Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: bpe4fOUlKmujAop1GM8lujg7CGwYt6p2OUklnQweyLo=
Subject key identifier: B8:CC:AB:91:91:38:10:31:85:AC:DA:FA:D8:EE:F1:F1:E5:58:59:C6
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019D9AAC536CACDE58CA2D5B9C1DB2C495A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 09:01:17 +0000
Manifest this update: Fri 17 Apr 2026 09:01:17 +0000
Manifest next update: Sat 18 Apr 2026 09:01:17 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: iyNKhBmOopiIrbEyQ+wXnMqfEV8FLGHCxC/yF9f9T/w=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:53:6c:ac:de:58:ca:2d:5b:9c:1d:b2:c4:95:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Apr 17 09:01:17 2026 GMT
Not After : Apr 18 09:01:17 2026 GMT
Subject: CN=b8ccab919138103185acdafad8eef1f1e55859c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:d0:b8:f8:42:2e:ae:b6:52:cb:4a:84:48:
b4:bc:6e:ce:21:5a:88:d5:73:c7:50:97:8d:b3:04:
f3:fd:96:92:c7:05:62:03:c8:2a:e5:e9:9b:44:b1:
99:e2:d3:de:9c:f6:11:14:fb:00:7e:ee:87:e9:c3:
12:e4:dc:88:ed:15:2d:60:8f:73:46:af:ab:a1:ea:
d3:74:50:6b:37:00:f8:7e:80:29:d7:a7:ef:58:8b:
46:2a:3d:90:6b:c5:93:67:f9:3e:fd:da:95:42:bc:
42:d6:ec:61:74:7f:64:45:0d:34:02:6f:c8:fc:7f:
20:47:e7:a6:c4:c0:bb:76:f5:26:2e:9c:34:dd:73:
1a:f5:fe:25:e8:7b:4f:4c:13:0e:f9:4c:04:e9:53:
44:65:c7:88:7c:f1:d2:bf:ed:92:f6:e0:bf:cb:d4:
de:17:0c:78:91:0c:e2:9a:1f:69:ce:ba:d0:94:fc:
af:b1:32:d6:70:dd:f7:54:db:d2:39:37:11:11:e6:
9c:48:39:88:af:85:92:31:5e:aa:b1:a0:87:90:5b:
75:89:1d:c0:df:6a:bd:60:9c:63:48:89:31:71:57:
76:76:10:18:da:ed:3e:49:10:21:8d:8a:ee:a1:aa:
ab:c3:4c:07:d9:06:30:36:35:06:f5:c5:cd:f8:cf:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:AB:91:91:38:10:31:85:AC:DA:FA:D8:EE:F1:F1:E5:58:59:C6
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8b:4c:cc:7f:c8:1c:34:ba:2d:12:d9:aa:16:09:22:30:14:
22:aa:2f:fd:d3:1a:b7:60:b2:cd:2c:3c:4a:fe:ea:30:bd:f9:
68:f9:b0:f9:f7:27:2a:bb:60:c0:1d:4b:a6:c9:4f:89:2f:5e:
5a:d5:5b:78:61:ba:e3:ee:ef:e6:fa:89:7b:78:1d:b9:4c:3b:
10:4b:73:76:37:4e:d4:68:82:9f:d2:9b:12:aa:4b:a1:d6:01:
a1:0b:58:8c:2d:2f:6e:37:70:90:4b:cb:07:ef:e1:a7:08:98:
67:cb:18:5f:66:c8:a9:f2:a6:c1:f9:d1:ac:97:33:79:2a:29:
bf:44:e5:06:64:36:88:c0:23:66:62:9d:e6:ab:65:6d:48:62:
d4:ae:87:e4:62:88:dc:90:78:3e:40:8a:25:90:ca:5f:64:60:
a6:c9:cb:8b:de:26:2e:61:b9:6d:0d:72:2d:58:c4:98:07:53:
07:20:85:70:6e:17:b3:76:3b:72:56:7c:4a:ce:0c:cd:1b:6b:
5f:9a:c6:dd:32:15:14:06:82:14:42:85:b9:1c:b9:58:09:03:
0f:06:48:17:2f:b2:cc:bb:c7:4d:6f:c4:86:66:b6:71:b7:46:
b0:ec:6e:c4:d9:f1:28:86:00:a1:26:bf:fb:52:02:4b:7b:09:
27:47:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:24 2026 by rpki-client