Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: mgi64SH/mnd88UhXurfz88dR9pbx3NmPRjdvP34dSMk=
Subject key identifier: B0:3A:56:5B:96:3F:13:89:79:50:19:8D:E3:DE:08:AF:50:76:83:78
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 01A0BEB14BA416AD704D029DF94476634822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:25 +0000
Manifest this update: Sun 20 Sep 2026 12:01:25 +0000
Manifest next update: Mon 21 Sep 2026 12:01:25 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: hTC5+7fKtE0M8Pq85iTl3wXsDu9gooH1ncw1cPHRvBM=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:4b:a4:16:ad:70:4d:02:9d:f9:44:76:63:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Sep 20 12:01:25 2026 GMT
Not After : Sep 21 12:01:25 2026 GMT
Subject: CN=b03a565b963f13897950198de3de08af50768378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:70:1d:8c:4d:05:5e:3f:78:1d:72:93:03:
2f:5c:24:1f:ab:e8:45:dd:39:ea:a2:15:81:97:80:
e3:d8:d9:75:52:91:88:48:25:47:ab:4a:c7:38:29:
74:d2:ee:94:bf:ed:d6:68:18:7c:66:48:3d:78:5f:
91:a3:84:aa:17:01:9e:70:80:b7:ec:87:63:0a:8f:
09:fa:11:57:63:8a:06:c6:19:c5:8c:b8:79:03:22:
43:ab:1b:4e:db:cc:1d:c9:1c:e8:0b:24:3e:67:85:
b9:e3:94:a5:68:1f:2e:4d:98:6a:ac:83:04:a5:0d:
95:7e:31:58:80:74:d9:05:3d:00:4f:9a:6d:63:1e:
64:90:e9:27:85:85:de:19:a4:c3:60:68:6e:f2:f4:
92:1b:30:65:36:b0:c2:f5:9a:bb:e4:f5:69:c4:dc:
11:ed:27:36:99:7b:01:44:36:e9:00:a0:23:4c:56:
e2:5e:16:21:96:2a:8b:f6:37:0b:46:8c:d0:a2:10:
d9:e6:12:40:db:6f:c2:b2:c4:37:21:dd:e9:bc:d0:
32:33:fe:67:90:85:f0:6c:09:f3:3c:65:dc:08:01:
97:a8:25:0a:1a:d5:cc:fa:20:d5:44:d9:f8:af:89:
e3:c5:14:66:ea:55:ba:64:51:06:7e:d4:7e:98:d0:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:56:5B:96:3F:13:89:79:50:19:8D:E3:DE:08:AF:50:76:83:78
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:f9:49:b7:cd:9f:aa:8a:c4:f2:f7:e0:2d:03:7f:df:b8:
a3:6f:07:68:7f:92:b9:a0:ac:17:ea:0b:d6:a2:26:b2:3a:88:
25:9c:dd:86:1c:cc:86:16:0f:87:75:63:64:df:f6:8a:2f:72:
e4:e6:6f:b2:b7:16:ed:78:86:4e:28:40:eb:5d:51:ab:1a:95:
b9:20:37:7f:1a:a4:ca:1b:a2:1a:95:57:7a:5a:ef:2a:54:3c:
9f:8b:98:30:74:60:dc:e7:c8:e2:88:f2:41:93:3e:3c:69:f6:
53:d7:72:1c:66:63:f7:59:a3:46:13:69:38:46:a7:8c:a3:46:
39:f5:65:cc:1e:98:38:70:d4:fe:d6:65:01:31:a6:f9:e9:ba:
3e:d8:35:45:34:ad:58:c8:75:a3:0a:b3:ab:1c:30:2e:71:65:
38:af:b2:9e:d2:cc:e5:98:e8:cf:26:31:bf:91:87:c3:79:a8:
93:5e:ad:e1:5f:5b:f1:30:53:d7:c9:ae:28:83:89:80:f8:d2:
2b:d8:1d:b4:5c:ad:ea:31:e9:5c:e2:82:3a:3c:b6:13:9f:f1:
b3:bf:6b:34:40:31:3f:a5:d1:fa:bc:b7:08:ad:e4:cb:c1:a8:
d4:4e:e5:35:dd:a1:de:11:0e:09:fe:52:e1:ca:c4:e8:da:2f:
64:6a:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:25:55 2026 by rpki-client