Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: DqqLJDdRXz0hxRBSMu7eWjd+OqXj/BWColGQ/AgDGLU=
Subject key identifier: 10:54:D9:27:CD:82:91:5F:48:FA:77:B4:14:E2:9E:74:AA:06:C8:D7
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 019FA89A06F856EDE117447F782A20297B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:34 +0000
Manifest this update: Tue 28 Jul 2026 12:01:34 +0000
Manifest next update: Wed 29 Jul 2026 12:01:34 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: yLFUvKrWbFCPqBl2oC+L5hAQJwl7YIzXkCgCt78tKaY=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:06:f8:56:ed:e1:17:44:7f:78:2a:20:29:7b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Jul 28 12:01:34 2026 GMT
Not After : Jul 29 12:01:34 2026 GMT
Subject: CN=1054d927cd82915f48fa77b414e29e74aa06c8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:9c:34:9c:43:1a:d7:2b:9c:5b:d8:a2:9a:
96:9c:d3:f7:4a:98:5e:d6:b2:0d:61:b5:1d:be:31:
dd:54:20:6b:03:6d:cf:8d:4b:f1:90:fa:72:c4:1a:
0b:3a:b8:85:8f:35:6a:3d:a8:1c:50:01:6a:72:b4:
e3:15:7f:76:e0:4a:2c:c5:90:0b:23:46:51:be:82:
85:b6:a5:0f:4e:3a:9e:7c:d3:fb:2e:27:87:6d:3d:
b7:86:03:25:d3:29:1d:54:8d:d3:08:70:df:0d:f5:
d9:97:07:9c:18:fa:c2:cc:68:d9:4e:3c:f0:cd:ef:
b5:03:a0:dc:29:c9:f6:82:d2:0e:00:f0:74:e6:7d:
f6:59:51:ff:3e:02:42:e3:1b:76:15:5e:20:84:8f:
28:d5:88:0b:60:b1:cc:2e:09:40:29:71:fa:2b:ce:
83:f4:af:a8:07:51:5e:d6:13:be:14:14:dc:52:5b:
98:de:80:53:a8:5e:5a:40:e0:ed:71:61:de:21:1e:
f7:f6:8c:07:85:97:90:3e:ac:06:34:a1:e2:54:39:
1c:9d:36:3c:34:f6:64:98:80:4a:79:2d:f8:b7:f4:
79:ce:02:39:c5:cc:d7:55:fb:5b:0f:f8:26:dc:0c:
41:e3:8c:8c:cd:92:51:7c:55:15:b4:54:5f:c1:af:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:D9:27:CD:82:91:5F:48:FA:77:B4:14:E2:9E:74:AA:06:C8:D7
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8d:5a:c2:68:e2:73:2f:2b:74:fc:2e:19:c5:0e:4a:09:09:
28:0b:6a:48:6c:bb:97:c4:ff:25:00:ad:32:12:01:0f:e4:69:
28:c7:92:83:72:04:5f:78:bc:5c:dd:15:81:2f:bb:1a:28:7f:
fa:81:73:d7:a4:56:5a:83:0d:be:b5:de:63:e6:ea:cc:79:ea:
0a:1f:55:b7:40:20:8d:4c:2b:fd:f2:44:80:55:cf:27:8f:cf:
a5:a4:bb:74:fd:c0:af:42:7b:2d:e0:69:10:ac:23:a4:5d:33:
41:eb:ba:b4:31:15:0d:c4:48:40:2e:49:6c:fb:0a:fd:84:ae:
ef:2e:a7:00:0e:ac:99:26:5e:a1:5d:81:c5:7b:f7:b3:16:c5:
d1:f9:61:87:00:15:4e:6d:04:70:23:54:08:96:0e:a5:3a:4e:
61:76:d9:29:93:d5:95:45:c4:83:b7:45:47:fa:82:e8:59:c7:
88:69:6b:59:b9:e9:b1:f4:fe:b3:49:41:92:a9:fb:46:4f:fc:
82:76:39:5a:97:51:ba:6e:fa:02:2e:28:47:b4:d3:13:56:15:
0d:8e:82:2d:08:37:9d:60:f2:2c:fb:e3:d5:45:b6:10:83:32:
f7:48:5d:e4:1e:b9:cf:42:c3:2d:ac:97:92:e9:5c:98:e2:47:
e9:3f:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:26 2026 by rpki-client