Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: PowmxCB9yWrAbZtLYRCISuvoDCH13A8uTMUR978Z8Ck=
Subject key identifier: 43:F7:E8:C3:0E:07:4A:DA:A4:09:6A:C7:28:70:08:07:73:68:71:A6
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01A17D3CDDCDF55758D38B7B863681D6D24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 12:01:43 +0000
Manifest this update: Tue 27 Oct 2026 12:01:43 +0000
Manifest next update: Wed 28 Oct 2026 12:01:43 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: X5yOJjgq72H1afvT0t1Q8Fh+tCdGY56j3pvk5ymlqk4=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:dd:cd:f5:57:58:d3:8b:7b:86:36:81:d6:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Oct 27 12:01:43 2026 GMT
Not After : Oct 28 12:01:43 2026 GMT
Subject: CN=43f7e8c30e074adaa4096ac728700807736871a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:60:de:8f:35:ce:e2:8f:df:9f:16:f5:21:
b0:26:b4:75:ea:fb:9f:bf:ef:40:3c:4c:d1:5c:86:
6c:ab:80:10:6e:78:b7:52:fb:90:11:61:91:f7:ce:
5f:22:b5:2a:43:c5:e2:40:c0:d4:90:47:f4:68:4b:
bf:e7:63:f3:42:36:ec:89:a7:d7:1e:1f:9a:45:9f:
92:9f:7f:27:99:87:39:2b:71:69:b5:9b:7d:21:19:
c1:c6:fa:0e:f2:12:50:cb:65:ac:76:7f:15:9a:ee:
a7:3f:84:b1:00:eb:cd:65:be:bc:13:a1:fc:e4:64:
bf:04:5a:50:3d:f8:4e:ff:bd:a5:ad:b3:92:b4:21:
a4:d3:8a:8a:40:d8:c1:6a:f9:f6:68:50:cc:ae:da:
4a:c2:e8:a4:f1:56:73:6b:02:02:6f:ea:ea:0d:c1:
e8:92:53:e6:f4:8f:fe:6a:dd:c5:f7:87:6a:0d:98:
98:10:a0:c5:53:57:e3:a1:b6:44:99:24:24:d2:5c:
14:99:a4:48:08:52:f3:a6:fc:6a:4e:8c:d2:b5:5e:
3f:0d:d8:b0:f2:58:49:39:5b:e8:be:d0:48:27:af:
f8:f1:93:96:29:84:35:b8:f9:08:02:8b:db:cc:82:
13:0c:a0:48:48:36:df:e2:eb:58:f4:93:26:3b:bf:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:E8:C3:0E:07:4A:DA:A4:09:6A:C7:28:70:08:07:73:68:71:A6
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:16:f6:14:e7:36:28:c8:39:cf:14:86:5e:67:7c:7e:07:
bb:1e:b6:29:6c:38:db:9d:c6:77:ac:75:94:78:0e:05:cd:b8:
9d:91:d4:47:5c:e2:5d:76:da:86:d7:c1:0f:4f:b6:7a:02:97:
7a:a8:5d:80:b8:b1:9f:75:a4:ce:17:c0:e3:fa:49:c9:aa:ad:
76:59:84:c9:83:22:0f:87:26:3a:80:b3:c0:4b:c5:a4:e4:27:
74:55:50:51:b0:d3:af:a5:68:5e:4c:2f:8b:f3:63:c4:9b:30:
db:33:14:e1:6c:d1:60:5e:ac:ad:6c:90:9d:3e:07:b5:ac:3f:
aa:83:b1:17:fb:ed:fe:89:72:c2:6f:a2:22:5a:ef:2b:ae:5e:
7c:7a:6e:45:b0:be:f3:50:34:b4:ed:a4:fe:a4:c5:ab:b5:39:
5c:d1:0a:b8:3f:10:5e:a5:02:37:f8:cf:34:20:97:87:80:d2:
79:4d:ab:48:db:54:a1:f6:3f:19:6d:b1:00:43:91:20:bf:91:
7a:f0:12:8e:48:0d:a8:ee:6b:e4:19:19:a8:f5:26:e3:65:23:
ac:6f:44:f8:f8:c4:09:96:13:9f:22:f6:72:76:ee:28:be:ea:
48:52:ab:a4:71:3b:20:d9:fe:73:42:f0:de:56:b4:45:6a:0a:
da:72:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:30:57 2026 by rpki-client