Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: xyiX9b9iO1GdbfMlu1fXftsDvPMINuVSa20BFslFsrI=
Subject key identifier: 22:0B:3D:45:ED:9C:FB:B3:2A:E4:B0:91:34:4E:08:A3:1F:7F:DF:DC
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A0C7EA566C4ED8933BA4DB5F68D536FE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1AB3
Signing time: Tue 22 Sep 2026 07:00:18 +0000
Manifest this update: Tue 22 Sep 2026 07:00:18 +0000
Manifest next update: Wed 23 Sep 2026 07:00:18 +0000
Files and hashes: 1: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
2: LL3At7JbewVHNRXMTWxBEzOztjg.roa (hash: +WpNgZ2w7aJQTwGBk3CQne457+iBvPsYhfCTsL1+tUY=)
3: anTJWEQp0i6KTaSXHOsTHQh5WnE.roa (hash: ZtVU1H4tfyZrn5QvM+PL/R2U7WZ74D460z4PylgnXrM=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: waBA9fQF5Ek+KY//xzpQFIE+r7LbmcPwoUGXp2ozqDU=)
5: lkChSpn2Pj9BZbhbqhu03FMhDys.roa (hash: yYjtG9ThGBjd6+NRNSCZP/C1Ipp2hIAVQCQKfhenN+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:56:6c:4e:d8:93:3b:a4:db:5f:68:d5:36:fe:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Sep 22 07:00:18 2026 GMT
Not After : Sep 23 07:00:18 2026 GMT
Subject: CN=220b3d45ed9cfbb32ae4b091344e08a31f7fdfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:b8:d3:56:b8:22:8e:10:8c:28:27:67:b4:
a0:a3:de:ab:17:1e:06:10:49:ba:76:99:5f:89:96:
2a:b5:a2:e5:03:a9:81:80:d5:78:50:77:37:f4:45:
fa:db:94:f6:cc:c1:09:78:ed:12:d9:24:14:7e:aa:
75:ec:79:4b:6c:ed:9a:5d:15:3e:05:64:aa:b9:a5:
ab:e9:1e:92:dd:db:85:0c:f8:6b:28:8a:11:8d:20:
59:7f:6e:4c:b0:29:36:46:11:b8:6f:c8:d6:97:81:
de:21:61:2a:63:fe:8d:2c:bb:c2:fd:f3:8a:00:9a:
a6:1a:ff:0c:da:5a:45:13:19:31:5e:ab:c3:30:6d:
f2:e3:8c:e7:3f:cb:c2:a9:f9:eb:14:72:40:82:4c:
ce:c3:a2:d5:65:29:27:41:7e:31:c4:14:3d:4c:fe:
aa:b6:27:95:c1:0c:88:51:f1:78:ce:69:0d:5b:df:
95:eb:22:02:74:88:11:69:4a:16:3f:f1:73:74:14:
a6:43:9e:58:1d:2b:05:36:83:65:7b:f3:d2:77:bc:
21:0f:d2:54:9d:dd:05:be:bf:4b:94:12:f0:2d:1d:
77:43:50:6a:b5:f7:c6:94:bd:66:29:97:52:8a:8f:
ac:7e:4e:da:a9:ab:f0:2f:e2:0f:35:dd:7c:93:99:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:3D:45:ED:9C:FB:B3:2A:E4:B0:91:34:4E:08:A3:1F:7F:DF:DC
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:e0:ed:93:36:6e:03:95:c7:35:e0:3e:1e:3b:aa:30:c5:
e4:67:ca:43:79:fa:a8:ae:22:c6:ea:2e:86:1a:3a:71:dd:39:
95:fe:31:7a:e8:ec:d3:e3:15:dd:6e:25:24:eb:e7:15:65:f7:
72:82:60:b6:82:0c:17:df:78:e4:b6:8f:05:20:84:35:25:3d:
e9:85:e5:82:50:fb:bc:61:05:ca:76:06:ed:54:ba:a6:45:8f:
84:d2:ed:98:37:c0:7f:1a:73:1e:07:13:87:b3:ac:df:cf:79:
53:84:b1:26:59:83:e1:38:3a:14:3a:d4:46:b4:22:10:f7:8a:
11:1e:44:83:05:7e:8d:d3:10:5e:a1:f3:d7:d3:34:ef:cf:36:
4d:14:eb:ae:75:17:72:11:54:f1:fb:1e:61:12:6c:a9:84:fa:
20:b7:9e:85:a8:46:44:2e:f0:13:f5:c9:3e:70:e9:59:e1:da:
d6:12:11:6a:84:93:24:97:88:b8:0f:40:ba:b9:cd:9c:59:c6:
f4:4a:12:58:c3:28:b4:cd:14:32:3d:41:56:a3:61:56:51:9e:
1b:c6:88:10:a4:67:2d:87:15:8b:7b:47:67:85:af:7a:2d:84:
fc:ba:54:13:53:69:88:6b:fe:06:62:9c:aa:52:3f:06:36:09:
11:41:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:00:23 2026 by rpki-client