Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: 3swVcvu2FD7fWd0SRPi/86yvWI+7ZkcQ61ycCLxCGlM=
Subject key identifier: EA:F2:8E:CF:2C:49:81:DC:0D:1E:EC:04:83:68:A5:81:F1:EB:8F:E5
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 019F85D6736D7C6D38839639D64C9868B9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:51 +0000
Manifest this update: Tue 21 Jul 2026 18:00:51 +0000
Manifest next update: Wed 22 Jul 2026 18:00:51 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: 62Xjqbk6q2JIirQxEPA7UTRC4RZmaiOq/PmgCDsBOWs=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:73:6d:7c:6d:38:83:96:39:d6:4c:98:68:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Jul 21 18:00:51 2026 GMT
Not After : Jul 22 18:00:51 2026 GMT
Subject: CN=eaf28ecf2c4981dc0d1eec048368a581f1eb8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:00:95:2b:cf:83:22:8c:62:4b:2a:39:3a:
1a:de:27:04:b3:f1:7a:9a:25:8d:9a:a0:3b:ca:f4:
a8:54:25:f5:ae:b1:6e:87:9e:cc:52:e2:a5:e5:26:
52:e5:d1:00:65:db:b7:93:18:1a:f3:27:a1:98:1c:
58:ea:c7:f1:d3:bc:88:52:e7:e4:6d:e0:c9:08:07:
6d:cc:16:6f:1d:02:0d:31:f6:33:c1:b3:ef:73:60:
2b:80:03:b3:e4:8d:41:56:76:b0:56:f3:3c:0b:d0:
01:f2:0f:7f:8b:4a:ab:0b:77:10:9d:21:e6:03:ef:
7b:b1:ed:0e:49:37:3d:ee:fe:9a:a0:2a:d2:74:3c:
3b:ed:c5:ab:60:c2:26:f6:2e:0c:26:e4:e4:e5:1f:
fd:e6:46:9f:c6:10:dc:a6:f3:b8:e0:85:b0:27:f5:
d3:d3:ce:3c:d9:b5:92:79:5e:50:81:4d:f0:64:d3:
96:31:03:e8:70:9b:10:ec:08:7e:d9:5a:2b:04:9d:
a7:41:6a:eb:1c:1d:f8:d3:cc:2b:f2:11:1e:9f:42:
ad:8c:29:0e:34:ad:b1:9b:ff:dc:a4:28:46:49:07:
13:bf:c5:7c:90:65:ea:ab:c5:db:de:0e:f0:1a:9f:
22:53:f5:cc:05:3b:f9:fc:17:e1:54:8e:2a:db:c4:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:8E:CF:2C:49:81:DC:0D:1E:EC:04:83:68:A5:81:F1:EB:8F:E5
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:36:32:16:f1:4d:f2:73:ad:38:9a:16:0d:7c:3b:18:51:31:
f6:bd:dc:0c:ef:1f:80:8d:11:10:0c:80:c6:a8:ba:45:2c:c8:
51:74:ef:e0:28:a5:6c:65:45:76:53:23:5f:73:86:9b:2a:e1:
c4:22:4b:23:46:bb:a9:d4:d5:d7:b8:f7:a8:9c:be:80:08:e8:
26:ec:3c:2d:0a:ca:5a:d3:5b:c1:e4:95:8d:40:29:ee:76:91:
ab:57:ce:32:17:4e:6d:b8:22:6d:67:51:66:3c:67:15:89:10:
4a:0f:43:44:d7:ae:4f:d0:22:cd:10:2b:d4:31:a8:fe:b3:84:
ab:0f:20:7a:ad:db:65:19:9c:43:9c:16:71:7f:6e:b2:9e:f5:
5b:e5:90:0c:4f:3a:42:4a:65:09:9b:de:bf:77:80:c8:c2:2f:
a0:bd:17:3f:d1:8e:51:10:c6:69:0a:1f:a9:db:2b:d2:63:ef:
e3:31:7c:f8:79:c1:05:de:78:7e:5a:ad:e0:3e:cb:83:cc:a5:
76:a3:3c:27:a9:9a:8e:49:57:83:f9:06:09:79:93:18:30:3d:
e6:7c:ed:db:da:1a:98:c1:6f:b8:8d:e5:a5:01:de:84:ac:91:
49:0b:3b:c0:23:fb:0f:1f:b1:07:d7:ab:69:29:93:5b:56:7e:
f6:d5:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:31 2026 by rpki-client