Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: j0YKn4XwHLFsqa6+GiPf/6qg4DNYePj9s2+4M08/eFc=
Subject key identifier: AD:7E:1B:B9:C0:3D:2D:1C:4F:81:81:83:BA:6E:B0:DA:F7:3C:0E:ED
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019DCED0798C482A768E6DC1A7F2BC3C8533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 12:01:02 +0000
Manifest this update: Mon 27 Apr 2026 12:01:02 +0000
Manifest next update: Tue 28 Apr 2026 12:01:02 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: 318NJ0HOutcA5Toe3KHSlf7m9IsRqZo+TSIFspcsPTc=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:79:8c:48:2a:76:8e:6d:c1:a7:f2:bc:3c:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Apr 27 12:01:02 2026 GMT
Not After : Apr 28 12:01:02 2026 GMT
Subject: CN=ad7e1bb9c03d2d1c4f818183ba6eb0daf73c0eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:35:3c:98:f8:e8:d1:6f:67:89:12:ac:42:
62:ba:ef:71:d7:5a:4b:aa:25:a1:4c:16:f6:e0:6b:
6d:e0:72:17:ae:a2:bd:05:98:57:b7:bf:83:fd:28:
bf:2e:4c:62:50:f6:87:08:62:69:a2:7a:2a:72:c4:
dc:b0:dc:56:42:99:e5:98:94:83:4b:75:31:1a:8e:
70:c4:4c:ff:b2:c5:c5:47:25:64:0a:9d:01:f1:1f:
65:b2:ce:9e:f1:35:6b:79:3e:11:8c:b1:57:30:40:
c4:19:ce:e2:85:0c:2b:92:00:d8:44:91:10:c0:95:
39:c2:71:e7:f3:00:89:11:8e:cd:41:b2:34:1d:5a:
89:11:9f:cf:1c:cc:f6:85:76:88:97:7d:b6:3d:1c:
6a:48:7a:78:fe:49:18:f6:93:85:43:11:e5:25:17:
fc:78:1a:7e:ec:a8:38:89:46:6f:c1:3b:ef:43:ad:
df:14:c3:1b:f2:30:6d:ff:90:98:dd:32:a4:5c:89:
a7:e2:cf:51:1a:7d:11:e7:86:41:98:3b:f7:e4:fe:
26:e0:bb:b3:fd:3b:b9:a2:63:2f:cf:9a:50:39:8a:
19:35:f7:ec:69:a8:d8:04:b5:fd:53:84:2a:2f:8f:
ee:7d:fa:80:da:cb:f1:fc:eb:bb:d2:dc:f9:5f:b2:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:1B:B9:C0:3D:2D:1C:4F:81:81:83:BA:6E:B0:DA:F7:3C:0E:ED
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6a:8b:ba:69:33:94:28:82:ac:60:ae:b2:40:70:0f:7a:e3:
05:45:f3:d6:09:a8:82:81:0a:7d:44:0b:07:64:43:67:b5:de:
c5:6e:a1:2b:44:7e:92:1b:a5:3a:56:1f:11:37:37:77:b0:c4:
b1:32:e5:dd:19:d5:f6:71:5f:75:d9:80:f7:93:e3:84:ce:81:
f9:4f:f4:c4:e6:42:c1:73:6e:8b:c6:a8:b4:2a:1f:b7:61:81:
1b:8d:0a:50:24:cb:f1:cf:fa:57:96:c1:49:89:db:fe:46:43:
66:fe:60:1a:21:cb:f7:29:46:5d:5a:00:70:9f:ea:77:52:1d:
aa:40:92:f6:fb:2f:73:6b:89:64:9f:af:64:f1:5b:8a:16:67:
88:0f:25:d9:06:9f:b2:82:3e:80:ee:e0:15:28:e7:00:a1:1d:
46:3e:ad:fd:5d:55:60:fc:a9:2e:40:96:0b:58:08:30:75:20:
bd:81:40:6c:0e:e0:01:60:fd:c0:d2:1b:28:fa:d3:13:8d:ea:
81:79:4a:aa:07:ca:f8:ca:01:4f:81:65:db:3d:ea:8b:5c:02:
13:6d:a2:f9:ca:66:ba:2a:c1:39:3b:4f:1d:d0:d7:b9:a7:42:
0f:ad:4c:86:78:63:a7:f5:a1:56:fa:62:54:3b:f2:3b:67:e5:
58:8b:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:21 2026 by rpki-client