
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: aHbLrjR5EEPNRR3VZwDf1nBKX8cjnS7Riyuv4oex2Lc=
Subject key identifier: 8B:BA:06:7F:A0:D5:43:E8:AE:ED:91:23:03:24:C2:71:19:86:10:09
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 01A0DB3AEFCF647427F8D85718E2F9180CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 01:01:07 +0000
Manifest this update: Sat 26 Sep 2026 01:01:07 +0000
Manifest next update: Sun 27 Sep 2026 01:01:07 +0000
Files and hashes: 1: 4X9bzbTjxxEC-csNdknM31iR6Vk.roa (hash: g5Y0JUJxW/m2Y8F30up7Txp8xJPm4qz4gVK4xJRO0QQ=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: 3qOFJNq5WJA1Xcyxk+qFml3ulAZ3+LD14Nk8CzsVdnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:ef:cf:64:74:27:f8:d8:57:18:e2:f9:18:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Sep 26 01:01:07 2026 GMT
Not After : Sep 27 01:01:07 2026 GMT
Subject: CN=8bba067fa0d543e8aeed91230324c27119861009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:d0:1c:98:9e:57:b7:ce:71:c6:ce:bb:6e:
cd:cd:1c:04:5b:91:da:b9:b3:ea:01:36:fd:d2:e7:
ae:5c:4f:8b:56:6b:a7:77:a1:e7:a6:86:8d:d7:09:
41:11:a5:7d:59:4a:8f:82:e7:fc:12:b3:c6:74:79:
14:b1:3a:be:9e:c9:d8:56:00:a4:5a:d8:ce:63:46:
31:9f:e8:af:ad:8a:8f:73:e4:f5:75:5c:40:ed:f4:
43:27:b7:c0:a9:5c:c4:d1:8b:e8:ff:86:ff:5b:bd:
d1:db:6f:bd:9a:bc:c2:03:73:40:1e:45:c1:1d:e4:
cd:15:fc:03:43:23:f2:03:75:0c:af:59:4e:71:36:
13:f9:44:e0:79:74:1b:43:2c:27:b0:21:14:bb:9a:
0e:ce:d4:eb:60:45:20:99:46:20:19:ae:b3:b5:df:
89:32:3f:47:10:ec:43:92:0b:55:34:78:6b:46:85:
91:3e:28:0e:a5:40:89:f7:e0:13:0a:45:b1:d3:01:
01:cb:a2:05:3f:ef:ea:1d:33:c7:dc:bf:b0:74:05:
9b:76:87:67:94:af:f7:31:80:25:a5:4b:68:00:26:
17:0a:5c:38:fd:74:58:65:0c:df:3c:82:5e:7e:62:
5d:82:60:80:2e:4f:3c:d9:2a:a1:31:54:77:57:df:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:06:7F:A0:D5:43:E8:AE:ED:91:23:03:24:C2:71:19:86:10:09
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e7:b0:e6:7b:55:a2:0f:53:ff:11:64:45:f5:b5:ea:21:57:
92:c7:23:2f:48:1d:e2:fd:72:74:2a:07:7c:35:c8:b3:8b:42:
8c:2b:3c:0e:1c:f3:0f:7d:10:87:83:69:70:f6:c0:26:93:7b:
13:63:f2:49:cf:66:bb:15:10:ac:61:24:2b:8a:91:87:46:3b:
a8:8a:2e:46:fc:99:47:35:59:99:81:c2:cf:67:2d:e7:b3:22:
15:a6:7b:f2:3a:5b:87:b4:15:eb:85:40:63:f6:d0:16:1c:1c:
47:97:69:04:05:5a:78:a9:a4:b0:74:a1:3d:82:89:1b:af:56:
83:6b:79:d7:36:82:8c:19:32:98:97:3e:4a:1a:ee:72:3f:4e:
ee:89:a1:59:21:73:80:b5:cd:7e:69:8f:bd:76:98:54:d4:8e:
3f:73:4a:0e:37:6a:40:87:0d:0a:74:f1:2e:af:34:04:0f:ab:
c6:47:7d:ef:24:24:fa:9f:6e:f7:4e:68:0c:1c:ea:5f:3f:4f:
a9:65:6a:66:ee:ff:18:72:42:90:bd:32:32:3b:69:d7:fc:9c:
fd:01:11:ee:a5:5f:eb:93:ec:92:cb:27:08:a0:4d:84:8e:6a:
3f:82:5a:9a:2c:be:de:2a:0b:ac:03:62:a0:7c:1f:0c:31:70:
5a:52:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:11:27 2026 by rpki-client