Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier: zsEfm1pzFPw8tyTlZTWx47R+kSvLjdmM+G79hsxcXQI=
Subject key identifier: 55:54:AF:29:74:18:16:B1:C5:3B:0D:3C:B2:D5:8B:70:C5:B0:14:3A
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01A0CE9124CAF57F10DF3FAC53AEFE623B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 14:00:13 +0000
Manifest this update: Wed 23 Sep 2026 14:00:13 +0000
Manifest next update: Thu 24 Sep 2026 14:00:13 +0000
Files and hashes: 1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: hFqpOrkIZv5XgNXCEg457a2ognBC0iZjzmT63MKfM54=)
4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
7: mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa (hash: VU83ADSXkXkgxpUSiqeNZ14qzvTFwfPzksOEUTczOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:24:ca:f5:7f:10:df:3f:ac:53:ae:fe:62:3b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Sep 23 14:00:13 2026 GMT
Not After : Sep 24 14:00:13 2026 GMT
Subject: CN=5554af29741816b1c53b0d3cb2d58b70c5b0143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:54:db:98:4a:50:7e:63:a6:3f:12:7c:30:
fd:db:5a:90:bb:1c:75:d2:39:ac:d9:fd:11:1f:57:
8c:e5:6e:23:c9:d4:c4:81:d9:d3:35:6d:96:46:a6:
39:10:ce:79:99:46:f7:4a:54:4a:27:75:66:f5:90:
eb:1e:c9:2e:ec:63:18:ad:53:89:2d:c0:31:d5:14:
38:2a:37:9f:d5:00:c0:72:f4:2c:e4:8a:1d:ea:d6:
21:6b:2a:a2:22:0f:b3:85:78:fe:77:c6:d7:2a:7b:
aa:f9:ba:81:ba:e4:65:ac:52:7c:af:30:27:9c:f5:
2a:cf:59:a6:53:1d:12:6b:99:ee:44:21:33:4b:46:
ac:ee:9f:26:ad:6b:ca:16:fd:49:be:4c:8b:21:74:
3a:6a:9c:92:f5:e1:0a:9a:04:b3:1d:1d:dd:c1:2a:
c1:94:ac:a2:03:05:c1:c8:26:84:66:b3:5b:e6:cc:
33:f0:6e:67:c1:ac:81:dd:4b:ad:6c:c8:83:37:c5:
db:62:38:d1:f3:d8:48:6a:e8:59:e4:01:25:02:bb:
81:0e:16:f3:d8:5f:a0:eb:65:de:5d:7a:59:6e:9b:
40:bd:8d:ac:f9:be:46:9c:94:e7:4d:ec:01:9d:e5:
40:57:49:4e:91:b5:17:7f:fb:c8:cd:3a:11:5b:98:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:AF:29:74:18:16:B1:C5:3B:0D:3C:B2:D5:8B:70:C5:B0:14:3A
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:47:2d:82:69:99:96:54:69:01:67:2c:a8:4d:5a:6f:e4:
b6:fd:80:78:a0:04:f2:71:c1:81:72:0c:db:ee:80:6d:00:db:
56:53:1c:3c:9c:b4:cf:e0:6d:1d:06:4b:60:ca:cf:48:4c:d8:
4f:97:7a:fb:a7:4a:7c:c5:89:90:24:4e:b2:27:8a:ab:56:ba:
fe:0a:ff:81:49:f7:4e:ad:a0:61:45:b5:89:a3:60:cd:a7:58:
fe:fd:84:4c:6d:e1:e4:a3:fb:1e:fc:92:e1:16:7c:57:c8:ba:
90:78:9e:cf:8a:fd:bb:45:05:c3:f7:f6:62:22:61:eb:dd:82:
eb:ad:b2:36:15:d6:62:3d:7a:c3:2c:4e:a7:90:4b:5d:4f:15:
83:4a:37:55:44:37:72:1e:f0:bd:b1:9f:87:b3:6d:72:82:7c:
a6:a4:25:64:8d:cf:55:8d:62:86:58:93:2e:12:eb:d5:72:b4:
f2:f7:7b:21:ba:3e:76:d9:c1:d7:4c:32:6f:a1:37:3a:9e:61:
44:5b:30:bc:19:0a:f9:14:54:97:37:31:62:02:e5:62:27:8e:
ba:7b:f9:e1:d1:8b:3c:4c:91:13:b2:03:16:54:a3:41:33:55:
fe:f4:23:35:6c:82:2a:57:dc:89:3b:c4:a2:3b:6e:9b:20:a3:
23:bc:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:01:50 2026 by rpki-client