Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: OhBwLKyF/Fzm+yPoTwQeISAt9DHnpY9UxdZRTvzWnlw=
Subject key identifier: 86:44:CA:45:FC:D7:1B:DC:C0:CD:C1:2C:B3:61:D5:C9:8C:EC:6E:54
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 01A06D95316924FC6DFF8C6BFBD780184AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:29 +0000
Manifest this update: Fri 04 Sep 2026 18:01:29 +0000
Manifest next update: Sat 05 Sep 2026 18:01:29 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: fUgEZIEmHgXbyophXIqyfRg7mSngkLEd3tqw//Qw4vg=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:31:69:24:fc:6d:ff:8c:6b:fb:d7:80:18:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Sep 4 18:01:29 2026 GMT
Not After : Sep 5 18:01:29 2026 GMT
Subject: CN=8644ca45fcd71bdcc0cdc12cb361d5c98cec6e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:8b:52:75:2b:ee:b3:b5:4b:be:03:f9:77:
57:4f:a3:7d:ca:d5:2e:f5:c5:78:47:e9:6e:9c:01:
23:a5:4f:a1:3c:11:7d:dc:46:66:4f:e5:fe:5b:7d:
fc:7b:33:59:d6:25:66:56:79:b1:c7:fd:ab:4c:55:
8a:50:18:ed:32:14:88:19:45:54:e1:56:c8:64:e5:
d7:b8:21:d9:7e:db:01:89:9b:37:8e:71:3f:1a:1e:
92:ae:23:25:91:7c:8c:2c:09:1a:87:33:1a:76:1d:
25:e3:8d:87:ef:8f:bc:62:a5:4c:d7:d2:dd:68:e9:
9f:7a:fb:27:a3:68:04:35:2c:72:d4:79:fc:6e:42:
0e:32:d0:0d:a5:3c:84:e2:7c:d1:9c:16:ae:9b:a2:
27:70:4a:c4:7f:53:c1:f0:f5:0e:fe:86:8e:80:04:
f3:96:77:5f:0d:53:91:b6:88:9a:f8:96:f9:51:c8:
c1:86:96:fc:9f:a6:ac:db:11:36:ce:9a:08:47:4e:
ec:67:80:a4:32:51:b0:2d:3e:26:2a:b1:1d:4a:61:
93:3e:d1:7c:a7:11:82:ad:d3:7a:80:d7:83:1a:97:
a5:b0:66:4b:a8:fd:bb:de:9e:05:4b:43:be:30:3d:
e7:2b:43:50:d3:6c:cb:1e:3a:fc:b3:ed:92:3d:e1:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:CA:45:FC:D7:1B:DC:C0:CD:C1:2C:B3:61:D5:C9:8C:EC:6E:54
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:45:f5:17:ef:6e:86:32:a9:db:0b:39:3b:29:67:c2:77:e4:
09:d3:a9:65:c2:eb:06:83:5e:75:b2:8d:08:aa:57:be:e6:c0:
c2:fb:56:91:c3:36:a6:c4:6a:14:ff:b1:f0:02:23:ca:39:58:
26:d3:bb:11:7e:e2:32:cb:e0:b2:2f:ea:36:b3:fd:3b:79:74:
81:4f:82:2d:ce:4e:21:33:2b:80:a9:6e:d7:46:fe:58:0b:35:
73:36:0a:b0:d1:cc:8a:08:84:07:c4:0e:09:bc:e6:a7:e6:d4:
91:98:8b:6f:af:b7:67:bc:ea:79:2d:7a:b6:41:d4:89:3a:60:
fc:f1:94:ad:64:fb:0c:47:a1:ce:47:fa:2b:a5:9e:7f:24:3d:
ea:0c:45:23:d2:54:25:72:70:8e:29:13:7b:d8:9c:bf:e3:72:
54:2f:27:3b:72:3b:57:3d:02:47:91:e1:79:5e:8b:eb:44:29:
06:67:0f:ca:5c:f7:23:82:3f:83:4d:ca:75:43:60:1e:c2:6f:
fc:08:00:44:a2:c1:3b:59:bc:10:64:fe:23:b7:98:0f:e0:0f:
b0:8a:91:c3:7a:1e:81:32:02:80:bc:21:55:0d:f6:d5:cd:47:
a7:6b:90:6c:7f:cc:eb:a2:e7:4c:5d:30:56:01:32:97:cc:19:
44:e4:41:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlTFpJPxt/4xr+9eAGErjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTNhZWY1ZmI1MDdlZjBlMzViNjgyZGFhOGU3YWJjMDNj
M2EyYWYwHhcNMjYwOTA0MTgwMTI5WhcNMjYwOTA1MTgwMTI5WjAzMTEwLwYDVQQD
Eyg4NjQ0Y2E0NWZjZDcxYmRjYzBjZGMxMmNiMzYxZDVjOThjZWM2ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34yLUnUr7rO1S74D+XdXT6N9ytUu
9cV4R+lunAEjpU+hPBF93EZmT+X+W338ezNZ1iVmVnmxx/2rTFWKUBjtMhSIGUVU
4VbIZOXXuCHZftsBiZs3jnE/Gh6SriMlkXyMLAkahzMadh0l442H74+8YqVM19Ld
aOmfevsno2gENSxy1Hn8bkIOMtANpTyE4nzRnBaum6IncErEf1PB8PUO/oaOgATz
lndfDVORtoia+Jb5UcjBhpb8n6as2xE2zpoIR07sZ4CkMlGwLT4mKrEdSmGTPtF8
pxGCrdN6gNeDGpelsGZLqP273p4FS0O+MD3nK0NQ02zLHjr8s+2SPeHL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZEykX81xvcwM3BLLNh1cmM7G5UMB8GA1UdIwQY
MBaAFJiTrvX7UH7w41toLaqOerwDw6KvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpPdTlmdFFmdkRqVzJndHFvNTZ2QVBEb3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvbUpPdTlmdFFmdkRqVzJndHFvNTZ2QVBEb3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvbUpPdTlmdFFmdkRqVzJndHFvNTZ2QVBEb3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkX1F+9u
hjKp2ws5OylnwnfkCdOpZcLrBoNedbKNCKpXvubAwvtWkcM2psRqFP+x8AIjyjlY
JtO7EX7iMsvgsi/qNrP9O3l0gU+CLc5OITMrgKlu10b+WAs1czYKsNHMigiEB8QO
Cbzmp+bUkZiLb6+3Z7zqeS16tkHUiTpg/PGUrWT7DEehzkf6K6WefyQ96gxFI9JU
JXJwjikTe9icv+NyVC8nO3I7Vz0CR5HheV6L60QpBmcPylz3I4I/g03KdUNgHsJv
/AgARKLBO1m8EGT+I7eYD+APsIqRw3oegTICgLwhVQ321c1Hp2uQbH/M66LnTF0w
VgEyl8wZRORBdA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:10 2026 by rpki-client