Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: Q068ui0DMOb9roMBzTeTaMqSWou90ArTrm96F2OBJGY=
Subject key identifier: 5A:CF:46:DC:4E:F7:57:6A:8B:1F:41:4E:54:C4:66:9D:6D:AB:47:78
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 01A0BE79E8E699A621DC32F31D996DE2F125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 11:00:55 +0000
Manifest this update: Sun 20 Sep 2026 11:00:55 +0000
Manifest next update: Mon 21 Sep 2026 11:00:55 +0000
Files and hashes: 1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: LpN8xmcEUw4Z9zDi4IM5PcnxiBchwsYjC0P3uzk+zDI=)
4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:e8:e6:99:a6:21:dc:32:f3:1d:99:6d:e2:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Sep 20 11:00:55 2026 GMT
Not After : Sep 21 11:00:55 2026 GMT
Subject: CN=5acf46dc4ef7576a8b1f414e54c4669d6dab4778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3d:6d:7c:af:33:87:21:14:96:f3:da:b5:af:
1c:5c:d6:7e:a4:f3:26:cf:6c:f0:a3:5d:19:e9:d7:
2e:cc:9b:0c:82:85:5d:cf:eb:84:e2:8f:b4:6e:fb:
ed:29:ee:9e:1e:03:dd:a3:98:ed:29:d7:fe:da:e5:
3e:09:aa:39:49:08:e9:96:cd:d0:c9:ef:58:a9:4c:
cd:9f:65:b8:f2:f0:e4:fb:eb:c9:94:23:d8:54:96:
e3:d3:74:a3:f3:92:47:d5:aa:c4:85:82:a0:50:21:
69:3d:59:96:50:1d:f8:81:a9:55:e5:6c:63:59:2e:
03:f5:00:c4:48:6a:57:6e:d3:1d:cb:65:61:b0:eb:
66:f5:fb:f2:68:c2:92:82:d3:04:1f:69:5b:9c:cd:
51:be:7a:f0:7b:e1:34:ac:e1:7c:43:20:c7:c1:c9:
0c:51:3c:52:d0:e6:81:58:b1:63:40:c7:b4:4a:ae:
54:dc:ca:9a:07:0c:75:84:ec:7f:b5:8a:58:f8:24:
bd:91:5c:4f:ae:cd:2c:f3:a8:69:8c:db:04:53:a1:
09:02:e9:0d:6a:ee:24:81:3f:84:95:90:bb:ab:50:
18:27:98:c3:a0:9e:e2:d9:28:95:98:2f:e6:72:ad:
26:fe:14:24:b3:db:12:a8:50:74:d9:7f:f8:67:df:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CF:46:DC:4E:F7:57:6A:8B:1F:41:4E:54:C4:66:9D:6D:AB:47:78
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8c:58:02:cc:c2:83:e0:f0:e2:85:c8:4b:15:df:bf:bf:94:
ca:f6:dd:5b:46:21:18:79:69:85:6b:1f:22:0e:06:76:3e:f9:
2c:dc:c1:22:62:f2:85:9d:44:1a:cf:07:66:05:dc:20:ce:a1:
0a:40:25:da:0f:ce:62:a3:a4:9b:43:71:cf:4c:a6:c7:9d:1c:
61:ba:4f:3f:00:eb:15:86:3b:b9:a6:5d:f1:2e:67:8a:95:dc:
28:a2:e9:50:93:0d:96:14:54:df:40:f5:d6:d2:e2:25:ce:20:
28:d3:67:05:12:e7:25:04:df:8f:e3:22:45:ed:e6:11:19:89:
34:82:fc:d0:c7:ab:cd:d4:67:af:57:69:81:59:5e:23:2f:96:
ec:a8:1f:46:4b:96:c2:1d:bb:19:b8:58:19:62:28:77:01:6e:
25:33:24:5c:ba:21:96:74:3d:b0:bc:77:ac:36:4c:0e:08:00:
eb:a8:90:22:87:bc:cd:7b:fb:be:0e:36:3f:0c:70:78:3c:21:
5c:5a:28:56:65:fa:62:2e:aa:b4:42:5f:89:32:2a:35:5a:bc:
91:66:8f:9e:01:4f:e5:49:01:e8:b7:40:32:17:39:30:89:58:
f6:27:67:9e:90:d3:a4:11:87:d7:6c:ff:5a:d5:6e:13:a4:0a:
d1:40:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:42:11 2026 by rpki-client