Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: nOtWn2Meae+knVJIJhquT+KDHd3RTOFkdEC4F/gGaik=
Subject key identifier: 86:D0:C4:C6:87:ED:42:10:33:A5:4A:05:D0:04:5E:E6:C3:28:35:2A
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019FA03AE64E2D791F9858273159386C0B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 21:00:42 +0000
Manifest this update: Sun 26 Jul 2026 21:00:42 +0000
Manifest next update: Mon 27 Jul 2026 21:00:42 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: opI8DBPr78AJEcDUsBdgR08npE9puzsEbXOzbbxiS7w=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:e6:4e:2d:79:1f:98:58:27:31:59:38:6c:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jul 26 21:00:42 2026 GMT
Not After : Jul 27 21:00:42 2026 GMT
Subject: CN=86d0c4c687ed421033a54a05d0045ee6c328352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:d2:c8:db:3b:ae:fd:8c:ce:0e:08:1d:f9:
7e:1e:77:4a:dc:a4:5d:ba:52:a7:40:4b:5b:36:3e:
dd:d2:86:cb:1d:c9:90:2d:c0:fd:29:7f:23:34:b2:
7f:4f:f8:03:90:5a:06:5f:ba:f7:4a:50:9b:8a:d5:
b2:ba:9c:f7:30:1c:53:53:cf:db:9a:ba:ff:97:b7:
db:4d:b3:1e:19:bf:14:7e:c5:31:fb:58:5a:ef:7e:
54:62:a0:4b:52:c2:48:01:d9:d0:96:e2:86:9e:9e:
94:03:26:ad:db:47:79:94:e7:e7:b1:6f:63:53:0f:
5f:ec:2c:88:69:89:c3:e7:4a:1d:ff:fd:45:32:c2:
7b:9f:e7:26:6f:f9:fc:61:6b:7b:de:02:16:69:61:
34:e7:50:a5:89:1d:62:f8:fd:53:cc:e8:02:87:20:
08:2a:d0:79:10:b4:e8:2e:f7:3e:a1:70:a7:91:82:
47:8b:a5:7f:bb:5e:6a:2e:46:ae:96:31:c3:ec:16:
9c:e8:cf:9d:49:d7:1e:c6:9d:db:f3:68:18:6f:4e:
28:3a:92:56:56:7e:f3:84:6f:d8:cf:28:08:47:aa:
0b:75:fd:1a:f7:3f:55:54:f2:84:24:5a:08:9b:57:
ae:05:0f:31:47:29:f0:03:22:c4:fd:67:38:92:76:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:C4:C6:87:ED:42:10:33:A5:4A:05:D0:04:5E:E6:C3:28:35:2A
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:31:68:46:30:dd:46:4a:78:13:4a:8c:d0:d1:99:72:93:
45:2f:93:b5:0d:28:a4:bf:ec:4d:6a:17:f6:46:12:1d:ea:25:
c3:14:03:31:f8:d5:6e:95:97:28:19:f0:5a:a7:46:6c:16:ea:
45:f0:94:38:68:99:81:0f:c5:7a:b7:d3:d4:ae:50:f0:79:5f:
57:f8:15:49:e0:3e:0e:5f:7a:26:63:e7:ee:07:42:40:7b:9f:
9f:56:88:e5:9f:81:2f:bb:86:88:f9:3c:90:ce:34:d9:e7:40:
c1:da:0c:ef:8f:0e:a5:0a:15:6f:4b:a3:1e:9b:4e:9e:ad:ea:
f2:4d:f6:59:bf:ae:d2:ab:c1:52:7d:90:0f:7e:c2:06:e6:b6:
db:cd:2a:61:b0:5c:85:43:2a:81:78:61:2c:58:10:57:b8:c2:
58:15:dd:6e:5b:05:5b:71:35:70:32:8d:1e:11:63:72:dd:36:
6d:33:6c:44:80:0a:fb:9e:07:ee:81:01:5f:ff:f3:78:14:bc:
50:12:87:58:d5:ea:9d:7d:c4:7e:17:23:47:da:c6:e4:95:da:
b1:43:2e:be:62:44:40:ed:b4:21:c8:9b:55:ee:bd:09:d4:97:
9d:14:5d:d8:e0:2e:2d:61:6b:3d:91:b6:1b:76:ee:28:85:bd:
96:aa:5c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOuZOLXkfmFgnMVk4bAuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjYwNzI2MjEwMDQyWhcNMjYwNzI3MjEwMDQyWjAzMTEwLwYDVQQD
Eyg4NmQwYzRjNjg3ZWQ0MjEwMzNhNTRhMDVkMDA0NWVlNmMzMjgzNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNrSyNs7rv2Mzg4IHfl+HndK3KRd
ulKnQEtbNj7d0obLHcmQLcD9KX8jNLJ/T/gDkFoGX7r3SlCbitWyupz3MBxTU8/b
mrr/l7fbTbMeGb8UfsUx+1ha735UYqBLUsJIAdnQluKGnp6UAyat20d5lOfnsW9j
Uw9f7CyIaYnD50od//1FMsJ7n+cmb/n8YWt73gIWaWE051CliR1i+P1TzOgChyAI
KtB5ELToLvc+oXCnkYJHi6V/u15qLkauljHD7Bac6M+dSdcexp3b82gYb04oOpJW
Vn7zhG/YzygIR6oLdf0a9z9VVPKEJFoIm1euBQ8xRynwAyLE/Wc4knZWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQxMaH7UIQM6VKBdAEXubDKDUqMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPcxaEYw
3UZKeBNKjNDRmXKTRS+TtQ0opL/sTWoX9kYSHeolwxQDMfjVbpWXKBnwWqdGbBbq
RfCUOGiZgQ/FerfT1K5Q8HlfV/gVSeA+Dl96JmPn7gdCQHufn1aI5Z+BL7uGiPk8
kM402edAwdoM748OpQoVb0ujHptOnq3q8k32Wb+u0qvBUn2QD37CBua2280qYbBc
hUMqgXhhLFgQV7jCWBXdblsFW3E1cDKNHhFjct02bTNsRIAK+54H7oEBX//zeBS8
UBKHWNXqnX3EfhcjR9rG5JXasUMuvmJEQO20IcibVe69CdSXnRRd2OAuLWFrPZG2
G3buKIW9lqpcZg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:27:32 2026 by rpki-client