Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier: 6X7z0XNbPjDj9UWTbB43SF+WwKd2G1SjrAYQQlZAw9w=
Subject key identifier: 1D:41:B8:D8:DC:D5:A9:E0:8D:BB:70:8A:A5:B3:F2:97:01:57:2C:8C
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 01A1347E285DF517A20B40A3E2337180A6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number: 09C4
Signing time: Tue 13 Oct 2026 09:00:45 +0000
Manifest this update: Tue 13 Oct 2026 09:00:45 +0000
Manifest next update: Wed 14 Oct 2026 09:00:45 +0000
Files and hashes: 1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: HmNQjGWokJHt3+pd4QQ76aKisHDvDe41WIpbunSJReY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:28:5d:f5:17:a2:0b:40:a3:e2:33:71:80:a6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Oct 13 09:00:45 2026 GMT
Not After : Oct 14 09:00:45 2026 GMT
Subject: CN=1d41b8d8dcd5a9e08dbb708aa5b3f29701572c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:8e:07:78:ac:3a:c4:43:2c:76:14:da:91:
e4:2c:5c:06:2d:73:72:3c:52:52:ad:a6:3a:a2:76:
06:e0:fd:58:12:8d:fe:29:c7:9e:93:f8:6d:b9:39:
79:a5:53:fa:4a:ba:3b:96:98:59:d7:42:ac:4b:f8:
77:34:59:13:71:19:ae:d1:a2:52:37:1e:d5:1e:cd:
e0:ba:7b:73:87:37:03:d8:a0:a9:8a:dd:3a:4f:bf:
b0:5c:82:10:7c:ef:db:58:f3:a6:e9:d5:5b:92:c5:
98:98:9d:06:f4:a4:08:72:2d:8b:c5:55:6d:56:a5:
12:02:3c:6b:52:f6:8e:00:1b:97:b7:24:b1:15:5d:
d9:e7:8b:98:2a:a6:05:7a:2a:1f:e4:8d:5e:f5:02:
5c:c7:28:0d:d7:5b:c8:8a:79:cc:23:fd:d8:3e:7b:
2c:c5:46:03:fe:44:35:eb:c7:22:4a:e7:07:b4:20:
8d:2a:38:4b:f9:ab:e4:a5:18:5a:97:14:04:3a:4c:
45:03:1d:8b:60:fa:66:50:2d:c4:6b:fc:07:e2:3d:
e1:11:13:9b:85:52:d0:56:03:1f:97:d4:9d:1c:c4:
bc:c9:8c:5b:96:cd:01:83:9b:24:e1:17:a3:b3:c1:
7e:20:7f:75:c1:ba:5a:7e:3d:a3:24:ed:87:58:bf:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:B8:D8:DC:D5:A9:E0:8D:BB:70:8A:A5:B3:F2:97:01:57:2C:8C
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:9c:75:79:29:07:44:32:e8:e8:fa:2f:fb:0f:c1:07:2b:
79:41:04:6b:83:da:19:ff:1a:0b:a5:71:08:e1:f9:0c:97:03:
c1:e2:e6:20:fe:77:7f:ac:ea:f9:94:56:64:86:ea:fd:80:55:
e2:55:66:32:86:6c:3e:bf:40:e1:76:70:3b:80:83:2f:12:0f:
c7:7f:54:ca:e9:ae:c2:b2:d4:3f:64:ca:1d:a1:3e:af:33:bf:
fc:17:4f:5d:eb:87:ac:9e:3a:e8:a3:71:6b:81:a7:88:ce:46:
7e:3e:54:25:fd:07:0a:d2:98:23:a9:fe:01:cc:30:77:a0:2a:
30:b9:cd:20:d1:1e:65:be:bb:25:55:8b:2f:a7:a2:7a:45:e6:
73:b7:90:cf:ae:3b:e4:f2:b9:f8:ca:6b:94:7a:f8:e7:b3:44:
07:76:65:98:3b:ee:02:43:37:df:3e:63:e1:42:0e:c4:ed:9f:
8b:f0:1b:a5:81:f6:5a:32:dc:b5:23:b9:26:0f:af:e5:29:d3:
e5:e1:4d:0f:00:a7:38:36:95:1a:e3:47:17:13:62:d7:76:ad:
23:56:ac:ec:2d:b4:82:bc:f8:aa:bf:29:3b:17:72:4d:22:8e:
88:de:33:7c:ac:31:ff:7e:2a:e8:30:fc:b3:f2:3e:bd:33:0e:
5c:2f:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:21:22 2026 by rpki-client