Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: QfPJ9+aRIWHULQHI2nqbpjtrQSwZV7LotvNgcxi+PME=
Subject key identifier: D2:EF:B6:F7:BC:ED:4B:BF:7A:5A:B6:1B:A7:72:2E:83:B2:B6:4D:C0
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019CE5234DA09A39A15E3787B312958BF9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 03:00:21 +0000
Manifest this update: Fri 13 Mar 2026 03:00:21 +0000
Manifest next update: Sat 14 Mar 2026 03:00:21 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: 6Xrp80TafgQhdLyEyMEK0v4+8NoqhzxGFpN/eMPRwsg=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:4d:a0:9a:39:a1:5e:37:87:b3:12:95:8b:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Mar 13 03:00:21 2026 GMT
Not After : Mar 14 03:00:21 2026 GMT
Subject: CN=d2efb6f7bced4bbf7a5ab61ba7722e83b2b64dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:c6:16:5e:52:f4:49:68:40:a4:ea:2a:f6:
fa:89:58:dd:83:d5:54:5a:2f:d2:3c:40:6f:ad:c3:
c4:62:15:38:cf:b7:f1:b1:eb:8d:7d:39:95:44:10:
fb:b5:6d:ac:4d:fa:cb:d8:03:32:e9:93:b3:7d:8b:
06:40:d4:da:9d:4e:af:40:1c:4f:d0:18:27:da:db:
d8:6e:36:f8:c3:a1:ee:fe:ff:f9:76:09:14:4c:6d:
d4:9b:f7:41:e5:1e:92:19:c0:84:25:ae:8a:ac:f4:
cb:84:38:b3:64:42:b3:b1:9c:f7:7d:2d:a5:0c:2a:
92:32:a1:3a:75:58:3e:59:b4:74:72:79:47:cd:51:
a6:0e:58:ec:33:61:4c:cf:36:d7:25:dd:57:e4:58:
d2:f3:38:d5:97:f0:d0:88:4a:da:5d:12:b5:f1:f4:
30:b5:d5:a8:dd:91:c6:ad:4b:9e:89:5f:0e:f1:d2:
4f:02:66:e8:5d:25:01:16:7f:28:83:db:3c:e9:4f:
3f:5e:32:68:78:ca:8d:e7:29:d8:f3:9f:02:da:9b:
45:6e:dd:3d:7f:b0:65:d4:98:67:98:95:94:1c:cb:
b5:eb:91:96:95:6f:51:28:b6:27:c2:2b:94:a2:15:
05:bc:22:78:ac:68:87:1a:bb:98:8e:64:d5:f7:0b:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:B6:F7:BC:ED:4B:BF:7A:5A:B6:1B:A7:72:2E:83:B2:B6:4D:C0
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ca:8b:12:c7:86:38:79:11:4b:72:c0:b5:25:21:0a:f8:cc:
c1:02:45:1c:0e:a8:94:42:39:31:5d:18:8a:36:17:a0:96:7d:
83:95:cb:db:65:2f:2e:e6:02:6b:11:7c:4c:e1:f6:26:99:ec:
0a:c6:9b:e1:ce:67:4e:a7:01:74:60:94:ee:61:a3:aa:05:2d:
28:3a:cd:df:dd:f2:42:55:c7:69:ae:a1:e8:ea:9f:e6:11:2e:
7e:07:9c:d8:60:df:0b:41:f6:30:60:a4:1f:be:48:96:e9:34:
d6:cf:85:54:8c:ed:2d:3c:3b:3b:e8:81:5f:71:21:c0:da:3c:
8b:ff:db:8c:cb:67:b3:e1:27:f5:22:97:8b:76:b1:7f:22:b3:
07:45:cf:b0:a2:d7:43:c8:27:22:25:11:6f:1d:10:68:dc:29:
3b:0f:72:59:60:18:3c:6a:60:95:4c:42:46:7a:35:2c:99:bf:
bf:d5:00:ae:13:2a:56:ad:57:46:9f:7a:7c:25:a8:18:83:6a:
c3:54:7e:76:f2:6c:21:e4:69:86:db:06:68:ce:33:99:57:fa:
2b:1b:e3:41:d3:fd:d2:58:af:3d:6a:ad:5b:ed:84:26:fd:d6:
d5:24:16:6d:20:4c:de:33:f6:f8:56:13:d4:d4:e1:62:2e:6b:
6e:73:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:48 2026 by rpki-client