Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: GGvPHDg6YO0ADYK9Or0/5dM3zrWyKnAz3NDl0D4wuH8=
Subject key identifier: 0B:0E:1D:9C:E2:77:12:29:E6:BB:C5:52:8F:2D:D2:7C:4E:68:A4:3C
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 01A0C52090BB00817024EE8ECDDA7499EE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 18:00:40 +0000
Manifest this update: Mon 21 Sep 2026 18:00:40 +0000
Manifest next update: Tue 22 Sep 2026 18:00:40 +0000
Files and hashes: 1: GkzZaU9MgVD-nMdbajbpL-Lxeic.asa (hash: a29ZY6jDI+dNv380NXhhKvjL2Q9sgN1KzPSWh3x0GTw=)
2: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
3: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: kshHsFB2gfCqcVWMxwu0g8fUlE9o2bRd6RcBNulI1og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:90:bb:00:81:70:24:ee:8e:cd:da:74:99:ee:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Sep 21 18:00:40 2026 GMT
Not After : Sep 22 18:00:40 2026 GMT
Subject: CN=0b0e1d9ce2771229e6bbc5528f2dd27c4e68a43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:cc:35:3c:ad:e7:b1:7c:42:de:d0:fb:a8:
73:d0:d9:1d:1a:01:99:4c:68:f3:3b:8e:dc:5a:b1:
f6:8a:36:b0:0e:d7:98:7c:5c:c9:38:d0:dc:06:8c:
f1:65:a3:dd:20:e5:fa:94:fb:43:af:ea:cb:a2:10:
d1:84:c3:fb:e7:d9:af:47:de:0f:d2:24:90:af:d5:
43:78:a2:ce:0c:cc:14:f4:83:80:71:d8:72:b8:95:
c2:f0:e2:52:d0:46:b0:d1:37:5c:9f:61:ac:b8:a5:
4b:08:89:8d:c9:7a:fc:7d:98:5d:fe:aa:c2:e4:63:
b1:52:4b:fb:32:d8:25:63:a8:a2:84:49:0e:2a:93:
f8:bf:98:39:48:ae:e6:f9:d2:c4:ec:36:a1:bb:42:
b7:5a:50:df:45:be:ff:db:72:31:b1:3e:da:08:b9:
3b:2a:5a:49:0e:72:a3:a9:92:d7:39:02:20:ed:48:
91:0c:ea:8e:e3:d9:e8:21:d2:80:1c:73:3c:13:97:
6f:da:3e:0e:be:61:a7:87:23:56:63:6f:27:f5:40:
95:b8:7b:a7:a8:a8:d6:40:d7:8d:36:94:8a:ad:ce:
0d:2f:e4:88:f5:a9:d8:db:a5:74:77:01:b9:27:b7:
b3:ee:1d:26:86:a2:d6:3d:a8:98:8b:e8:4d:db:81:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0E:1D:9C:E2:77:12:29:E6:BB:C5:52:8F:2D:D2:7C:4E:68:A4:3C
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c6:7c:64:ac:13:c9:9f:de:eb:b4:d7:29:e1:f2:e6:36:8d:
38:4f:46:21:5f:9f:09:6e:a5:e1:0d:cd:80:50:b6:0a:5b:91:
d5:8c:45:a7:c9:3a:c7:82:9f:d9:e8:19:9e:87:69:1a:64:93:
8b:b0:d0:de:f2:7a:87:f0:d0:31:cb:43:65:cb:39:66:c7:26:
0d:14:d7:f3:34:be:36:fb:d5:ff:44:ce:fe:fa:18:c6:fa:48:
1f:6c:e8:fc:c9:16:d4:8c:29:8d:de:38:b1:49:dd:a2:bd:af:
1a:62:0f:f4:05:bd:52:31:35:df:d2:7d:75:7b:b9:4b:02:f9:
06:7e:08:cb:66:e7:57:64:d8:9c:a7:de:01:4f:c3:6f:7e:fd:
c5:66:65:c2:53:85:47:d8:04:58:9d:75:97:7e:f6:ba:76:8b:
fe:17:7b:9f:c9:87:9e:33:d1:4a:34:e2:5c:1a:a1:0f:5d:62:
cd:0d:39:c1:3f:ed:cf:fb:14:82:37:ed:f9:23:e2:c6:a4:b6:
0f:64:e6:ed:56:c4:0f:c6:6a:88:93:d3:f7:3e:5c:a6:da:6f:
c1:0c:89:df:19:6e:55:60:de:46:fd:9f:aa:28:06:58:f8:bb:
64:44:fd:7e:05:19:60:7a:bc:22:35:8e:11:77:f2:6d:f7:ec:
ec:22:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:06:50 2026 by rpki-client