Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: b1N1TqPrRzDeKe8FR5at6g9vZdBlDLDuwcb+BE8NhXg=
Subject key identifier: 6A:26:A3:FB:30:85:08:0C:7E:34:05:1A:17:EA:54:68:63:62:45:0A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 01A0C6D84845081EF0383216B7957BF8C6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 02:00:58 +0000
Manifest this update: Tue 22 Sep 2026 02:00:58 +0000
Manifest next update: Wed 23 Sep 2026 02:00:58 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: WQihRrazUwO9bSJtKPDPF91HZqmAbrJ9zn4puxrIoss=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:48:45:08:1e:f0:38:32:16:b7:95:7b:f8:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Sep 22 02:00:58 2026 GMT
Not After : Sep 23 02:00:58 2026 GMT
Subject: CN=6a26a3fb3085080c7e34051a17ea54686362450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:93:2c:ad:06:3c:80:49:92:71:bf:cb:22:
9d:90:d8:cb:ef:81:46:38:9d:1f:29:80:3f:26:83:
55:da:59:97:93:d8:74:14:b7:e2:b9:77:9c:aa:81:
1d:01:a3:4b:64:b8:f9:b7:a2:46:d9:f0:63:80:9e:
88:79:4b:de:6b:bc:b6:13:14:80:3d:c4:9d:2b:6d:
c4:c7:7e:ad:eb:07:0a:7c:1c:87:44:bf:ba:63:bf:
2a:d8:31:04:97:34:da:83:69:90:c6:07:a7:50:2d:
a8:05:48:c3:d1:f5:c9:29:6c:ed:3c:44:14:b6:77:
bb:5d:0f:de:05:23:b4:17:4e:dc:9d:ce:20:3f:7a:
68:d2:49:35:44:79:f7:56:84:64:ad:d5:2e:3e:30:
14:f7:ad:ae:ac:52:2c:87:5c:08:05:d2:ac:ba:f5:
45:5a:e1:3d:bd:7e:0f:83:34:56:80:ab:d9:83:5c:
f2:98:c0:de:17:7b:54:0b:55:99:4a:d0:03:db:27:
02:40:2d:d1:42:46:9e:f2:f6:b0:93:a3:54:c4:7f:
fe:9f:f4:41:46:ed:c1:83:f0:b2:09:0d:82:fb:85:
ea:3f:48:e0:bb:05:74:f1:0e:1e:df:2a:a6:35:1e:
23:05:f5:00:14:f4:67:a9:12:cc:2b:50:d3:76:42:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:A3:FB:30:85:08:0C:7E:34:05:1A:17:EA:54:68:63:62:45:0A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:46:0a:75:c2:60:1d:b9:bb:f7:c6:6a:66:b4:fd:35:5a:80:
f3:ca:92:c4:29:4a:9f:52:1c:50:c5:70:a8:30:f3:3a:66:19:
5b:46:e1:77:fc:fc:78:18:ce:48:79:f2:58:14:6d:4f:4e:9b:
15:bf:0c:83:5f:cd:92:a3:6d:9d:be:f3:c0:39:00:20:59:97:
13:c1:63:bb:ce:7e:52:f9:99:04:b4:b6:21:12:dc:90:1d:cb:
68:9f:71:03:55:36:2f:05:f0:f7:9e:9d:32:d4:a5:ac:d4:82:
08:c7:34:e0:72:33:b4:08:79:55:54:cb:98:72:24:d3:e2:47:
b6:09:ac:ba:ba:8d:cb:43:57:fd:bb:03:33:5e:be:eb:d4:83:
79:70:69:02:10:a1:53:bc:fc:c5:d9:34:57:56:b7:4e:6c:a8:
23:73:4d:e4:f1:69:95:ba:d0:7f:35:3a:dc:48:cc:4f:1b:c6:
e8:ea:ae:cd:15:1e:d6:2a:0d:c3:93:f6:f3:3b:31:79:b6:78:
8a:d7:69:b8:ff:c5:7b:26:19:59:95:2f:72:d0:5d:9d:52:7c:
7d:47:65:88:d6:13:bf:37:83:e5:7f:95:69:d2:f2:bd:33:6b:
91:ef:76:d7:c4:cf:e4:a0:13:b2:54:89:b2:b1:d3:a8:21:6e:
a8:c6:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:29:37 2026 by rpki-client