Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier: GF36Tp3RqgvwGhI6UdqMOhgtD7oTk4r6PKPApCAfs5Q=
Subject key identifier: DE:24:B9:E7:29:E1:0D:2E:DC:61:2F:B6:CE:5D:50:F0:F5:5F:72:48
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 019D9D3F1CA5382DA83003D5FAB87FFA74CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number: 07E8
Signing time: Fri 17 Apr 2026 21:00:52 +0000
Manifest this update: Fri 17 Apr 2026 21:00:52 +0000
Manifest next update: Sat 18 Apr 2026 21:00:52 +0000
Files and hashes: 1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: s9ny86CGxRauurttzcZU9B6avWjcBXs8dbJttuPc92g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:1c:a5:38:2d:a8:30:03:d5:fa:b8:7f:fa:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Apr 17 21:00:52 2026 GMT
Not After : Apr 18 21:00:52 2026 GMT
Subject: CN=de24b9e729e10d2edc612fb6ce5d50f0f55f7248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:7f:01:5c:15:38:cc:07:47:40:d2:20:56:
bf:01:ad:00:6f:8f:01:20:2d:fd:41:45:16:f1:46:
f1:2b:e2:04:1c:31:24:4f:bb:5d:16:7c:ad:25:61:
cc:3e:a0:3a:4b:e6:c3:08:f9:50:dc:76:8d:5f:ee:
7b:c1:ad:26:d0:85:21:a3:d5:eb:23:88:35:af:28:
6a:18:e3:62:51:15:f2:1d:74:41:18:a5:44:cf:a2:
26:85:12:56:33:cf:59:91:20:db:25:35:29:04:6c:
b6:6c:28:4b:88:ed:17:8c:38:2d:16:ec:82:91:eb:
03:5f:27:83:f6:95:2a:d5:97:87:8e:3d:0a:c4:e7:
d3:16:86:55:bd:a5:19:3a:6f:68:87:7b:46:ef:08:
d2:d0:49:6f:81:45:0d:fd:ab:87:cd:da:ec:df:03:
6a:a8:73:df:a4:ac:06:de:28:9e:66:88:00:17:58:
83:d9:37:6e:cc:c9:0e:5e:88:24:fd:d4:71:27:ef:
8b:15:1c:e4:22:1a:1b:b5:76:62:1c:f8:ef:fa:fd:
09:b0:2d:29:34:b5:d9:b5:a4:90:ed:e3:e6:02:9e:
89:32:48:02:7e:51:97:fa:4f:30:2d:d0:2b:bc:33:
09:d8:2e:53:39:0c:78:d2:b0:66:e2:70:11:de:f4:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:B9:E7:29:E1:0D:2E:DC:61:2F:B6:CE:5D:50:F0:F5:5F:72:48
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:56:02:84:78:8a:50:50:67:0f:9d:4d:24:27:9a:68:3c:
00:f9:18:63:2c:cd:f8:ad:ca:13:57:2e:4d:76:15:dd:dd:fd:
6a:df:ff:6d:64:99:dd:4d:53:ed:3b:91:a7:57:9f:c9:91:cd:
6f:3e:32:fa:27:a7:71:9a:af:cb:44:35:6d:7a:b7:87:b6:e3:
05:88:a9:69:3c:8d:20:fb:17:d8:a9:df:e7:9c:e5:59:68:99:
31:6b:6d:b1:aa:09:31:fc:60:73:62:d0:a6:0b:ee:dd:ea:54:
0c:35:b8:d5:93:25:cf:86:4f:b7:4c:6b:89:9c:3f:b1:74:cf:
d3:5e:b9:fc:d4:0c:e0:b1:f5:23:72:cb:2a:da:a8:a0:78:9b:
43:3f:a9:38:65:c7:a4:59:74:e9:56:6c:e9:a3:a1:54:9c:3b:
81:02:7c:80:1b:c5:88:e9:d7:60:7f:8e:52:35:bf:54:0d:d2:
24:b2:bf:fe:81:05:a3:b9:c5:4b:cd:1e:eb:98:84:3a:44:09:
f9:77:cf:e5:1c:f4:1a:71:22:b5:d0:ba:41:38:26:ac:47:f9:
5b:45:cf:14:4b:62:99:72:87:2e:fa:03:a1:a0:e5:56:e3:a8:
b2:8e:74:b1:10:a7:ba:7d:65:63:d2:f3:40:1c:09:68:2d:ca:
34:ef:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:13:29 2026 by rpki-client