Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
File: mJOu9ftQfvDjW2gtqo56vAPDoq8.mft (raw, json)
Hash identifier: hdwZt3RGa6Wrw9feLVyi1YZ+7OzBQB8XZVoJ7ttv4eQ=
Subject key identifier: 02:27:18:FB:7C:2E:72:D4:F1:B8:B6:2E:B3:75:73:9E:C1:6A:79:81
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 01A1DE70970BF4002E43F23C250F2ED2FB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:22 +0000
Manifest this update: Sun 15 Nov 2026 09:01:22 +0000
Manifest next update: Mon 16 Nov 2026 09:01:22 +0000
Files and hashes: 1: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (hash: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=)
2: mJOu9ftQfvDjW2gtqo56vAPDoq8.crl (hash: KBvuJ0JAxm0OLwEdeYckWUuj0I56ZCJrwTKydjgjmCM=)
3: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (hash: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:97:0b:f4:00:2e:43:f2:3c:25:0f:2e:d2:fb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Nov 15 09:01:22 2026 GMT
Not After : Nov 16 09:01:22 2026 GMT
Subject: CN=022718fb7c2e72d4f1b8b62eb375739ec16a7981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:70:23:56:df:f3:d2:8f:18:b6:96:b1:03:
21:a5:4c:3b:30:01:b1:b3:8f:df:4c:f7:fb:1d:c7:
15:27:a3:46:e6:9d:2d:15:21:97:c6:e7:ba:73:e3:
a9:d3:18:1b:44:34:72:df:08:90:13:84:28:1d:2a:
b8:78:f2:3e:ab:ac:91:48:35:eb:f7:e0:20:4e:91:
7c:e7:91:87:8f:1e:6a:7a:87:a2:67:ca:30:8a:c6:
c8:c4:97:a3:38:9e:26:c7:4f:0e:ad:18:0d:61:91:
bc:01:7b:a2:f9:44:52:3a:13:ef:34:09:23:49:df:
55:08:06:16:76:05:6c:60:df:e7:f5:d7:57:3e:10:
c6:21:e5:7e:2d:80:7d:12:a7:9d:26:ee:6d:28:3a:
2b:0c:14:8b:43:e1:7c:56:ed:87:54:11:7f:48:c4:
89:af:78:98:ca:ba:2e:04:16:98:56:32:52:bf:75:
39:d9:f9:fd:36:ea:a2:06:fd:1c:40:1e:c9:4e:7a:
03:cc:fb:0c:0a:3c:08:10:2b:26:6e:73:a8:f0:73:
cc:bc:95:58:83:7f:8b:ac:0e:ed:1b:ef:9e:8f:93:
50:8f:b8:fd:f7:25:97:f4:7e:f2:dc:22:a1:a9:5d:
65:e2:de:f6:be:83:fa:a9:52:86:6d:b5:09:b2:d0:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:18:FB:7C:2E:72:D4:F1:B8:B6:2E:B3:75:73:9E:C1:6A:79:81
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:01:54:22:3b:5b:bd:b6:c8:ec:9c:37:04:72:c6:6c:43:
8b:db:6b:ce:b7:e8:33:8e:a9:2e:3d:03:37:f8:9c:25:ed:bf:
15:07:00:ce:fb:0c:62:ea:cb:0c:bb:98:25:ea:9a:9b:ef:ef:
1a:a9:9e:d3:09:b0:00:f3:fb:49:85:5e:9f:96:d7:f3:0c:a6:
19:36:c9:10:b0:52:f3:3d:f2:6b:6e:87:04:9f:2c:54:ad:af:
f5:96:35:95:3f:52:92:10:34:c1:d0:f0:fb:e8:3c:4c:10:9a:
2d:ce:70:00:e9:d0:69:08:77:13:34:9b:5c:1d:f5:4f:c8:40:
38:d0:b1:f4:84:f1:4a:80:ff:0a:61:b5:4e:c8:64:60:7c:dc:
d4:8e:f1:e3:f9:6a:c4:84:e5:89:f1:fb:04:db:4f:95:59:01:
0f:67:0b:e2:ec:67:9c:7d:bd:1c:c7:4a:03:8b:e7:c3:83:84:
53:c2:5a:a8:25:2c:3a:18:0d:fb:91:0a:8f:a8:7d:09:8a:a8:
5c:97:19:35:3b:40:5d:48:eb:dd:c3:86:73:ce:29:66:82:87:
9c:d2:b6:23:29:33:7f:25:cf:6f:95:67:8a:5a:7e:0f:d7:7e:
38:9c:6b:f7:31:09:e1:41:d3:b6:b0:01:d8:0e:2f:0b:ca:6f:
e7:e3:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:41:35 2026 by rpki-client