Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: sw+NX4Aj9CpdXWL7KJsxoypDlb0V7WIu8ol9nDEMOUM=
Subject key identifier: DA:0D:7F:16:04:2A:32:2C:1D:29:B2:C2:B8:88:67:F1:1E:4A:DF:06
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 01A0C8588995AAEDE2E990C5DED44D6BFFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:40 +0000
Manifest this update: Tue 22 Sep 2026 09:00:40 +0000
Manifest next update: Wed 23 Sep 2026 09:00:40 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: iTJ4eG/dbjl23kpPcbOluhB2BZGIOuoKrpGDq5sccvw=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:89:95:aa:ed:e2:e9:90:c5:de:d4:4d:6b:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Sep 22 09:00:40 2026 GMT
Not After : Sep 23 09:00:40 2026 GMT
Subject: CN=da0d7f16042a322c1d29b2c2b88867f11e4adf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:5f:57:b3:47:05:05:01:bc:6d:80:a7:aa:
1f:e6:8c:82:1d:6e:2e:d1:ea:16:ba:d1:db:b9:ca:
9a:b8:e7:86:52:2f:27:4a:59:59:2b:6a:33:16:36:
a0:c8:a5:c1:dd:e3:b1:b5:b8:4d:ee:08:85:fb:09:
57:4f:a4:61:a4:06:e2:2c:ff:df:8d:3c:9c:23:2e:
4f:46:57:09:04:da:e6:39:99:e3:cd:26:56:9f:f8:
70:89:f0:09:c6:41:2c:ec:c8:ba:86:90:2a:23:f0:
0c:6f:7b:2b:10:8d:24:dc:ee:a5:d4:99:6a:83:9e:
09:f0:5d:b6:38:c6:38:bd:08:00:48:33:ae:48:2d:
72:47:9c:41:71:ea:ab:ff:cd:a6:fa:8a:46:d4:c5:
48:8f:53:6c:53:79:d7:4d:33:e1:b4:09:6a:45:b5:
dd:45:83:9e:3c:28:79:cb:aa:9c:74:da:36:46:86:
47:b2:e6:17:b6:8b:3e:c1:16:29:11:13:70:96:17:
f9:dc:d9:bb:8f:03:e6:c0:39:4a:14:23:e2:9b:9b:
8c:0f:c3:99:a1:ba:81:52:8a:c7:92:ad:fc:e8:2b:
32:78:3c:6b:e6:7d:fe:c9:b6:1b:fa:a2:b6:3d:21:
e8:a8:ed:b1:2b:97:08:56:48:9a:1e:12:34:f4:2c:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:7F:16:04:2A:32:2C:1D:29:B2:C2:B8:88:67:F1:1E:4A:DF:06
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:6c:af:ec:27:29:e3:e9:d1:21:87:c5:e6:13:c0:bd:cf:
ed:39:e3:48:e4:35:f9:f7:de:4e:f9:d9:f1:2b:65:50:9a:c5:
e6:f8:83:6d:d1:8e:c8:20:00:44:f0:ae:c4:c1:7b:9b:88:d0:
88:bf:c0:0c:5c:c2:ed:f0:41:1d:71:7f:33:f5:8b:54:d9:b4:
34:6f:96:a9:e2:45:43:c2:ff:b4:d2:bf:e6:20:6a:04:c1:7a:
4d:55:1f:2d:bb:e8:02:f7:a5:a0:92:64:61:c5:26:c2:b5:79:
fe:19:d8:33:26:82:90:7e:42:c1:01:6e:4f:09:01:0b:84:07:
be:da:1f:59:d1:77:45:bf:17:c9:e1:b2:d9:7d:1e:6d:6a:58:
ed:90:fc:b9:72:18:da:6c:ce:8b:e6:db:2d:41:a9:6b:2e:aa:
c9:60:ed:d5:78:14:5e:d0:bf:fa:9e:19:ec:e1:4f:cc:68:18:
b4:48:2d:dd:43:14:78:a2:f3:e7:53:48:a7:6a:b2:5d:68:53:
8e:73:32:9d:58:bc:a0:5a:83:ab:0a:b2:25:20:66:5b:e7:94:
a7:dd:d4:1b:bb:2a:24:c8:c9:9a:9e:5a:9a:13:62:ea:13:3d:
a5:bc:16:3d:c5:4d:c4:05:db:0b:52:68:b6:f0:90:f8:ed:2f:
4a:15:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:21:17 2026 by rpki-client