Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: xuJMvlrW+2cJaogvsYeGWlKgyFBM/n8zvD0mlHaOFxU=
Subject key identifier: 1D:D0:88:D6:52:8F:F5:A6:2E:98:EE:F9:5E:F5:6A:87:C4:7D:A7:14
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 019D38669936AFD544AACB2C321C3E2E2DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 065B
Signing time: Sun 29 Mar 2026 07:02:20 +0000
Manifest this update: Sun 29 Mar 2026 07:02:20 +0000
Manifest next update: Mon 30 Mar 2026 07:02:20 +0000
Files and hashes: 1: 9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa (hash: Xf/CyTLllj6nPGw8RigMPhz1XPn5cXi3fiwBur0KTbw=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: mgZ7FqZiIH6JPW7vC0XGnw9hF3KocTYwc0EpTglHujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:99:36:af:d5:44:aa:cb:2c:32:1c:3e:2e:2d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Mar 29 07:02:20 2026 GMT
Not After : Mar 30 07:02:20 2026 GMT
Subject: CN=1dd088d6528ff5a62e98eef95ef56a87c47da714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:89:dc:d8:a0:68:b4:38:41:84:e5:cc:5f:
42:e0:8c:84:a0:55:b4:21:6b:99:69:3b:12:42:53:
6c:83:6e:44:73:e0:e1:d2:72:5a:9e:aa:39:f3:0a:
36:53:0b:32:1d:f8:1c:c0:61:ea:2f:63:fa:89:19:
b1:45:4b:62:18:ef:98:73:80:59:3b:e8:6a:98:c4:
61:16:4b:ee:98:3f:4f:34:f8:af:d3:b5:50:a1:8d:
ad:86:4f:ae:0f:98:c1:43:32:76:8f:b0:d6:80:81:
d7:83:5f:51:fb:dd:88:7a:2f:3d:bb:0c:60:e2:7c:
20:1c:c4:4d:49:30:74:df:9d:94:a0:01:f3:a4:83:
e8:3f:01:69:3c:f5:45:79:1a:b4:e9:89:4a:1a:6e:
ac:e4:44:f3:a4:ef:8a:03:8f:aa:c1:99:60:c9:f2:
07:bc:0f:bb:06:e8:bd:f2:46:0e:f4:8b:5a:63:ec:
6d:3f:e7:45:cd:58:28:27:ac:f9:40:4f:0e:b9:e9:
c4:d3:06:d3:9b:80:64:cb:f7:43:0d:05:5f:df:fb:
46:ff:6d:cd:4f:6d:98:7c:dc:b7:48:fd:e9:c0:51:
d1:6d:23:85:16:f4:50:47:d3:f7:21:7f:a1:c5:97:
5a:c6:2c:32:53:6c:78:83:a8:e5:5e:e1:62:84:05:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D0:88:D6:52:8F:F5:A6:2E:98:EE:F9:5E:F5:6A:87:C4:7D:A7:14
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e7:b1:41:54:e9:5e:83:a4:c7:5f:9a:29:ee:74:7e:64:c6:
55:0d:7c:82:f8:68:7a:45:12:28:ec:b4:b2:9e:a1:e2:35:60:
c7:8c:fd:97:fd:1a:66:ca:9a:bf:76:ae:d8:ff:d5:82:f3:7b:
63:38:23:e3:40:a5:36:99:ad:64:68:2b:99:ae:5c:5f:d1:f3:
88:44:51:07:81:9a:fd:f7:23:e7:69:a0:55:de:3a:1d:53:8a:
c1:be:c2:af:8b:93:99:20:97:09:3b:37:54:4d:6c:24:6c:2d:
64:6b:6d:01:fe:05:dc:73:ac:2d:32:15:ec:d4:08:60:b7:ce:
76:a0:42:fb:16:de:5f:91:59:df:8e:4e:d7:f8:12:09:60:51:
3f:76:0c:8b:af:88:e5:ba:03:f3:ba:6f:26:ee:4b:15:a7:f1:
f7:e7:84:d2:3e:5f:2c:0b:31:fc:4e:62:97:f5:ba:87:98:6d:
e3:08:5d:1f:dc:29:83:7d:2b:e5:76:2b:f2:fb:b1:be:79:44:
c7:43:f4:40:85:63:34:fd:ea:40:b2:dd:78:5f:91:e5:15:76:
90:eb:da:30:04:74:c3:90:e4:3f:ce:b4:d1:cd:bb:57:ce:5e:
e2:69:f8:25:66:b1:e3:0c:a6:a3:bd:43:fd:79:66:e6:8a:12:
cf:61:53:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zpk2r9VEqsssMhw+Li3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzdkZWZmMDU1YTUxZDkzZTFlZDJmN2M3MzIxN2Q3NjA3
YThjZjIwHhcNMjYwMzI5MDcwMjIwWhcNMjYwMzMwMDcwMjIwWjAzMTEwLwYDVQQD
EygxZGQwODhkNjUyOGZmNWE2MmU5OGVlZjk1ZWY1NmE4N2M0N2RhNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIKJ3NigaLQ4QYTlzF9C4IyEoFW0
IWuZaTsSQlNsg25Ec+Dh0nJanqo58wo2UwsyHfgcwGHqL2P6iRmxRUtiGO+Yc4BZ
O+hqmMRhFkvumD9PNPiv07VQoY2thk+uD5jBQzJ2j7DWgIHXg19R+92Iei89uwxg
4nwgHMRNSTB0352UoAHzpIPoPwFpPPVFeRq06YlKGm6s5ETzpO+KA4+qwZlgyfIH
vA+7Bui98kYO9ItaY+xtP+dFzVgoJ6z5QE8OuenE0wbTm4Bky/dDDQVf3/tG/23N
T22YfNy3SP3pwFHRbSOFFvRQR9P3IX+hxZdaxiwyU2x4g6jlXuFihAWPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3QiNZSj/WmLpju+V71aofEfacUMB8GA1UdIwQY
MBaAFJo33v8FWlHZPh7S98cyF9dgeozyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMt
ODAyNjMwNTE2ZjA5LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMtODAyNjMwNTE2ZjA5
LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOexQVTp
XoOkx1+aKe50fmTGVQ18gvhoekUSKOy0sp6h4jVgx4z9l/0aZsqav3au2P/VgvN7
Yzgj40ClNpmtZGgrma5cX9HziERRB4Ga/fcj52mgVd46HVOKwb7Cr4uTmSCXCTs3
VE1sJGwtZGttAf4F3HOsLTIV7NQIYLfOdqBC+xbeX5FZ345O1/gSCWBRP3YMi6+I
5boD87pvJu5LFafx9+eE0j5fLAsx/E5il/W6h5ht4whdH9wpg30r5XYr8vuxvnlE
x0P0QIVjNP3qQLLdeF+R5RV2kOvaMAR0w5DkP8600c27V85e4mn4JWax4wymo71D
/Xlm5ooSz2FTrg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:36 2026 by rpki-client