
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json)
Hash identifier: s9E60G+QA71H1KQ9TtMvDmaJn5KzO1TK/ua+lyrlcvM=
Subject key identifier: D4:85:F2:23:C6:E8:9C:CC:FE:A4:6C:E8:03:A9:04:EC:3A:A9:65:A8
Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Certificate serial: 01A0C58E2FD0749CF010E8B79B652E4E4594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
Manifest number: 0349
Signing time: Mon 21 Sep 2026 20:00:24 +0000
Manifest this update: Mon 21 Sep 2026 20:00:24 +0000
Manifest next update: Tue 22 Sep 2026 20:00:24 +0000
Files and hashes: 1: O7qGuza48mR4CR8KTHpYEjM5dqc.asa (hash: D4UI6xT6oTb+P8ng9BLAQlG3FXVjoaZnbTJdKJ9xbrE=)
2: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (hash: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w=)
3: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: 7OupjqN3+2U4I1cfwd6KzRvRiSUMcYPDB9z6AAbWw8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:2f:d0:74:9c:f0:10:e8:b7:9b:65:2e:4e:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Validity
Not Before: Sep 21 20:00:24 2026 GMT
Not After : Sep 22 20:00:24 2026 GMT
Subject: CN=d485f223c6e89cccfea46ce803a904ec3aa965a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:ea:10:f0:10:52:46:18:1a:3e:bc:cb:c6:
c6:5c:d6:44:ee:3c:07:50:b5:fb:8c:53:86:ba:0c:
14:f1:10:7b:ea:2d:6e:f8:a2:44:7d:e9:1d:80:0a:
77:aa:3f:d2:2d:fc:a1:58:ed:3d:2f:72:d5:ee:d2:
0c:fe:fc:c0:fa:6f:d3:de:91:38:b0:0f:ed:86:2d:
d7:b4:bf:61:2a:1f:5f:1e:3f:07:32:72:b6:ee:2b:
3d:9f:80:6b:70:ee:59:72:f0:ee:77:6c:ef:b2:3b:
f9:26:71:1b:92:ca:5d:78:37:3d:ab:15:4e:b8:6c:
a2:8d:dd:b9:67:50:06:6e:c8:05:9b:f1:fb:0a:10:
52:b0:4b:ac:d2:5e:a7:35:45:4e:a3:a7:c5:d4:73:
bc:27:0d:52:f0:f7:54:b0:7a:e7:62:c0:97:9a:0b:
85:b2:da:08:56:73:24:b6:c7:c4:f8:27:8b:1c:b8:
9d:72:f0:6c:e2:2c:66:0b:3d:3b:53:30:41:5c:1f:
b4:e2:39:cf:a9:4f:e5:63:e1:75:c5:35:74:9a:04:
a5:0b:da:c1:4b:47:e0:ab:68:45:e0:33:82:31:5a:
fd:b7:90:af:40:08:ce:4c:41:4a:d2:09:b1:36:8c:
92:0c:4a:e3:f0:34:6f:d4:10:f3:41:bd:6e:89:4f:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:F2:23:C6:E8:9C:CC:FE:A4:6C:E8:03:A9:04:EC:3A:A9:65:A8
X509v3 Authority Key Identifier:
keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2f:2a:8f:5b:bf:39:d4:48:15:2d:05:08:6a:ca:ea:5f:7a:
7f:7d:2e:93:87:6b:fc:77:0e:26:b2:8c:bf:30:8c:4d:87:57:
55:a2:bc:ab:47:d6:66:68:1a:dd:de:a7:a3:c4:a5:91:d7:41:
2f:7b:1e:de:bf:e5:37:d9:e7:49:5e:32:ac:42:54:a1:3b:4f:
ea:6b:8f:9c:30:e3:f2:64:5c:9a:7d:26:ee:55:5d:f2:31:3c:
65:db:c0:38:ce:56:ab:5a:95:a4:71:a4:b4:43:97:da:da:ce:
ed:cb:57:bf:e4:4e:2f:a3:cd:f8:76:3e:d0:57:b1:7d:55:de:
a5:c0:97:f0:63:c7:d6:7a:f2:e3:f2:e4:e4:2f:3b:c2:a6:59:
b6:65:67:7e:f8:96:7e:a8:e0:f4:c2:fa:ea:f6:10:68:fe:2f:
e0:dc:7c:dd:1b:0a:f1:e5:81:24:e7:19:f7:f2:83:9b:98:3e:
c9:cd:19:8b:79:ec:0c:30:6a:b4:8b:b3:41:39:be:85:e4:d2:
58:36:d3:e1:a5:a6:8c:71:d2:29:da:49:8b:8a:97:ad:26:97:
1d:d3:72:e2:3a:f2:44:f5:7d:29:1a:8b:d7:98:81:83:a1:b8:
00:92:2f:e0:cb:f9:8f:97:cf:ee:53:d7:cc:f6:59:9b:89:5e:
50:d7:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:31 2026 by rpki-client