Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier: jg7rM6FxBVVqGLykzpEiD/EjYPLRHTARer+S+3SUsos=
Subject key identifier: D9:BE:18:CD:FF:E7:F9:49:FD:28:1C:70:91:CE:73:78:6B:78:6C:96
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 019CAA58CF1EFB19DE7A2B31693DEF6FD98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number: 148F
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa (hash: Etr28FcrasjMYjMvyTTIdEuz44C1hmgNsxU1F56W2gs=)
2: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: /h0qABHOIOFEqFFqLvs7szdEwoezUcRTNJ/xFnrpMGI=)
3: rc_UgEQuERXAcFu0ryqIqFlvKe8.roa (hash: dFsLxVGQ4UAiyb+zv8JS9ufJDb8KzppW9TIIyizF/Sc=)
4: yUv2RfMvy9R3pN_vex3UtFkR-qY.roa (hash: lPAN24qwmWZ1IkZzOetMyqpr4pK3soxRCSbkbdcczvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cf:1e:fb:19:de:7a:2b:31:69:3d:ef:6f:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=d9be18cdffe7f949fd281c7091ce73786b786c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:f5:c9:88:90:a5:2f:2d:c1:e1:67:5f:22:
4a:1e:fd:08:8c:76:a0:f2:eb:e4:81:2e:d6:23:c2:
c3:75:2b:cb:00:e9:f4:fd:c2:f5:90:9f:55:aa:c8:
82:e5:9b:79:de:0d:2c:98:58:34:98:cb:84:4c:3e:
20:aa:a5:22:6c:de:72:ad:c4:6f:6f:86:d6:40:46:
99:f9:af:b4:7d:7f:91:38:7f:7f:e0:b1:85:e0:04:
ed:39:64:2e:b1:e8:2a:0e:c3:54:2c:55:42:2e:f9:
35:b6:84:74:67:23:09:7a:21:d7:50:bd:31:e9:63:
c5:d0:8e:dd:a0:4d:b2:69:7b:f8:52:b8:64:e7:78:
78:fe:8f:93:2f:ae:3f:b7:03:6c:ea:d0:dd:db:33:
d5:11:87:d8:ce:c8:2a:3b:92:d0:d3:2a:65:de:cd:
b5:c7:98:a0:92:8a:96:13:9b:c0:a1:76:65:c9:1f:
d5:fe:d6:64:44:28:d4:4b:cc:d3:a8:7f:92:c2:1d:
b2:f0:10:28:e0:7a:b0:71:d7:38:6b:cd:60:ac:16:
c6:e7:5c:1d:1a:93:05:45:77:16:67:e4:79:1a:8a:
1c:89:e6:ab:2e:c3:5a:17:2f:60:37:17:ef:82:33:
c0:4c:30:7f:6c:c8:ec:11:10:83:d7:e2:a2:66:1c:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:18:CD:FF:E7:F9:49:FD:28:1C:70:91:CE:73:78:6B:78:6C:96
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c2:aa:33:a7:fd:f1:a1:cf:e5:07:81:f7:1d:98:11:14:f3:
59:3c:e8:ff:31:8a:15:42:dc:f6:80:c3:1f:58:45:69:00:d3:
e9:b6:ed:6e:77:47:d2:b7:a2:d9:eb:f1:fe:d2:5e:ee:28:0c:
65:93:00:53:38:c5:43:08:6a:83:b3:33:25:9d:f1:a7:ea:64:
d2:fe:b2:10:60:7a:be:55:6d:a1:05:85:16:75:c8:7a:f2:b8:
9d:1b:ab:44:38:a4:61:3a:cd:17:d3:dd:73:58:3e:9b:36:5f:
7e:4a:d2:48:20:28:29:52:8d:6c:5a:4c:9c:3a:82:31:92:70:
d3:48:a2:5d:7a:48:78:e2:ef:76:39:3c:38:ce:9b:cf:69:ab:
84:34:bc:07:b7:05:13:14:de:67:a0:17:f0:db:44:c5:26:8f:
05:1c:38:ff:da:7b:da:85:d0:67:d6:05:6c:71:e5:f2:f4:5b:
a2:d9:39:ad:69:7e:78:a0:fc:f2:c1:f3:0a:a7:61:03:b8:ff:
20:a0:05:de:cf:61:32:21:89:38:15:86:0a:76:58:40:24:bc:
9f:4f:36:b8:da:44:bc:d0:17:ed:71:bd:71:8f:16:94:36:88:
3d:45:d3:33:af:0a:9c:39:5b:38:b9:8f:c0:a1:0e:78:93:0d:
c8:75:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:58 2026 by rpki-client