Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: 6Eg3s8XpzDyyzL0BZYbKGjSVqd51xn/YP6V7njDYExQ=
Subject key identifier: 57:20:88:9B:45:74:91:E6:39:5B:2A:40:93:A4:07:E5:44:EA:1D:69
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019CAB347070F55311F83AB98F3782525389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: ruovXbtMNLCtewAYkUvf/ufNSXK99uDlqjBT4PdYevw=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:70:70:f5:53:11:f8:3a:b9:8f:37:82:52:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=5720889b457491e6395b2a4093a407e544ea1d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:a8:87:61:59:2c:6d:53:f5:e3:fe:20:e0:
91:b5:fb:fc:1d:c2:1b:c0:3b:a1:e1:06:2c:ba:0b:
fb:8e:46:41:b2:a6:86:96:5d:fa:aa:a4:aa:11:23:
62:f5:4a:36:e8:b8:10:88:4b:9b:75:7c:4d:ac:a9:
3c:ce:55:f0:1c:f9:84:59:b5:f6:c4:78:20:17:da:
6c:72:5b:52:65:4a:f6:84:04:88:5b:a7:26:a6:e1:
59:f4:56:4b:7a:7b:96:7c:f0:13:eb:2a:57:d6:b8:
cf:1d:6a:12:df:95:1f:2a:df:e9:c2:39:83:c3:06:
70:77:be:7d:cc:55:ed:5b:3c:bc:03:a4:db:85:8b:
7c:a3:c2:87:07:4c:63:56:9f:fd:2a:c5:6e:00:21:
41:42:6f:8f:8a:74:1d:ed:d8:68:39:75:1b:84:32:
81:37:55:a8:9d:c5:5b:3f:1c:49:25:de:f8:f7:29:
de:7f:7e:03:46:16:cc:13:8b:55:9c:33:95:6b:b6:
2f:f1:e1:3b:e4:5f:07:b3:ae:11:47:af:54:e5:cf:
21:ff:c7:25:26:6d:47:a0:c4:89:4d:6f:5d:a1:75:
36:52:e9:99:3d:15:fe:f1:37:59:51:aa:85:3f:c6:
f3:06:ee:93:e5:e1:80:66:a6:b6:43:ef:66:56:94:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:88:9B:45:74:91:E6:39:5B:2A:40:93:A4:07:E5:44:EA:1D:69
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:04:6f:54:92:02:ce:7d:63:00:8e:a8:21:99:23:8c:d0:d1:
c6:f6:95:d3:28:23:7a:3e:2b:08:c7:76:f2:6d:36:b3:4d:23:
df:49:64:8b:83:53:84:7e:b8:e2:a3:8c:d8:5e:4f:da:6c:d6:
37:bb:6b:5b:81:c0:50:8d:ec:03:46:a5:3a:b4:6a:27:c7:23:
bb:7e:d4:72:b0:6d:42:d1:ad:32:fd:2e:a7:6d:5a:aa:9d:32:
c6:13:02:52:e5:b5:62:1f:e3:73:94:c1:1f:ec:b2:1b:64:5b:
b7:19:a3:d8:86:13:5d:f9:56:14:5d:64:fb:a1:12:1f:49:5a:
0b:f5:b0:9c:17:46:eb:28:d7:71:1d:3d:f0:a5:fe:48:af:85:
8b:07:8c:76:a1:b8:03:94:71:af:a0:5c:d6:26:d8:b3:e0:b7:
ad:c0:84:ec:57:00:55:87:f2:97:59:9c:0c:25:ac:65:0d:8a:
d7:0f:1b:42:c7:96:92:4b:50:04:cc:91:da:9e:2f:1a:de:59:
85:75:7f:b6:af:b9:6f:ba:aa:c3:f8:88:65:7d:56:35:7e:26:
26:12:3a:c9:e1:e1:ba:17:8c:97:9c:de:20:f6:36:6a:ef:11:
e8:57:75:0d:91:0c:67:cd:c8:77:5b:a8:59:6e:2c:50:ba:07:
3f:a1:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:10 2026 by rpki-client