Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File: mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier: GjfK4B1ufw2aMHHEnDBQfMWp0Dp/qGlwg4gzwvbAkgs=
Subject key identifier: 8C:65:BE:BF:AE:17:7D:B3:9D:A4:F0:E0:7F:94:C1:A2:C1:B3:BC:B3
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 019D2960C2E6B2D8FFD9B230421AF01A7528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number: 07AC
Signing time: Thu 26 Mar 2026 09:01:40 +0000
Manifest this update: Thu 26 Mar 2026 09:01:40 +0000
Manifest next update: Fri 27 Mar 2026 09:01:40 +0000
Files and hashes: 1: hoKwY0QvUnBi-tDDbTH_cLv23NY.roa (hash: fFAQMbRSBb2iS8m9HUDJs1yeCJEv1rp7JgjV+mMT+oE=)
2: ihYgr-rjOEu_0aFSN5ArKwebXhw.roa (hash: V6X/NJtxRRU2A4S6y2uawtLDYFOhttTEH+mmWCQD8A4=)
3: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: 9yUltdejWRKY8cAYpvJ+izPcvv+HqgHneAEqezNi4zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c2:e6:b2:d8:ff:d9:b2:30:42:1a:f0:1a:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Mar 26 09:01:40 2026 GMT
Not After : Mar 27 09:01:40 2026 GMT
Subject: CN=8c65bebfae177db39da4f0e07f94c1a2c1b3bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:6d:25:f1:55:e7:e1:c2:92:0d:d3:01:f0:
1e:f8:2a:64:fa:67:9e:f1:0f:90:65:1f:25:82:a5:
ab:e2:0f:6d:c4:e7:4a:4a:6d:36:b6:52:c4:91:2a:
cf:d8:30:5b:36:97:d8:a6:9c:7e:c5:1d:d3:3c:08:
27:c9:9b:9f:03:bf:9e:2d:3f:e6:9e:86:e1:24:ac:
b9:66:83:af:fa:be:72:59:76:ba:51:ad:b4:84:55:
0b:2d:12:d8:66:af:43:ae:1e:61:7d:2c:c6:38:27:
03:e9:1f:8a:0d:ec:41:d2:9c:04:58:b2:d7:5f:4e:
80:42:05:7a:ad:aa:1a:f3:32:37:1f:be:0c:b2:40:
4c:20:c4:cf:ac:8e:64:e4:fc:17:50:f9:d4:d4:b7:
cb:d7:32:9b:10:23:e9:40:d2:90:59:ac:74:af:5f:
8d:e8:1c:07:40:cf:56:70:7b:a7:0f:b7:44:7b:bf:
9f:be:96:e4:4a:90:63:2a:a1:81:08:ff:f1:0c:37:
92:31:77:ca:84:1d:7d:a6:76:cd:1c:b5:b2:cb:6d:
83:b2:53:49:4e:95:5d:f8:ff:c2:61:31:e4:b0:46:
ff:75:ee:94:3a:72:4f:30:ac:a1:15:19:73:98:e7:
8a:17:ae:4e:9d:af:2c:2f:e7:1d:51:2c:ae:93:55:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:BE:BF:AE:17:7D:B3:9D:A4:F0:E0:7F:94:C1:A2:C1:B3:BC:B3
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:01:9e:3f:ae:68:4f:b3:dd:f6:5b:55:61:37:33:2f:14:c4:
63:16:15:2c:4d:e7:48:c6:15:0c:af:93:59:0e:b2:c5:36:43:
aa:af:a0:99:cc:6c:a0:3c:99:0f:9e:0a:87:5d:38:90:28:ee:
93:9a:81:31:be:e1:ec:0d:1a:9e:2d:f4:37:15:1e:d5:e8:e4:
ea:26:7c:10:a1:10:eb:7b:c4:7b:40:fd:85:fb:14:46:ab:82:
ae:bb:00:b4:8a:1c:ab:e9:a3:24:2f:7a:2f:22:86:e5:a5:ab:
ee:39:fa:5f:8b:4e:65:a4:4a:c2:3b:22:6c:46:e8:43:6e:74:
63:7c:61:5a:30:a2:12:5a:6d:8e:cc:ea:7b:ef:2d:60:5c:d0:
91:80:38:87:5d:ca:67:ce:3f:b6:c9:a9:e5:db:ec:fd:3c:38:
70:5a:be:40:67:2f:0a:93:21:e0:32:b1:e6:53:2e:79:a1:45:
c3:c3:97:5e:e1:1b:c4:6f:79:f6:00:b0:99:ce:74:38:72:f8:
72:11:84:b6:16:b1:33:a6:12:a4:fc:e4:a3:ec:e7:85:28:c9:
fa:b4:bf:31:9b:b3:59:84:18:c6:cf:98:f7:58:03:c6:52:6f:
52:b7:56:e2:ce:56:50:21:d3:29:ae:2a:29:e0:a2:5f:73:89:
02:b9:c4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYMLmstj/2bIwQhrwGnUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0
YzcyZTcwHhcNMjYwMzI2MDkwMTQwWhcNMjYwMzI3MDkwMTQwWjAzMTEwLwYDVQQD
Eyg4YzY1YmViZmFlMTc3ZGIzOWRhNGYwZTA3Zjk0YzFhMmMxYjNiY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6JtJfFV5+HCkg3TAfAe+Cpk+mee
8Q+QZR8lgqWr4g9txOdKSm02tlLEkSrP2DBbNpfYppx+xR3TPAgnyZufA7+eLT/m
nobhJKy5ZoOv+r5yWXa6Ua20hFULLRLYZq9Drh5hfSzGOCcD6R+KDexB0pwEWLLX
X06AQgV6raoa8zI3H74MskBMIMTPrI5k5PwXUPnU1LfL1zKbECPpQNKQWax0r1+N
6BwHQM9WcHunD7dEe7+fvpbkSpBjKqGBCP/xDDeSMXfKhB19pnbNHLWyy22DslNJ
TpVd+P/CYTHksEb/de6UOnJPMKyhFRlzmOeKF65Ona8sL+cdUSyuk1XmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxlvr+uF32znaTw4H+UwaLBs7yzMB8GA1UdIwQY
MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt
NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3
LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewGeP65o
T7Pd9ltVYTczLxTEYxYVLE3nSMYVDK+TWQ6yxTZDqq+gmcxsoDyZD54Kh104kCju
k5qBMb7h7A0ani30NxUe1ejk6iZ8EKEQ63vEe0D9hfsURquCrrsAtIocq+mjJC96
LyKG5aWr7jn6X4tOZaRKwjsibEboQ250Y3xhWjCiElptjszqe+8tYFzQkYA4h13K
Z84/tsmp5dvs/Tw4cFq+QGcvCpMh4DKx5lMueaFFw8OXXuEbxG959gCwmc50OHL4
chGEthaxM6YSpPzko+znhSjJ+rS/MZuzWYQYxs+Y91gDxlJvUrdW4s5WUCHTKa4q
KeCiX3OJArnEBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:37 2026 by rpki-client