Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: cK7UWkNVHMNQ6HoGwcZZLzL8MTfrsY+k7zrkHetQNeI=
Subject key identifier: B6:40:22:09:95:D9:C6:46:36:3A:E9:B4:51:FB:2B:17:21:1C:00:F9
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01A0CE244D2903524212DFD70981D742CB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 12:01:20 +0000
Manifest this update: Wed 23 Sep 2026 12:01:20 +0000
Manifest next update: Thu 24 Sep 2026 12:01:20 +0000
Files and hashes: 1: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: EQYJpQP6PenyIAYLK4+b8SiEx5l8sofDORkeBFBHoq0=)
2: cORc3qu37fcnfHhNQ9vgijmtC08.roa (hash: oI9BBm/OuVRQh4y8Jupoc4Ov/7EAnptE5BO887roNik=)
3: qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa (hash: 91xfdGqmAApu2khp5vZdzslMXh1yO1zr4vIkqEJnHgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:4d:29:03:52:42:12:df:d7:09:81:d7:42:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Sep 23 12:01:20 2026 GMT
Not After : Sep 24 12:01:20 2026 GMT
Subject: CN=b640220995d9c646363ae9b451fb2b17211c00f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:f2:0c:b9:49:b3:d4:95:1c:56:d7:e8:7b:
9a:f9:9d:26:3b:5f:32:16:e7:08:7d:77:50:5d:ef:
86:1a:05:43:8b:04:60:28:c7:f6:bc:08:94:47:63:
21:47:78:7a:77:ce:3d:4d:fa:50:51:dd:b9:e2:1e:
43:8c:37:57:14:3f:27:ba:3a:22:ef:fa:fe:54:5b:
e1:05:4a:dc:a8:db:db:0f:db:30:98:bf:f6:d8:fb:
95:1a:22:45:9f:e6:60:a2:b6:ef:9c:be:82:5f:86:
3a:61:a9:63:3f:85:d7:34:63:65:70:14:c4:63:91:
a0:83:49:1a:6c:6b:e6:2f:7d:7f:46:86:1a:15:f7:
68:d7:a5:08:76:97:7e:fc:09:22:4f:04:48:a2:44:
70:aa:b4:ad:00:29:50:1b:80:49:65:86:45:d3:c3:
b7:93:5e:1e:f9:10:cc:80:20:2e:d6:19:f9:a7:0f:
2d:c8:21:40:a1:46:6b:f7:f5:4d:e6:16:fc:b5:e6:
01:42:4f:20:c1:86:12:c5:b2:e0:1e:c2:47:34:dd:
0c:71:2c:ce:df:8b:12:9d:68:29:af:95:b5:86:94:
78:aa:51:6a:e5:0e:73:43:0f:df:14:81:06:d4:00:
53:f4:87:49:5b:1c:a0:50:33:cb:fd:75:a4:ad:06:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:22:09:95:D9:C6:46:36:3A:E9:B4:51:FB:2B:17:21:1C:00:F9
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6e:b7:a7:48:a4:c6:50:45:8f:77:06:c9:f3:32:4f:43:dd:
de:6a:cc:cc:2a:95:ef:d2:9d:8b:d9:dd:f0:e4:13:28:b8:15:
4f:9d:67:fd:86:29:bc:84:18:e7:b2:64:b5:c5:af:54:3e:71:
ee:8c:34:f9:98:d9:8d:ef:4d:59:f2:be:1f:cd:79:51:94:f7:
09:ed:76:34:4b:78:ca:2c:b0:a2:80:f5:8b:b4:d4:85:fb:4e:
89:d7:98:e5:26:57:13:d0:66:69:ff:45:e0:16:26:62:ab:c8:
ee:17:35:e9:dc:53:51:60:d8:82:98:ea:00:57:22:62:9b:e7:
33:3e:3a:06:42:52:b7:53:e8:cb:52:5d:66:7b:e3:57:8a:1d:
2a:57:7c:1a:3a:6d:cd:fc:92:43:24:ec:27:3c:35:81:53:93:
a8:98:46:0c:26:46:fd:46:da:47:15:4f:61:5b:51:51:34:74:
6e:a0:82:7f:3b:8b:cb:e3:f5:9d:aa:24:d9:5f:36:11:87:41:
ce:5a:21:e6:48:80:4f:48:e5:16:47:21:28:0c:4d:a2:2d:a0:
5c:16:5c:5e:32:0f:ee:58:63:49:29:09:2d:9b:81:0a:65:24:
61:1b:4b:d4:18:12:ca:fc:03:ca:d4:e3:46:67:a9:2e:b7:f4:
ea:b0:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:05:51 2026 by rpki-client