Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: mkg4ik2/Q62siHp0sO+Rc/y07hwXStX3PUPfczllpUM=
Subject key identifier: 21:0F:F5:3B:4D:04:F4:57:73:68:8A:85:6C:B6:2A:D2:5F:14:DF:42
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01A12579BD3039CB2F0B31716239660C3080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1AA1
Signing time: Sat 10 Oct 2026 11:01:37 +0000
Manifest this update: Sat 10 Oct 2026 11:01:37 +0000
Manifest next update: Sun 11 Oct 2026 11:01:37 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: UfWR0c1Zdx/cct/zObyidzKrJef9iMVFhkLMhcvnoWo=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:bd:30:39:cb:2f:0b:31:71:62:39:66:0c:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Oct 10 11:01:37 2026 GMT
Not After : Oct 11 11:01:37 2026 GMT
Subject: CN=210ff53b4d04f45773688a856cb62ad25f14df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:20:dd:08:fe:1c:24:a1:2c:53:3e:3e:77:
98:8b:d7:60:0c:f8:fc:85:b2:18:d8:15:71:cb:de:
02:71:96:15:e0:a8:9c:e6:56:59:bf:8c:d1:1d:42:
51:bb:bb:31:13:d2:9e:46:14:04:c0:74:b3:f6:05:
c4:9f:12:b6:d6:46:4d:37:40:60:74:6b:96:54:73:
d3:7f:89:d5:58:6a:07:dd:03:e5:4f:2f:32:12:d5:
b5:cc:6c:67:fe:1d:66:ed:dc:12:ef:fe:81:c8:e5:
f1:50:96:c9:b0:6e:a0:de:30:f2:3b:b5:62:e6:2f:
12:7e:0f:a8:87:85:33:c4:90:1f:f7:f8:bf:5b:71:
37:03:03:47:0f:31:bc:82:22:bd:30:75:f2:9f:3f:
2e:2b:15:d9:15:7d:74:b4:c1:57:c1:9e:bd:27:54:
f7:58:fc:af:cd:33:dd:87:be:a0:80:b4:c9:06:94:
2c:82:5e:ad:51:49:13:41:48:0e:bb:5f:89:19:61:
a3:e3:5a:0f:60:66:7a:9a:4c:aa:ba:79:5e:cd:fc:
24:a2:1d:6c:79:ae:8e:ce:29:49:95:d0:39:22:6b:
35:3f:e1:e9:14:eb:71:4e:91:67:34:18:87:5f:c4:
60:11:75:27:69:8e:bf:b8:45:f4:ff:ae:4f:93:df:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:F5:3B:4D:04:F4:57:73:68:8A:85:6C:B6:2A:D2:5F:14:DF:42
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4c:fc:93:e3:fe:c1:c6:85:fc:5d:e6:89:0d:b9:c4:35:88:
d2:b5:76:1e:10:23:18:9d:42:45:79:8a:a9:2b:ce:d2:3c:8d:
97:09:8b:c4:8c:fc:06:b7:b8:6e:a6:ae:c2:1b:94:17:5e:a2:
a5:5d:48:a8:f7:d0:e0:c7:be:b6:bf:79:a0:cd:43:48:1a:be:
cc:c0:cb:6c:d3:45:d0:a0:25:4f:7b:f3:0a:5d:a0:0f:df:d4:
79:a0:2f:67:a4:90:b0:6e:f8:37:ff:9e:a5:35:78:00:35:48:
a3:d4:46:f0:37:88:1e:9c:a1:f2:0c:43:44:55:90:2f:3d:c1:
20:f0:7c:c5:fc:47:bc:d8:1d:83:21:79:ba:75:20:04:f1:66:
ff:9a:6b:8c:80:9c:a3:c8:de:5e:7e:54:e4:f0:9c:ac:8a:cb:
0b:89:ad:3d:94:82:4c:0c:9e:6c:75:da:14:b3:90:fb:ca:5f:
3b:38:eb:3a:95:9c:fb:97:8c:37:a1:67:73:a6:09:b7:c7:2b:
f4:31:09:24:b3:fe:48:7e:52:a2:2e:87:46:37:67:70:24:55:
2d:87:7f:42:ae:72:ab:16:18:b5:5c:c3:81:54:f6:a5:72:2c:
bf:83:19:a7:3f:fa:59:47:cb:f7:97:60:0e:63:a1:87:62:c7:
d6:05:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:24 2026 by rpki-client