Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: IzwHnXe6kfv9Ho4kRLBJZGWRG5SE6Caw7hkUR/jo9d0=
Subject key identifier: 38:5F:B9:88:34:CB:6B:0F:A3:2A:D3:E3:F2:DD:DB:46:D7:1F:2D:63
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 019CAB6B4B780863479CCDCD4435F61FEA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 0612
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: 9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa (hash: Xf/CyTLllj6nPGw8RigMPhz1XPn5cXi3fiwBur0KTbw=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: 5pe/UPNzggmSlWHtygx6k9ztvzietJS3zQXt9fVrtIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4b:78:08:63:47:9c:cd:cd:44:35:f6:1f:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=385fb98834cb6b0fa32ad3e3f2dddb46d71f2d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:de:79:14:98:a0:f4:39:c6:f6:9b:5a:c8:
9f:e9:7d:a9:fd:1e:a8:d3:4b:0c:b6:69:fc:6d:9f:
e5:87:14:dc:1d:8d:2a:b3:5d:9e:31:29:33:f3:25:
da:a5:09:c4:35:83:09:cd:04:2d:61:44:6a:e7:7a:
37:00:a1:55:b5:24:97:59:14:3d:6a:2b:42:1d:5c:
90:e0:63:81:7a:92:6a:cd:ee:60:3a:cf:8b:d1:2a:
f3:ff:21:ba:07:0f:52:4e:95:d8:a7:81:c9:14:33:
f2:c6:71:80:24:d4:cd:57:d7:1b:74:65:9b:14:86:
f2:6e:bd:06:67:ae:e2:76:08:e7:1c:b7:d9:17:b5:
23:53:07:e2:ab:0d:72:e6:f6:3e:3e:14:7c:08:94:
5f:b1:de:70:62:61:99:15:35:7a:f4:bb:bd:97:41:
ca:2f:ea:53:c3:3a:61:b9:8c:cb:36:d7:6b:2a:b7:
1b:42:6a:6c:c6:c4:65:5f:d4:2c:b9:81:ee:b5:14:
f5:fb:f1:0d:7e:9e:77:77:09:45:f8:66:d2:05:a4:
44:e7:ad:80:fe:92:3e:2f:9f:4e:fa:d3:bd:af:b1:
fd:90:3a:59:43:73:06:5a:ff:54:d3:96:6e:af:e7:
0d:98:ec:9b:84:04:05:ca:52:7c:3f:bc:fe:44:e2:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:B9:88:34:CB:6B:0F:A3:2A:D3:E3:F2:DD:DB:46:D7:1F:2D:63
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:e1:e6:2f:42:8a:fa:11:b4:1a:16:6c:7d:bb:a6:83:c0:
5b:86:a0:92:5f:bd:1c:34:9e:79:d6:17:8e:49:69:84:41:be:
b1:a4:f9:fc:a3:c7:b4:ca:61:67:1c:6f:9a:07:7c:ad:26:1a:
35:c1:69:b4:76:d0:fb:d1:28:a4:bb:ee:a6:9e:33:17:eb:11:
a2:a9:7e:f0:b2:1d:74:a6:65:44:46:25:b3:88:ac:e4:77:4e:
6a:7a:20:36:7a:d5:9e:8e:30:51:48:94:0f:99:0d:6f:3d:98:
62:bb:e5:5d:42:d0:de:6a:bc:a4:64:6c:33:45:5e:60:f9:2b:
33:18:7f:32:60:82:ea:c4:50:4c:e7:3b:e8:66:9e:bd:9b:0a:
e7:36:4e:e1:43:85:a0:27:75:03:8f:f3:6f:a4:47:af:ac:15:
f0:9f:6c:7b:b0:65:99:61:7c:97:ee:99:1b:e6:3d:8a:ed:cf:
62:6a:70:01:3f:13:88:1d:ef:8a:bd:db:90:e7:af:5b:da:65:
1d:5d:b8:9e:f1:4f:e1:4b:25:e8:72:71:6c:13:8b:02:1c:52:
13:7e:a9:11:9b:b6:8e:5a:4e:64:d4:94:78:65:9d:a2:88:27:
16:4a:70:cd:e4:41:ce:28:5a:19:66:5f:19:e2:0c:8b:a7:79:
ec:c7:5c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0t4CGNHnM3NRDX2H+qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzdkZWZmMDU1YTUxZDkzZTFlZDJmN2M3MzIxN2Q3NjA3
YThjZjIwHhcNMjYwMzAxMjIwMTAxWhcNMjYwMzAyMjIwMTAxWjAzMTEwLwYDVQQD
EygzODVmYjk4ODM0Y2I2YjBmYTMyYWQzZTNmMmRkZGI0NmQ3MWYyZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72neeRSYoPQ5xvabWsif6X2p/R6o
00sMtmn8bZ/lhxTcHY0qs12eMSkz8yXapQnENYMJzQQtYURq53o3AKFVtSSXWRQ9
aitCHVyQ4GOBepJqze5gOs+L0Srz/yG6Bw9STpXYp4HJFDPyxnGAJNTNV9cbdGWb
FIbybr0GZ67idgjnHLfZF7UjUwfiqw1y5vY+PhR8CJRfsd5wYmGZFTV69Lu9l0HK
L+pTwzphuYzLNtdrKrcbQmpsxsRlX9QsuYHutRT1+/ENfp53dwlF+GbSBaRE562A
/pI+L59O+tO9r7H9kDpZQ3MGWv9U05Zur+cNmOybhAQFylJ8P7z+ROIDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhfuYg0y2sPoyrT4/Ld20bXHy1jMB8GA1UdIwQY
MBaAFJo33v8FWlHZPh7S98cyF9dgeozyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMt
ODAyNjMwNTE2ZjA5LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMtODAyNjMwNTE2ZjA5
LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc3h5i9C
ivoRtBoWbH27poPAW4agkl+9HDSeedYXjklphEG+saT5/KPHtMphZxxvmgd8rSYa
NcFptHbQ+9EopLvupp4zF+sRoql+8LIddKZlREYls4is5HdOanogNnrVno4wUUiU
D5kNbz2YYrvlXULQ3mq8pGRsM0VeYPkrMxh/MmCC6sRQTOc76GaevZsK5zZO4UOF
oCd1A4/zb6RHr6wV8J9se7BlmWF8l+6ZG+Y9iu3PYmpwAT8TiB3vir3bkOevW9pl
HV24nvFP4Usl6HJxbBOLAhxSE36pEZu2jlpOZNSUeGWdoognFkpwzeRBzihaGWZf
GeIMi6d57MdcRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:04 2026 by rpki-client