f:fa:10:66:bf:d6:
e4:1b:3c:49:cc:87:a8:64:78:90:b1:fc:0c:1d:5c:13:13:86:
ed:83:64:01:a6:89:a6:fa:e7:6a:d6:c6:e8:36:af:03:a9:43:
40:2d:1b:3e:9e:2f:8a:a2:6b:d6:38:c0:9f:ed:d5:69:f8:ab:
20:c3:90:71:87:b2:e8:d9:f8:6b:8e:b4:27:17:98:da:12:04:
a3:7d:45:ee:65:c2:a6:96:88:20:37:d0:87:ed:86:b7:c7:a0:
72:6b:28:12:13:c8:b4:aa:71:39:f5:f2:c1:ed:b6:97:da:4c:
99:45:6f:b9:17:aa:ad:72:01:73:85:71:79:fb:2c:00:dc:bd:
c5:17:e4:d0:89:06:bd:75:a1:a6:90:fe:51:8d:d0:48:dc:c9:
d4:fb:0a:55:01:95:61:8e:a3:88:97:2c:b6:0f:e9:f3:bf:69:
b0:9a:95:07:12:db:81:86:09:19:3c:16:75:ea:ac:3a:3a:e4:
8b:4c:2f:4e:40:35:4e:6f:14:fa:c7:c4:b6:e5:c5:65:40:5c:
b4:f1:76:dd:07:18:1f:77:15:77:97:e5:ba:07:6d:d4:e0:81:
8a:c6:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:50:08 2026 by rpki-client