Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier: rPkqsZ+8D1AGhLlR8JCYyej8myHkuNT/Hvfz+zjInbA=
Subject key identifier: 2A:16:B3:71:81:DB:B5:4C:44:7F:BD:27:1D:E4:D4:93:33:76:E8:B2
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 019CAA21DF309B579A12CF860FF1F7CE2479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:01:12 +0000
Manifest this update: Sun 01 Mar 2026 16:01:12 +0000
Manifest next update: Mon 02 Mar 2026 16:01:12 +0000
Files and hashes: 1: 6wbmuyzQTlEMVcCNEt94Ytwh5B4.roa (hash: PnJoMCRg40MuZsT7+Fw5OTXBvqQLFkm5aYCcz/8c7Zc=)
2: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: ZlU58tG5mR9qT7biKFwKmVZBsSIlEfezmVsGuUup8Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:df:30:9b:57:9a:12:cf:86:0f:f1:f7:ce:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Mar 1 16:01:12 2026 GMT
Not After : Mar 2 16:01:12 2026 GMT
Subject: CN=2a16b37181dbb54c447fbd271de4d4933376e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:5b:28:fc:e0:89:56:68:15:79:fa:26:56:
66:88:3f:86:9f:66:4b:31:8f:ae:b8:c8:d7:e3:14:
f4:b8:eb:32:79:01:25:e0:d4:e3:6c:05:e1:db:8c:
8f:fa:56:4a:fb:07:9d:89:63:c5:19:6b:58:72:ad:
6a:ba:f0:ec:58:44:5d:4d:94:81:54:7f:c7:8f:96:
af:f3:86:c0:1e:5b:e5:03:36:cb:15:56:78:b1:a9:
4b:21:fd:0f:b9:58:9c:60:86:31:e3:5c:76:b1:60:
ba:8c:a6:a9:3f:ec:e7:52:6b:b5:5f:d0:57:10:52:
dc:1a:ee:64:fc:6a:89:3d:93:6e:c3:48:cb:68:c0:
42:59:f7:c3:0f:7e:89:fa:0c:7c:65:88:91:6d:ff:
76:aa:ad:bb:df:2a:1e:0d:6c:a9:fc:2a:99:bd:2e:
4d:a9:aa:00:6b:f3:5e:e0:19:ca:9f:1c:b5:2c:e1:
26:5d:1a:bc:f0:78:59:03:14:15:ce:0a:3d:c9:e9:
f8:17:2f:c5:c7:1d:56:7c:31:f5:1c:60:57:85:33:
ad:07:42:95:bc:18:14:43:9f:a1:d6:61:ba:30:94:
53:fa:97:d8:73:d0:dc:eb:38:f8:34:aa:eb:3d:1d:
b5:13:51:d6:f6:46:0e:22:ea:7a:43:c6:e7:14:c8:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:B3:71:81:DB:B5:4C:44:7F:BD:27:1D:E4:D4:93:33:76:E8:B2
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:b3:b1:2a:86:ad:65:51:2f:aa:92:dc:6b:03:9b:1f:41:
68:39:5d:eb:67:95:9d:d8:39:89:03:b9:87:68:2d:39:a1:33:
0b:c6:f9:33:25:f1:68:54:fe:51:20:67:25:50:d4:bc:6d:32:
a5:2f:4c:f0:b8:d3:15:96:02:36:fb:96:63:79:c9:16:e3:4f:
ca:e5:b6:af:4e:dd:c0:a2:2c:c0:52:bb:7b:a6:e5:f5:a3:be:
c0:39:19:d3:c5:03:6f:72:24:c7:57:c8:8a:5d:c8:69:7c:31:
9a:01:a4:ac:3c:ae:da:a5:6c:73:0d:8e:2a:db:56:03:91:99:
5d:81:2b:f0:b1:37:8a:4d:26:62:ea:ab:3b:b5:0e:19:40:aa:
55:25:a4:0b:03:35:c2:ef:8b:dc:b1:4f:20:71:56:5e:8e:e1:
59:04:b7:9b:ea:4a:bd:19:30:49:d0:f0:1c:6b:ae:70:95:30:
ce:13:03:52:1c:28:78:73:51:03:b6:81:06:91:35:51:35:27:
50:c9:7d:ed:b7:23:98:49:53:b0:ce:9e:7f:8c:e8:a1:f6:e5:
4a:e1:2d:46:46:4e:4a:1a:e1:0b:ee:09:36:f8:e7:c4:f7:a5:
63:f2:9f:f2:5e:7e:f5:a8:5c:34:fc:d9:8b:17:00:82:72:7b:
1b:1d:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:27 2026 by rpki-client