Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File: jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier: j93O/m+CC8LCXiwnHFMDJ7lUarr+xlhouqe8menyuTs=
Subject key identifier: 3A:FC:77:5B:19:62:50:5B:62:CD:1A:C1:8C:8C:23:E8:93:15:51:68
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 01A12CC5B7399DE661268AB8861628C30513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number: 037C
Signing time: Sun 11 Oct 2026 21:01:57 +0000
Manifest this update: Sun 11 Oct 2026 21:01:57 +0000
Manifest next update: Mon 12 Oct 2026 21:01:57 +0000
Files and hashes: 1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: WDtAhW3RVKXZBJlQZrIS7gU7CDiGXRNtBpMBK+MgZuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:b7:39:9d:e6:61:26:8a:b8:86:16:28:c3:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Oct 11 21:01:57 2026 GMT
Not After : Oct 12 21:01:57 2026 GMT
Subject: CN=3afc775b1962505b62cd1ac18c8c23e893155168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:40:7b:06:2b:42:5f:9e:01:cb:1d:04:12:
b6:ed:25:ad:3d:48:29:0b:d0:5f:f2:0d:35:65:32:
2f:65:c4:df:a4:39:8b:d4:fd:24:39:a5:e4:df:25:
6a:3f:13:e1:3d:11:f0:98:43:99:f2:ca:2a:d7:9f:
b7:0c:69:f6:5a:c8:f2:b0:0d:bb:04:8a:ff:77:2f:
9e:60:83:97:7e:8a:63:af:47:2c:ca:95:90:31:6a:
88:c3:46:e5:06:4a:b6:79:37:c6:fa:7a:b8:e3:88:
62:27:34:4e:40:c9:5d:24:d9:86:86:9f:7f:9f:14:
1a:2b:d7:05:7a:e8:2c:19:1a:ae:0e:74:11:27:11:
a3:77:cd:55:27:8f:2d:6d:9d:ba:9a:f4:d5:e4:6f:
81:a6:51:d5:24:84:c0:02:25:64:7e:d0:6d:ec:90:
4a:f1:55:72:23:05:fb:7b:06:09:5c:37:3d:76:ca:
09:e4:9a:54:7d:ed:f8:be:08:d6:42:ae:76:57:9c:
cb:80:3e:f9:11:91:7a:75:53:23:e8:3a:4e:be:a2:
3d:98:1e:7f:ef:03:fb:3f:26:9b:63:61:df:ed:b9:
99:c4:08:73:7d:fd:ff:78:da:d3:6d:25:1a:06:3a:
8b:c7:94:0d:53:b8:c6:03:8f:60:f0:24:12:e7:0b:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:77:5B:19:62:50:5B:62:CD:1A:C1:8C:8C:23:E8:93:15:51:68
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d5:ee:ec:79:d6:a8:02:3f:61:9f:e5:53:5b:87:50:34:80:
d2:96:69:16:1a:d8:f2:8b:4c:bd:0b:44:cb:0c:24:8e:2a:76:
4a:23:27:7f:4a:a5:27:0d:a7:f6:20:88:60:fe:23:11:89:49:
8a:b4:36:50:fa:1c:ca:d5:42:bd:bb:c3:d6:66:9e:a5:52:c0:
03:5c:33:9a:11:89:9d:8c:d2:45:52:60:c2:7e:ca:83:33:4a:
ce:23:9f:2d:c0:83:2e:ff:f0:02:8a:f7:82:94:97:14:cf:74:
2f:54:ae:5b:4b:16:7e:5b:40:7c:a1:91:35:c4:ea:05:9c:7c:
7d:ac:82:c2:df:36:71:44:66:16:8f:de:c1:f9:82:22:e7:e1:
04:a1:eb:90:69:e1:61:cb:77:50:7e:b6:c6:7f:0a:5b:a5:e7:
17:dd:49:98:17:ac:c3:3a:2a:76:40:de:24:f2:aa:76:c3:40:
66:2e:28:0b:89:63:d0:d2:a3:b6:dd:43:a6:ff:f5:07:29:57:
b6:e0:c9:41:f0:00:89:71:8a:1b:23:ee:22:9e:4b:23:1c:a3:
fb:11:ed:7d:b8:2a:06:96:4b:89:18:fd:d6:1d:ba:dd:08:38:
c9:b1:86:35:d0:b2:83:22:a3:12:88:2c:41:02:05:3e:24:a4:
c4:fe:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:56:03 2026 by rpki-client