Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: ax+t16woRb6pzLfKIUBv9mLr/hReoFuoJAEp++MWHPM=
Subject key identifier: B8:57:9E:7A:4D:B1:0C:CB:14:E4:E4:00:4B:C9:35:4C:42:E9:24:BC
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 019D27042FB8FBCB8737090177043555483C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 0652
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: 9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa (hash: Xf/CyTLllj6nPGw8RigMPhz1XPn5cXi3fiwBur0KTbw=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: BH3WYf3cQor0yHdG92cyVthTelJVe92/1R03hAlpMJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2f:b8:fb:cb:87:37:09:01:77:04:35:55:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=b8579e7a4db10ccb14e4e4004bc9354c42e924bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:49:58:a7:21:f7:58:98:93:a8:90:16:13:
0e:d5:7e:30:fa:2d:37:06:1e:0a:21:e2:e8:40:b7:
19:6a:05:ed:1f:60:5d:d9:47:8e:71:03:2c:a2:ec:
76:89:e2:7c:6b:c6:8b:17:89:bf:5a:45:fd:c1:c1:
83:e5:c9:f3:d9:46:d6:8c:4b:6b:d0:88:1b:00:f3:
d7:73:76:b7:51:9a:c2:33:dd:08:5c:db:a3:6c:4f:
62:31:0e:cb:cb:9d:50:1e:a7:ac:7d:b3:6f:49:1f:
82:0c:99:0d:25:5b:85:b5:f5:13:11:e9:54:ff:52:
10:85:99:03:88:ab:4e:95:6c:c2:76:b4:ae:0a:54:
cf:3f:fb:a1:84:54:63:cf:4b:53:32:11:51:5a:a0:
bf:23:67:2f:0e:f3:58:aa:be:dd:fd:5e:53:3e:5d:
48:e6:a5:19:d6:c4:08:8a:92:56:ce:c7:80:9b:c0:
dc:a7:12:e5:d8:8c:da:90:3a:40:9e:c9:7b:f8:3c:
ee:7f:f5:70:b0:2f:2b:9d:a4:ad:08:ce:fe:3d:a4:
a1:35:cd:16:fc:35:df:6f:a4:81:af:34:c3:df:7a:
d3:6d:e0:f2:8f:91:25:26:b9:08:13:03:27:e8:9a:
43:1b:dd:7a:e7:63:08:42:08:58:68:5c:4b:3d:8e:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:9E:7A:4D:B1:0C:CB:14:E4:E4:00:4B:C9:35:4C:42:E9:24:BC
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:77:06:01:2d:d0:7b:07:26:2f:9d:bf:1c:40:4e:33:15:
8c:5c:50:ee:b1:88:aa:69:69:53:05:54:34:e2:ba:92:1d:31:
3f:7e:c3:33:cc:cd:2e:da:35:45:31:34:a7:dd:bf:b4:14:92:
39:bc:5a:f7:0a:0c:fb:45:b8:db:55:86:04:49:a0:7b:30:b6:
fe:6f:89:77:f4:c5:c5:43:aa:d6:cb:ae:4a:e7:de:a7:d2:ed:
7a:f7:83:dd:9c:4e:94:71:95:2b:11:25:4e:84:f1:20:07:d5:
27:44:30:c5:d5:96:05:86:b0:5e:a5:81:13:93:7a:90:9e:e6:
76:ed:7c:16:97:7e:16:0c:0a:f5:81:3e:05:db:f5:4f:18:d4:
8f:09:d0:1b:55:d4:13:23:90:f8:e4:cc:bf:2d:b1:f2:41:b1:
89:33:7b:1a:31:ff:e2:f9:a0:0a:64:45:5e:15:f6:31:1e:47:
ee:53:7e:9f:3c:da:4d:dc:c0:7e:6b:06:21:4d:fd:2a:22:e1:
ef:64:27:c3:dc:da:88:be:c0:99:8b:e0:a3:03:3d:d8:18:8e:
61:57:de:30:ba:91:98:cf:62:82:cb:bf:03:9c:0c:cb:bb:a0:
74:5a:bd:bd:cd:8c:7a:68:e2:a7:2d:31:cd:13:70:92:24:c9:
f6:e3:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client