Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: ODFvY+p+PCJANcgdRTTTEfsiazSyLXU4A9McFk/aJUU=
Subject key identifier: 0E:BC:64:DB:73:48:2F:4A:42:70:5D:C8:EF:D3:B3:02:33:EA:0B:46
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019D28BB2C8E277992F82045EF8C1E54C0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: NTgIvDbmkjjdL/nWuiO5uCYAUTYjgqWFOy4UN38FVPQ=)
7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2c:8e:27:79:92:f8:20:45:ef:8c:1e:54:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=0ebc64db73482f4a42705dc8efd3b30233ea0b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:e4:82:a9:88:b2:af:80:e2:fc:9c:19:6b:
ee:64:56:e8:36:5c:f8:a2:f8:96:97:cb:86:4a:3d:
2e:36:c6:4f:c9:ae:34:ba:94:40:5b:29:b1:cf:97:
a8:a2:4b:23:0e:4f:3d:c1:84:d7:6a:00:50:b9:c7:
ad:79:a9:d1:f9:0f:6e:81:ad:77:fb:74:9b:30:ac:
56:c0:f3:90:e3:7c:d0:dc:92:42:ba:dd:68:2e:f7:
d8:7a:a3:1c:4a:af:86:9e:6a:e2:85:4d:ea:36:24:
09:e0:09:f6:0c:d8:9a:e0:5c:e5:9e:52:84:6c:76:
9e:10:6c:bb:7a:c9:55:95:24:ab:bf:1a:22:92:e5:
fb:c5:73:ad:96:18:15:56:41:6a:d8:c4:3a:ae:4c:
40:de:c0:52:9a:2f:9c:54:9c:0c:b1:0b:cf:2d:c3:
7a:2a:44:25:06:13:0b:29:79:29:9b:74:4a:dc:e9:
b6:7d:61:3d:b5:0d:b3:b3:33:23:c4:2c:d6:31:2e:
27:95:01:71:19:6b:22:bf:b1:a2:31:61:58:f9:40:
7e:a0:d0:f2:53:0b:4b:49:38:e6:20:8a:48:a8:b5:
91:90:f9:0e:01:6e:34:e8:0b:eb:42:46:70:ce:48:
2c:df:5c:b3:5e:9c:2b:f8:a5:8f:30:fa:6d:4d:42:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:64:DB:73:48:2F:4A:42:70:5D:C8:EF:D3:B3:02:33:EA:0B:46
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:0d:e0:c2:d5:04:87:01:9b:5d:6d:6d:ac:13:f4:49:e6:
30:07:62:31:3e:3c:82:6e:14:14:3e:9e:85:a6:70:8e:03:3d:
06:5b:3f:f8:d2:30:7f:77:02:27:37:fb:b1:c4:0e:53:8e:d7:
fa:f6:87:7a:6a:e3:ac:c1:86:cb:39:c2:7e:e9:5c:d9:21:6c:
d4:fe:ba:e8:55:78:29:51:87:8f:3e:79:9a:46:5c:f9:f3:7b:
d1:99:02:61:ea:39:03:c9:3e:49:54:48:99:ad:44:91:7c:a7:
70:84:21:00:16:4c:d5:b5:92:5a:97:eb:f1:cf:64:3a:67:6e:
a6:e4:03:fb:da:16:c5:42:ee:62:71:9e:52:da:a8:25:3f:60:
fd:2e:e0:a0:9e:89:9c:d1:9e:82:a4:e8:d2:d3:df:43:4a:5a:
a4:86:0f:f3:cd:96:19:38:e9:01:55:18:27:d8:0d:89:11:b4:
ed:39:76:a0:6e:c1:fe:18:af:37:a6:ac:b9:82:8b:56:23:a2:
7a:0f:70:94:93:50:15:89:05:2b:77:d2:26:f3:c1:5a:94:d1:
57:0e:c4:ae:a0:cb:9a:7a:ac:93:a0:cf:de:cd:cf:bf:0c:59:
77:5c:8c:8c:62:ac:22:a7:cc:64:5a:c3:51:ab:a2:34:9b:27:
a7:2a:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:24 2026 by rpki-client