Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: lZ9hbeKLZ3spPK/XlUtgQGEWtqhKkr9bTQxoZMvpuEI=
Subject key identifier: 6A:A2:8B:60:AA:78:45:22:82:77:19:91:D4:92:97:96:DC:A3:C8:57
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 01A0E5BF3E5CF4C4A424EF4E2D55848E1F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 02:01:50 +0000
Manifest this update: Mon 28 Sep 2026 02:01:50 +0000
Manifest next update: Tue 29 Sep 2026 02:01:50 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: dPmKHWXl1UUUYum0311BbzWgPk8uB59g2zdTJ0YyslU=)
2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:bf:3e:5c:f4:c4:a4:24:ef:4e:2d:55:84:8e:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Sep 28 02:01:50 2026 GMT
Not After : Sep 29 02:01:50 2026 GMT
Subject: CN=6aa28b60aa78452282771991d4929796dca3c857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:b9:ef:f7:50:f6:37:c0:2a:dd:27:16:61:
f4:c5:b5:34:23:6d:7f:8b:cf:59:4e:3c:f3:dc:5c:
75:76:82:ed:4c:bd:d7:af:35:3a:1c:46:e5:5d:73:
f9:0b:41:4e:76:63:1a:da:bf:6e:7e:b2:65:53:2b:
a0:8a:13:f5:6c:15:a4:8e:b3:c2:38:f1:26:25:95:
4a:3b:df:5d:ff:69:89:31:28:b7:cf:12:8a:17:aa:
39:37:72:b8:89:b8:4d:1c:08:72:c4:bb:51:74:5b:
1a:5a:2d:b6:b0:0d:77:93:46:d4:15:1a:6b:cf:bd:
e4:bc:b7:eb:b3:97:9a:93:b9:9e:be:74:eb:22:7b:
0e:b3:05:1c:a7:6c:a5:06:aa:0e:ec:eb:d4:4f:6f:
83:5f:8c:7c:82:14:18:d4:e9:06:98:4e:9b:17:ad:
fd:e5:09:7b:4a:9d:5a:43:f0:7d:70:5a:a4:d7:72:
38:7e:c1:8f:eb:80:b7:75:93:e0:97:7d:e4:8a:da:
1a:56:a8:c0:90:41:ba:6a:27:35:5e:eb:48:29:db:
98:17:7a:e4:3b:3a:6b:52:7b:3c:34:33:fd:a2:cc:
14:36:95:fb:0a:b2:53:e6:80:50:52:59:c7:f3:bb:
9e:1a:88:d0:3a:85:c8:0c:3e:5d:7f:d7:73:9b:43:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:8B:60:AA:78:45:22:82:77:19:91:D4:92:97:96:DC:A3:C8:57
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:48:d4:d2:74:84:a1:06:f9:14:64:08:03:d6:69:a8:ff:
34:db:f4:99:a0:c3:d5:45:f1:b5:1f:24:2a:62:86:eb:ef:cf:
7a:b9:ab:e7:95:a8:bf:6c:17:60:91:21:7d:60:87:c5:da:6b:
cd:fa:df:e7:e5:27:42:f5:6c:dd:79:0b:52:29:73:06:29:0b:
f6:38:71:e8:0b:2a:76:3a:fc:1c:ea:17:b0:9d:c8:ce:f2:04:
7e:4b:02:97:1b:32:ef:07:e7:e6:18:25:b5:19:65:a8:0e:d7:
d6:c0:e6:6c:75:72:7a:96:dc:73:7f:e1:d4:2f:4c:33:b7:3a:
e3:b5:5b:ca:3e:0b:0c:58:1a:f3:41:b3:ff:cc:f1:a2:88:e2:
1d:5b:38:2b:ad:d9:e9:30:9c:ac:2a:72:7d:2f:de:81:c9:2d:
fb:ee:40:c9:a6:2e:a3:61:e2:c7:f8:c4:33:f1:ce:2c:f6:fd:
3e:71:ee:69:04:28:fc:49:d7:ea:9a:9a:e6:28:9c:06:88:6a:
7f:85:86:d2:8c:00:7d:f1:1b:53:b5:37:25:60:6a:ef:99:ea:
ef:85:0a:a1:cc:77:93:9c:62:30:d6:21:ff:aa:af:2b:30:29:
32:2f:26:47:ef:a1:50:5d:73:41:40:11:af:ea:9e:e9:5d:60:
db:66:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:23:52 2026 by rpki-client