Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier: WKNf+ju9gDkNTvD/E01svoQcNkVfUFsy3Gh+vuGsNG4=
Subject key identifier: B8:28:A2:D0:9F:06:0F:2E:BD:0B:C9:F1:B6:E5:F6:94:F4:90:98:E5
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 019D3909B8B8FA5D442B1C97324144431B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (hash: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc=)
2: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: 3JavfhPAVz2CJDkVuVjx4hEIQfmK/guV7xAbrUdiDAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b8:b8:fa:5d:44:2b:1c:97:32:41:44:43:1b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=b828a2d09f060f2ebd0bc9f1b6e5f694f49098e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:cd:b2:fc:24:e1:40:1a:ef:61:76:39:a6:
0c:ee:4e:80:d1:43:98:38:38:49:5b:3c:33:16:e4:
e2:e3:5d:07:66:28:16:70:a5:c8:87:84:d6:50:07:
38:34:48:68:40:53:ab:99:a4:9c:4d:5a:0c:3a:f8:
09:06:89:d0:dd:0b:84:24:74:5c:67:18:e9:d5:ee:
23:ae:04:7b:14:40:e9:2a:f5:09:2d:ce:7f:4c:11:
e6:ca:d0:2c:e5:aa:ad:51:a8:45:b8:61:1a:11:ca:
d4:eb:49:aa:06:03:52:29:6e:82:03:b6:a5:8c:e5:
c5:14:74:f6:e5:6d:89:18:9c:5b:73:d2:2a:40:70:
b3:eb:09:24:fd:a3:de:8c:50:a4:a4:f7:ad:5c:80:
75:d0:52:64:2f:77:22:57:fc:9d:04:92:51:13:52:
54:8d:c9:90:d1:97:4e:80:dc:8c:a8:84:f5:7d:a1:
16:2c:80:82:83:31:36:9e:62:dd:ad:35:ee:c6:d9:
01:d5:dc:d8:16:80:d2:b2:11:1c:fa:68:5f:c1:64:
81:27:49:52:8c:64:d0:cc:27:e1:a1:d1:38:d1:31:
be:1e:fb:c2:a4:ae:be:3b:f8:cb:8c:6a:16:65:9d:
aa:17:29:a5:71:71:e4:bf:a8:6a:cd:a1:00:17:fd:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:A2:D0:9F:06:0F:2E:BD:0B:C9:F1:B6:E5:F6:94:F4:90:98:E5
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:88:9e:74:2a:a7:cc:61:15:19:24:38:48:74:33:05:b5:
bb:c2:87:b7:98:2d:20:70:ef:3a:0e:c8:50:4b:b4:e8:3a:45:
20:45:1f:57:20:fd:a7:71:88:4c:85:d1:64:12:2a:67:f4:03:
9e:94:c8:cc:aa:ed:41:07:7f:9e:aa:a2:58:f5:27:7d:8b:c9:
f0:21:01:83:6e:33:7e:4f:8d:af:49:8d:47:c3:45:50:fc:88:
1a:72:b6:10:a5:88:52:a7:ba:ef:41:a4:d1:d8:7b:a8:f0:25:
fb:b5:8f:d9:cb:24:04:73:3a:15:7c:33:fa:ae:8e:71:5d:e5:
9b:0b:87:70:b6:db:d8:dc:17:cc:9c:1e:5d:bc:69:28:20:eb:
46:67:be:52:c1:e5:b9:1d:fb:43:19:e3:44:d7:42:49:06:f9:
3c:45:c4:c8:53:69:0b:20:7c:cc:a9:6e:9e:a8:08:89:7d:8c:
99:5c:a2:c2:f6:f7:6f:14:a0:e4:95:da:ed:c3:cc:ee:ac:fd:
3d:ce:af:f2:7b:0b:73:b6:e4:60:2a:ad:fe:74:51:98:4b:45:
c7:d5:6e:ba:72:0b:65:d1:33:4c:30:d7:cc:48:5a:f8:a3:8c:
43:2f:65:df:12:23:a3:79:ce:63:ce:e8:32:ce:1e:35:2e:14:
95:67:46:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cbi4+l1EKxyXMkFEQxs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OWJhZGZkMmExN2ZjYTNiOTM1YTM2OGUyZTAzYWQ1NmQ2
ZTNiNjIwHhcNMjYwMzI5MTAwMDMxWhcNMjYwMzMwMTAwMDMxWjAzMTEwLwYDVQQD
EyhiODI4YTJkMDlmMDYwZjJlYmQwYmM5ZjFiNmU1ZjY5NGY0OTA5OGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYXNsvwk4UAa72F2OaYM7k6A0UOY
ODhJWzwzFuTi410HZigWcKXIh4TWUAc4NEhoQFOrmaScTVoMOvgJBonQ3QuEJHRc
Zxjp1e4jrgR7FEDpKvUJLc5/TBHmytAs5aqtUahFuGEaEcrU60mqBgNSKW6CA7al
jOXFFHT25W2JGJxbc9IqQHCz6wkk/aPejFCkpPetXIB10FJkL3ciV/ydBJJRE1JU
jcmQ0ZdOgNyMqIT1faEWLICCgzE2nmLdrTXuxtkB1dzYFoDSshEc+mhfwWSBJ0lS
jGTQzCfhodE40TG+HvvCpK6+O/jLjGoWZZ2qFymlcXHkv6hqzaEAF/3YlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgootCfBg8uvQvJ8bbl9pT0kJjlMB8GA1UdIwQY
MBaAFJibrf0qF/yjuTWjaOLgOtVtbjtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQt
YTYyODUwZmVlYmI1LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQtYTYyODUwZmVlYmI1
LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2WInnQq
p8xhFRkkOEh0MwW1u8KHt5gtIHDvOg7IUEu06DpFIEUfVyD9p3GITIXRZBIqZ/QD
npTIzKrtQQd/nqqiWPUnfYvJ8CEBg24zfk+Nr0mNR8NFUPyIGnK2EKWIUqe670Gk
0dh7qPAl+7WP2cskBHM6FXwz+q6OcV3lmwuHcLbb2NwXzJweXbxpKCDrRme+UsHl
uR37QxnjRNdCSQb5PEXEyFNpCyB8zKlunqgIiX2MmVyiwvb3bxSg5JXa7cPM7qz9
Pc6v8nsLc7bkYCqt/nRRmEtFx9VuunILZdEzTDDXzEha+KOMQy9l3xIjo3nOY87o
Ms4eNS4UlWdGRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client