Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier: kKue9155ZQvEsDA74WYk13gOPeaDlW3Ua9Zz8MtEi/s=
Subject key identifier: 20:FA:8B:0A:C2:A7:57:8C:C8:99:7F:21:45:12:87:61:10:6F:6D:92
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 019D27DFA7F3952ED0C0259615F904ED1D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number: 14D0
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: Vb0iGqrAQPlQmNGSdhQn2Ex6BEo.roa (hash: Etr28FcrasjMYjMvyTTIdEuz44C1hmgNsxU1F56W2gs=)
2: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: TkHVd6XEvqYqWSBBFflRoQez/4kmciUDK+QulC5M9d0=)
3: rc_UgEQuERXAcFu0ryqIqFlvKe8.roa (hash: dFsLxVGQ4UAiyb+zv8JS9ufJDb8KzppW9TIIyizF/Sc=)
4: yUv2RfMvy9R3pN_vex3UtFkR-qY.roa (hash: lPAN24qwmWZ1IkZzOetMyqpr4pK3soxRCSbkbdcczvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a7:f3:95:2e:d0:c0:25:96:15:f9:04:ed:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=20fa8b0ac2a7578cc8997f2145128761106f6d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:69:5f:59:76:e8:01:23:9c:ef:85:cc:4b:
84:13:c3:da:47:0e:64:f5:a7:7b:27:05:9f:0c:ee:
ef:88:ac:a7:09:14:4e:5e:31:a9:92:69:04:17:91:
80:bc:0a:c6:49:b4:22:6b:a0:d6:08:8d:0c:1f:f4:
31:5b:66:ab:4b:a4:32:29:f5:d1:ba:40:12:71:aa:
6d:4a:b8:55:6d:00:11:74:23:2e:33:c6:93:6a:f2:
33:52:bd:30:83:6c:2e:ab:b7:06:4c:52:61:e4:36:
d5:80:68:70:97:c1:d4:9b:b3:42:48:71:29:dc:eb:
96:23:c3:c3:3d:f6:68:a8:3b:25:b8:61:5b:40:a6:
79:f5:2d:c9:dd:e1:b4:7f:cc:bc:a6:d5:54:b0:6d:
87:24:09:3a:60:d9:89:5c:5a:78:1b:19:84:6c:6b:
02:78:22:60:49:65:96:bb:06:af:86:07:f9:37:f8:
54:a3:76:72:0a:e4:a3:53:61:b7:e8:7f:f6:7e:8d:
aa:70:97:28:b2:28:dd:10:83:97:4c:2e:66:e4:73:
03:c3:39:4d:95:09:4a:e8:03:d7:97:bb:00:08:9c:
22:7c:71:bd:0e:69:f4:2b:86:49:30:87:0b:23:b9:
53:1b:89:6f:ba:96:f4:55:e3:af:44:08:57:d4:45:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:8B:0A:C2:A7:57:8C:C8:99:7F:21:45:12:87:61:10:6F:6D:92
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:6b:4a:14:9b:a3:1d:8e:24:e1:10:1c:ca:00:23:97:48:
58:94:c7:4c:ef:29:06:b0:f9:34:68:c3:85:f5:8c:4d:97:55:
6b:bf:11:10:7e:38:86:60:6e:dd:cc:7a:62:7d:b8:a9:f3:7c:
ec:d7:42:df:44:4e:0f:a8:1b:68:63:c0:5a:2b:e0:79:41:d4:
3f:cd:cc:fb:fd:b0:29:b2:1c:15:82:af:ad:05:e4:25:68:29:
83:ce:7e:d9:65:f7:b7:d2:5b:7d:63:72:44:f6:57:47:f1:a3:
fe:c1:db:4a:f5:29:3a:95:b0:28:99:01:3c:67:c9:ad:d5:08:
9c:2e:e0:26:d6:9f:e1:9c:2a:14:3f:78:70:5a:72:a4:c9:58:
3b:a3:ac:b6:45:de:f4:c4:c7:85:a8:1d:ce:02:5c:8c:ed:9a:
e4:d5:2e:58:4e:50:85:f3:ca:e1:21:4c:b2:25:48:c4:ce:f2:
25:f1:06:5e:e3:fa:3f:42:74:a6:e9:db:f5:6c:66:72:e7:5c:
4c:8b:13:60:af:ce:ef:18:05:fc:bb:ab:1c:4c:69:f1:6f:19:
e6:85:d9:4b:00:3a:ba:32:d5:2b:6c:fa:d2:11:0c:eb:66:6c:
73:bc:d1:b0:fb:67:96:a5:42:d4:9d:a8:6e:0c:ac:2f:b0:c8:
ca:c3:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:33 2026 by rpki-client