Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: S+kKCczC0wCd2OUBT1g+24GOHd6PlPGrJo/yNho3vlY=
Subject key identifier: 5B:E4:35:FB:50:61:B2:CB:46:86:78:D3:E1:50:0E:D1:E3:62:3A:E8
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 01A16C7F8D6540E9B316593D9AE96C39C51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:01:00 +0000
Manifest this update: Sat 24 Oct 2026 06:01:00 +0000
Manifest next update: Sun 25 Oct 2026 06:01:00 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: pdlUl0P/eg1L3J1g5wb9SRsEK9+8rvlVNzaD84GvweU=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:8d:65:40:e9:b3:16:59:3d:9a:e9:6c:39:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Oct 24 06:01:00 2026 GMT
Not After : Oct 25 06:01:00 2026 GMT
Subject: CN=5be435fb5061b2cb468678d3e1500ed1e3623ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:dd:bc:91:97:13:70:e7:34:88:4d:21:77:
75:ee:10:e2:9f:b6:09:07:19:1f:fb:e3:aa:b4:2b:
0d:71:b9:f1:28:78:d9:d9:4b:ce:ae:73:ca:31:1b:
3b:19:b8:43:58:6a:60:3c:fa:3a:0f:a2:fa:fb:d2:
c1:3c:64:48:27:6f:76:31:24:25:58:5b:45:e6:75:
7b:76:f3:45:d8:4c:17:70:1e:da:a1:fe:bd:d8:17:
e3:b5:1a:29:05:e0:72:e7:3d:6e:d0:cc:71:dd:49:
19:94:9b:1c:e9:ab:cf:d6:81:9f:29:96:de:92:53:
36:8d:e2:ed:98:45:ad:df:54:ec:88:67:b9:a5:27:
73:15:6f:54:27:65:90:a6:7d:39:b9:5a:2b:b9:99:
b1:46:bc:47:d0:a4:7e:24:4a:ee:2e:5f:ae:fb:e8:
b8:d4:5c:cd:57:85:96:c9:75:bc:cb:85:da:9a:05:
32:b4:d7:b1:16:7a:0f:0a:b0:83:bd:a4:80:26:2e:
17:69:1c:35:99:5b:61:d5:da:4a:c1:7a:1b:6a:41:
6b:a1:d8:04:ad:5e:51:cd:bf:9e:9b:78:38:a7:ce:
0f:0a:a1:5e:3d:25:9c:13:5d:9e:48:79:57:31:b9:
34:18:ba:69:13:e7:32:cb:33:3c:80:b4:dd:46:f5:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E4:35:FB:50:61:B2:CB:46:86:78:D3:E1:50:0E:D1:E3:62:3A:E8
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:70:84:0e:3b:5d:7a:f2:51:d4:3f:24:0a:87:32:4b:11:ac:
66:2f:e9:d4:82:4e:be:5d:77:79:5a:83:99:27:42:8b:02:19:
98:92:67:f3:d4:55:f7:c2:11:fb:21:8d:77:94:f8:fa:8b:cc:
35:76:f0:95:05:dc:5f:0e:82:ff:5d:7c:5d:a2:c1:5f:05:c3:
84:18:1f:b3:1f:b7:ce:5f:c0:76:11:a3:6d:c8:83:4a:b9:be:
3d:3a:ca:d1:08:67:9c:36:cd:ab:48:cc:4a:b0:99:19:30:81:
f8:ca:60:2f:4a:ec:d8:08:3c:ea:24:35:b1:89:5e:34:e4:0c:
c3:fa:cb:20:55:53:d7:25:d8:86:f3:71:b0:54:5b:a0:fc:8a:
f5:1b:9b:e8:94:9d:15:e7:94:3b:46:8c:17:58:d8:6d:bc:64:
80:16:6f:67:b1:ca:0d:e1:ce:a0:bc:71:16:04:b0:a4:84:42:
23:89:2e:30:d7:d9:1d:11:2f:87:5a:df:04:0c:27:80:88:a5:
e8:bf:46:3d:db:31:d0:a4:7e:1c:e0:66:4d:c7:29:fa:ff:c7:
15:d8:5b:8a:82:43:9f:96:f9:67:87:7d:cf:85:f4:1d:59:55:
65:2b:c5:7e:8b:ca:9a:2b:cf:f6:6d:c5:1e:3c:bf:d8:19:be:
8c:2f:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:32:47 2026 by rpki-client