Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier: bbll5rSf6HPzTTep2JN2ALByaqZemtPA0oBzmJwHwQ4=
Subject key identifier: DA:8E:4B:96:E5:40:47:BC:9F:F8:A0:99:DB:EF:A4:F8:CA:FC:B6:D0
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 01A11003DFD0EC55ED089967334D34C12B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 07:00:51 +0000
Manifest this update: Tue 06 Oct 2026 07:00:51 +0000
Manifest next update: Wed 07 Oct 2026 07:00:51 +0000
Files and hashes: 1: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (hash: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc=)
2: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: ANyCHWYa8jGaS7GkCfP2zpaTNiTMdvEgM1MEBEdEKfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:df:d0:ec:55:ed:08:99:67:33:4d:34:c1:2b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Oct 6 07:00:51 2026 GMT
Not After : Oct 7 07:00:51 2026 GMT
Subject: CN=da8e4b96e54047bc9ff8a099dbefa4f8cafcb6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:8a:e8:74:ce:42:a0:0d:4d:9f:3a:cc:99:
bf:a0:9e:80:c7:cd:46:cf:27:2b:1e:6f:ee:6f:3d:
ae:ee:75:c2:14:ad:07:34:ec:6c:ec:53:e1:b9:54:
06:85:13:80:07:12:d6:7b:a8:c5:71:21:a0:3a:d1:
cb:86:4a:cd:56:35:45:c6:48:2e:77:55:56:b1:87:
a6:32:d2:78:05:5c:3f:bd:34:dd:de:2f:c9:6c:c1:
81:e0:f2:ed:43:7c:61:35:0c:e3:85:dd:98:50:f0:
e1:37:3a:91:f6:f8:35:2f:2a:ab:11:e8:c8:e3:c2:
87:79:78:67:82:9c:89:cb:a5:a8:eb:8b:a5:4f:81:
44:fa:c8:cb:97:22:db:0c:4b:b8:ae:3b:b7:6d:d3:
37:2a:13:bb:56:32:2d:7b:80:1c:0b:93:16:26:ed:
a9:44:26:46:45:28:8f:42:f8:5c:17:b9:80:69:4b:
83:61:03:ff:62:cc:19:32:56:49:cd:14:ca:15:e9:
98:3b:6e:b0:98:34:d7:ea:bb:75:eb:38:5c:75:38:
69:16:cc:fb:e5:51:a5:6b:aa:b6:14:8a:33:e5:6d:
42:68:a4:44:f1:2c:41:64:87:a1:2c:1e:d1:9f:28:
26:51:60:1d:38:2c:1b:aa:7e:20:9a:fa:87:6b:b2:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:4B:96:E5:40:47:BC:9F:F8:A0:99:DB:EF:A4:F8:CA:FC:B6:D0
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:e0:82:d7:15:f1:c3:b6:4d:d6:aa:35:e7:e6:0f:88:3f:
b3:85:ed:60:a2:83:1a:e5:58:67:51:57:41:3a:94:8e:26:ed:
ce:74:5f:33:df:b5:c2:8f:51:cb:01:23:b6:fc:df:b6:49:b2:
f0:34:1f:15:f8:73:c2:44:6c:4e:76:b5:ae:83:5e:d5:4f:3c:
30:1f:a2:f6:ae:1c:ca:53:f9:f3:da:c9:ac:ba:93:0a:6c:80:
f4:db:b8:e4:a0:7f:4f:00:69:48:6a:ef:0e:46:22:41:02:0a:
c5:08:35:f6:7f:b6:54:37:28:96:54:fb:54:62:c2:26:b8:a0:
cc:40:6b:62:e1:29:e3:f0:3f:97:68:a3:0d:ed:90:0e:89:a5:
28:62:61:18:f7:4a:fd:34:30:26:e4:7f:0f:7a:af:4a:51:da:
c7:06:86:15:4e:bb:a6:86:27:7b:15:72:95:69:71:89:3a:24:
e1:be:a6:f8:24:c2:5b:df:70:b5:ba:c6:33:3e:bc:5f:01:a3:
f6:46:22:ef:0c:75:b0:83:84:ef:20:de:74:e2:db:81:e0:c4:
37:84:f5:13:c3:9d:e4:4f:da:78:34:07:d1:cb:20:ac:ef:2f:
ed:84:54:9c:69:d8:c5:49:00:7a:cf:d2:3e:d0:5f:27:f7:18:
2e:29:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:14:46 2026 by rpki-client