Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: zgq5ss051GasoEoGdKoKgqGgZqHNiFaGIpSNt8Or/bQ=
Subject key identifier: EE:EB:74:8D:AA:07:77:AD:AD:7B:F4:DD:A3:6C:E0:61:49:B2:8A:8A
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 01A0C40DEDD77AB9B14FB29AB04D080B5876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 17D3
Signing time: Mon 21 Sep 2026 13:00:42 +0000
Manifest this update: Mon 21 Sep 2026 13:00:42 +0000
Manifest next update: Tue 22 Sep 2026 13:00:42 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: OaBXlGMGYK9dTIFDIRq/dkRCzDnVB4YU0hrc9LbUpfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ed:d7:7a:b9:b1:4f:b2:9a:b0:4d:08:0b:58:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Sep 21 13:00:42 2026 GMT
Not After : Sep 22 13:00:42 2026 GMT
Subject: CN=eeeb748daa0777adad7bf4dda36ce06149b28a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:90:30:59:02:60:82:e3:6b:2e:a1:74:38:
16:6d:e0:8c:ae:81:5b:5e:06:98:07:37:7a:0a:8f:
88:d0:22:24:f0:c6:01:68:10:7b:88:77:a6:b1:9a:
8d:8e:ee:93:33:9b:16:58:8e:26:6a:7b:4d:75:00:
9d:51:82:29:47:7c:d8:c3:c7:99:7d:e3:15:03:47:
5e:8c:56:c9:66:c9:37:51:2a:92:80:d5:89:f4:d0:
f7:62:3a:d4:00:00:0d:e3:37:82:a8:d0:3e:98:37:
d8:de:f5:f8:1a:e7:4f:fe:42:33:ad:a0:60:08:78:
c7:5a:18:92:13:67:c4:af:85:a2:a2:42:65:0d:dd:
d7:b0:c4:8e:8d:e4:d8:dc:d2:19:45:23:07:05:3f:
27:d4:9d:cd:f0:3e:3a:41:18:1f:c7:97:1e:53:d4:
87:fa:b2:97:19:0d:38:42:8e:b8:8e:20:32:db:0f:
7a:90:b3:c2:46:91:98:5b:21:bb:3d:61:1a:07:83:
80:71:ea:07:93:1b:23:2c:16:98:f0:ba:1e:52:ad:
91:fe:fd:61:52:79:a0:35:f3:25:96:a1:ee:83:90:
c1:80:c5:f5:9c:52:5c:51:f9:1c:81:d4:0c:86:76:
5c:c0:95:d4:80:09:dc:bd:32:98:92:f5:65:4a:35:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:74:8D:AA:07:77:AD:AD:7B:F4:DD:A3:6C:E0:61:49:B2:8A:8A
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:c4:46:c1:42:3f:46:cc:6f:0c:cf:2f:87:56:00:d9:7b:
31:d4:b7:0a:71:6f:2a:84:e1:d5:8d:2a:6e:69:76:7d:2d:e1:
d7:ae:85:b7:96:ed:74:42:1a:7b:c3:a8:67:ce:58:5b:21:f5:
b9:a3:f3:e6:18:92:04:68:88:26:dd:7c:cc:e2:1c:59:74:1a:
66:78:8a:e8:e7:85:fb:a3:dc:25:7f:63:b0:f1:26:50:19:17:
78:d8:ca:2b:19:4c:ed:94:13:3e:c1:58:97:56:de:e7:a5:bd:
a0:72:f8:68:95:05:19:e9:4c:e9:5d:86:b1:6b:54:2f:8e:00:
36:fc:4b:ae:09:8e:db:5a:34:56:ef:21:b2:75:42:03:62:1a:
5c:59:1d:e3:79:31:c4:be:56:a1:b1:13:cb:90:76:a2:db:b5:
94:44:b3:29:fa:63:d2:99:92:b8:d0:1b:64:81:7e:b0:d3:74:
ae:c4:25:2b:ae:94:4b:9b:d1:63:3b:ac:05:15:25:81:7a:32:
0b:0a:8b:78:99:0e:4b:a6:e4:4c:60:08:6c:05:d8:32:da:fa:
be:e0:73:78:a3:0f:57:30:ca:d7:f5:0b:c4:42:92:6f:15:56:
58:ab:cf:27:54:85:12:db:ed:e6:28:65:22:6f:53:92:5d:7d:
d9:46:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:41:21 2026 by rpki-client