Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: NsgtkQe4e8KG4USpy9e0SV8GKWDKlCpjx/uz0O7Yj/8=
Subject key identifier: 65:47:54:8E:E9:62:68:E2:D4:08:AD:AA:A1:1E:41:95:6A:49:57:05
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 019F916CA384E1008A93BBAA3A659B2A9DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:43 +0000
Manifest this update: Fri 24 Jul 2026 00:00:43 +0000
Manifest next update: Sat 25 Jul 2026 00:00:43 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: 5XkCWTaaLFuCplkd9pMaNlpCvDuDmSD8klKZW+52XzI=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a3:84:e1:00:8a:93:bb:aa:3a:65:9b:2a:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Jul 24 00:00:43 2026 GMT
Not After : Jul 25 00:00:43 2026 GMT
Subject: CN=6547548ee96268e2d408adaaa11e41956a495705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:a6:e0:80:8b:fe:5e:21:61:a4:4d:92:63:
de:14:b8:bf:46:fd:69:ff:96:a3:45:d0:e7:51:1f:
b8:ff:ad:78:b3:a9:1f:c7:a5:41:7a:11:14:c7:34:
f4:01:c6:1c:5f:b7:93:12:44:03:87:24:0d:e8:ae:
27:83:9e:3c:d8:fd:38:04:a5:fb:72:1b:1a:cc:60:
f3:4b:97:f9:06:ed:f1:dd:ee:4b:99:be:65:2a:8b:
7a:32:df:66:8c:22:3a:10:3f:38:8b:9f:87:87:a8:
c1:2c:42:39:7e:7a:c1:21:8d:ab:24:94:09:91:c1:
2b:eb:dd:0f:82:83:39:de:a4:73:5b:1d:a5:eb:55:
fc:34:94:c8:2e:90:6d:42:9f:2a:68:f3:a2:dc:b6:
7e:c3:a4:bd:ae:d0:12:e0:67:c2:52:4e:c4:ce:8a:
e1:6b:ae:5f:e6:29:82:87:59:e5:9b:ca:a9:28:41:
c3:92:0d:c1:84:e8:f5:30:78:26:9b:25:05:40:4c:
b4:03:2e:0b:85:ce:80:8d:f9:a4:ee:e2:0f:c3:58:
06:63:76:27:e0:13:b4:f8:7a:42:55:db:90:71:1a:
08:ad:3b:2d:2d:8c:12:1c:3f:27:27:90:9b:e2:d3:
0e:b2:45:24:36:9c:9e:02:04:94:0d:88:ba:6a:23:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:54:8E:E9:62:68:E2:D4:08:AD:AA:A1:1E:41:95:6A:49:57:05
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:27:f0:33:d6:28:da:29:36:ad:15:6c:e5:94:44:59:b8:
4a:50:e1:50:ff:5e:f9:e6:7b:a2:44:74:80:55:10:d3:47:29:
17:12:ec:b2:1a:59:a5:2e:04:ff:2b:b0:6c:8d:8c:10:b9:b7:
f0:b0:d6:25:6c:35:90:1a:70:98:3e:df:62:f1:ba:15:ba:7b:
a7:03:88:36:12:b0:73:8c:e1:0e:38:c8:be:d8:63:7a:3a:79:
b9:98:c8:cf:92:7c:a5:4c:a0:45:95:b1:c3:0f:b9:3c:9a:c8:
74:cd:14:01:97:b7:f2:41:3d:1d:6a:07:ce:b6:3c:21:74:5d:
bc:49:95:be:73:60:4e:71:84:bd:b4:0f:0d:9a:9b:a5:8e:e9:
ab:ce:26:4d:e0:1b:b1:f9:01:cb:9a:74:b0:04:fc:d3:9f:8c:
54:54:d6:98:8c:f9:d3:ac:ea:bb:20:b7:9c:bc:68:fd:bc:7a:
15:c4:10:28:1f:be:8f:c4:73:ba:54:e2:43:88:93:47:71:b0:
23:1d:e4:df:a3:92:ef:cd:92:ed:2a:0f:b3:87:5d:be:16:15:
d5:58:0a:d3:05:d0:ea:f9:93:ab:81:b7:5a:4a:21:f6:1b:8c:
8a:21:1d:5d:84:91:af:1a:8c:ba:80:35:62:9e:4a:99:46:ab:
83:af:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:03 2026 by rpki-client