Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
File: J1-trhEuaASZSOIwhiFbfxVbCcE.mft (raw, json)
Hash identifier: LrsBbnzTfKU7PJJZaJEsNmR+regOqqjyAWiia3og01Y=
Subject key identifier: 96:B4:5A:5F:19:DE:86:57:CF:10:E4:55:6F:F4:A1:76:87:13:F1:A4
Authority key identifier: 27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
Certificate issuer: /CN=275fadae112e68049948e23086215b7f155b09c1
Certificate serial: 01A1347EEF9D8CC54FD332193D406697FCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
Manifest number: 0119
Signing time: Tue 13 Oct 2026 09:01:36 +0000
Manifest this update: Tue 13 Oct 2026 09:01:36 +0000
Manifest next update: Wed 14 Oct 2026 09:01:36 +0000
Files and hashes: 1: 0shQJP_olUAaquYrEXYkfoOk2xE.roa (hash: 4+ThIr9odjX0ODg2LR7+zUmLjBlN+O98mTnzdPuwUjY=)
2: J1-trhEuaASZSOIwhiFbfxVbCcE.crl (hash: ECrMR9sEIzZvSRBI93hv1Ap2gjO73ineiLe4HwWaZSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:ef:9d:8c:c5:4f:d3:32:19:3d:40:66:97:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275fadae112e68049948e23086215b7f155b09c1
Validity
Not Before: Oct 13 09:01:36 2026 GMT
Not After : Oct 14 09:01:36 2026 GMT
Subject: CN=96b45a5f19de8657cf10e4556ff4a1768713f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:93:d8:fa:6e:35:78:22:d7:4f:7f:d0:d6:
21:83:b8:3e:e5:3a:fa:0b:38:c6:09:91:25:c8:07:
34:b8:c2:96:04:83:74:ad:95:bd:30:cf:f5:62:c9:
06:c7:69:d4:f9:0b:4a:16:46:b1:53:72:80:6d:5b:
f5:47:77:60:2e:97:f4:90:52:91:22:11:0e:55:7b:
a2:95:4f:ef:76:1a:f9:40:a9:c0:e0:5e:4c:24:0d:
75:f9:b1:55:1a:f4:7d:48:b7:9c:88:ac:95:f9:a2:
6c:37:a8:07:5e:16:b1:85:97:55:d5:82:17:7f:e2:
7c:c3:64:7a:ab:a8:dd:72:0f:67:d3:4b:00:07:f7:
13:b7:15:16:7e:13:87:57:01:fa:6a:41:fc:9a:f4:
24:64:03:78:7c:41:16:c8:ec:e0:84:bd:70:3b:a4:
8f:2b:f3:15:8c:fc:05:68:14:e9:89:c8:80:db:68:
6b:96:77:4c:2e:19:6c:56:94:cc:e1:05:26:46:51:
0e:93:4e:bf:ee:d5:5c:fd:3d:9b:52:61:05:59:76:
ef:e1:9e:54:92:5f:10:5d:b2:e0:c1:63:4f:c2:1a:
42:da:16:d8:e7:3d:7a:71:10:1c:50:9b:b5:43:de:
9a:a0:d2:4b:c1:0f:c8:22:df:4c:33:14:53:de:65:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B4:5A:5F:19:DE:86:57:CF:10:E4:55:6F:F4:A1:76:87:13:F1:A4
X509v3 Authority Key Identifier:
keyid:27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:32:4a:ba:90:97:45:7b:4e:a8:cb:66:6e:4d:39:34:d7:
1f:2b:fe:3b:b2:61:2d:22:20:31:3e:27:4a:3e:1b:57:9a:ff:
9e:8e:b3:1d:cc:ba:b8:4d:b8:1a:8b:2a:c8:5d:a5:95:42:1c:
72:5c:95:e1:d6:a9:e8:1d:9b:5d:e4:64:57:87:4c:ea:97:fa:
c3:0b:f9:ac:8b:8c:76:01:ed:e2:66:ec:70:37:dc:06:c3:3e:
89:ab:de:6c:2d:de:a4:61:c0:48:42:1f:97:e3:96:7c:bf:75:
82:05:7f:87:0c:f0:81:43:77:7c:b0:ac:4c:c6:f6:10:96:7e:
27:a3:77:eb:ee:a8:26:9e:f1:73:a3:34:7c:54:83:4c:c0:10:
aa:a0:35:ef:fe:27:56:d5:81:02:a7:ce:e1:e1:51:37:19:a4:
7d:da:c5:a9:8f:f1:3f:5a:d1:fd:5b:e5:8e:cd:2d:a0:2c:3b:
5e:15:2c:46:06:b5:f8:22:43:c3:ed:c0:e4:2d:44:ba:ac:b3:
5b:6a:b8:4d:87:42:b8:d7:4e:48:f1:bc:5e:42:ad:76:39:54:
5b:f8:04:e0:28:a5:22:0e:59:3c:ac:56:6c:48:80:72:84:e5:
d6:f9:35:f9:4a:dd:5a:65:1a:7c:a1:ad:84:0d:3d:5b:f7:a8:
63:31:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:04:32 2026 by rpki-client