Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
File: mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft (raw, json)
Hash identifier: N7Cj1voSU6R156dDrjAVQdhLbB1ra0KP3bv0W8LSiBU=
Subject key identifier: 45:05:83:D1:9A:3E:4E:2F:F8:D0:9A:82:3C:F6:27:AD:31:E5:77:DD
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Certificate issuer: /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial: 019D25F19969C180A2FF2579D47DDECCCAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
Manifest number: 8B
Signing time: Wed 25 Mar 2026 17:01:23 +0000
Manifest this update: Wed 25 Mar 2026 17:01:23 +0000
Manifest next update: Thu 26 Mar 2026 17:01:23 +0000
Files and hashes: 1: 1oGTaM3zmtQJpGT_DCG0ZTFDaFE.roa (hash: ftY/djmIVMK9vgZAiTPC+/EhDKbjDLXFuK6i4nUE7p0=)
2: mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl (hash: +6viYqV3VH1iSxcA6Fv5TYpUrHsDu88oapjA0T/CBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:99:69:c1:80:a2:ff:25:79:d4:7d:de:cc:ca:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Validity
Not Before: Mar 25 17:01:23 2026 GMT
Not After : Mar 26 17:01:23 2026 GMT
Subject: CN=450583d19a3e4e2ff8d09a823cf627ad31e577dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:24:47:83:49:42:bb:7b:a1:50:60:da:10:
90:19:db:69:b4:c4:1e:5d:86:8e:83:bb:4f:7a:97:
e4:24:12:0b:f7:b5:9a:91:82:c3:65:eb:e2:71:84:
d7:a2:8d:0c:a3:f2:d7:06:13:14:48:fa:b1:d7:ea:
a9:7c:3a:44:56:91:5c:9b:2c:f9:ee:3c:2d:75:d8:
08:a4:ca:0a:32:09:ed:c3:26:12:9d:5d:25:69:ae:
09:c0:d2:29:16:d3:f7:4d:4d:b4:50:b5:13:c0:80:
ad:18:76:91:23:2b:30:0a:93:02:cf:ff:03:a5:b7:
ef:12:3f:26:8e:97:f7:30:bd:ea:d9:e8:4b:10:19:
2f:75:6a:c8:89:87:7b:26:db:2a:fe:91:98:e3:1c:
d8:31:2a:46:5f:5e:19:3a:0e:23:79:0b:d4:0f:76:
d6:fb:ad:ed:a7:6e:b7:8a:6e:6a:7d:e4:e9:53:44:
7c:13:44:9f:f0:66:b3:b4:82:cf:b7:2c:86:35:4a:
4a:f2:fd:60:7b:51:c0:72:83:e6:40:b0:3b:54:16:
89:d8:60:d8:f3:57:09:cc:44:f9:bd:52:b1:d3:61:
17:5b:de:05:ed:e8:ad:f4:90:ee:27:eb:42:61:54:
a3:9f:90:1a:09:d1:d2:7d:8a:64:c6:85:af:43:15:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:05:83:D1:9A:3E:4E:2F:F8:D0:9A:82:3C:F6:27:AD:31:E5:77:DD
X509v3 Authority Key Identifier:
keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:cb:df:3d:cf:40:a4:5d:29:c2:9f:95:18:6d:1f:db:09:
0e:77:04:d8:ea:b0:5b:35:0e:ad:25:5c:c1:e2:b2:71:92:91:
18:2b:0c:00:19:44:13:24:da:d5:57:1f:fa:04:9e:f8:a6:b1:
8d:9a:d6:e3:70:80:35:1a:68:ec:b7:9e:c8:35:a4:fc:bb:92:
42:88:d2:1c:c9:42:10:b4:9f:03:dc:8d:70:ae:6e:dd:d1:9e:
66:ab:a8:a2:92:32:e1:7a:cd:0f:71:be:0b:d3:7e:d0:17:af:
ac:3a:ee:2d:77:c0:23:1f:fb:3a:e2:f5:c7:db:43:39:cf:68:
45:a6:85:6f:06:7a:10:ec:03:e3:6e:b0:18:9e:1c:93:40:13:
b6:f0:fc:e5:0a:3a:72:1c:4c:27:8a:ef:d7:ce:fb:4a:7b:77:
de:e8:b7:a2:8d:25:c0:51:1e:46:32:95:b4:bf:e6:c6:9a:81:
fb:ca:b1:c1:4d:a6:1b:fa:6b:4c:6b:01:f4:59:7c:b8:cb:4e:
a8:76:29:fc:85:32:44:a2:10:25:8b:12:e1:32:5a:c0:9a:9c:
91:c6:cf:a1:67:bc:b7:93:6b:57:99:b9:af:9b:3a:7c:0d:71:
d5:d4:c9:9b:9a:b4:3c:1a:59:15:e3:05:27:60:61:61:42:e4:
20:f0:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:24 2026 by rpki-client