Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: V7mktKJX23bkuw2DgiBUDqnZeN0B+baWMvsRiJj0Kvk=
Subject key identifier: BA:53:22:FA:34:2F:A4:37:D2:2D:E1:E6:3B:9C:0B:9A:54:89:6E:D2
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 01A0D0B6966BC3D338F95C1AF97189891D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 00:00:21 +0000
Manifest this update: Thu 24 Sep 2026 00:00:21 +0000
Manifest next update: Fri 25 Sep 2026 00:00:21 +0000
Files and hashes: 1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: aztvlWvU1F8aVibvWhVk9lvtDSQfK/fvGEwphCxNbb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:96:6b:c3:d3:38:f9:5c:1a:f9:71:89:89:1d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Sep 24 00:00:21 2026 GMT
Not After : Sep 25 00:00:21 2026 GMT
Subject: CN=ba5322fa342fa437d22de1e63b9c0b9a54896ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:cc:ac:63:e2:59:b5:99:06:3f:95:16:9d:
67:d6:06:10:50:7f:e2:5d:b4:59:2c:3f:70:b2:eb:
2e:9b:5f:24:4d:14:7c:ba:f5:81:15:ea:fb:7b:56:
02:42:82:83:42:98:b1:0c:e0:b3:e5:f9:61:b1:5e:
c7:e2:b8:5f:62:43:8b:97:74:50:51:04:e6:42:31:
a8:31:18:d3:9d:d2:bd:e6:70:1d:34:c1:ef:c8:12:
82:b2:f4:03:44:5d:89:07:cc:8f:cf:29:26:6b:c1:
3f:f1:e6:6c:5b:bd:5c:01:07:83:7c:e1:5a:9d:ec:
f3:0b:61:d1:52:89:51:a9:5d:b2:e4:5e:ef:c9:87:
1c:50:05:fb:07:1a:c6:67:24:d0:e3:74:ba:9e:3a:
cf:33:b7:c2:27:5b:be:e7:b3:e6:61:0d:ac:66:59:
06:0c:18:f3:44:b8:a8:f7:6e:63:2e:c1:d3:2f:bc:
a6:00:0f:3c:d6:08:ee:7f:05:6c:29:c2:74:57:44:
b4:16:b0:1b:1e:c4:0b:36:c4:cc:e3:be:4a:af:c4:
d8:9b:a7:b6:7a:75:54:43:42:5d:c7:69:9a:8e:b6:
a4:4e:d4:58:a9:52:db:4c:41:c2:d5:27:68:33:1c:
d7:89:77:4d:2f:ba:94:e5:ff:cc:41:1b:90:07:f8:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:22:FA:34:2F:A4:37:D2:2D:E1:E6:3B:9C:0B:9A:54:89:6E:D2
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:51:af:a2:20:c0:46:85:9d:94:e0:4b:59:4b:40:5f:ab:
c5:b0:eb:04:17:7a:7a:82:21:cd:08:37:96:36:a8:19:d2:e1:
85:d7:11:f2:73:49:27:39:21:48:60:6e:f9:24:25:33:f5:58:
2a:83:3d:e0:d6:10:c2:b7:3b:b0:ca:07:76:a6:2e:19:68:eb:
ad:11:71:75:94:49:f2:0d:2c:69:24:0b:73:fc:1b:2b:91:71:
9c:74:8c:ac:70:4b:5d:86:9c:ae:4f:65:ba:59:cb:bf:ca:ce:
7a:ec:f5:12:1a:3a:98:6e:65:62:d5:cd:75:2a:48:80:ae:9f:
3f:ec:32:3d:d5:c4:60:a0:a6:d0:50:b9:25:d9:b8:4d:d3:cc:
f6:a6:02:93:40:ce:46:60:a5:28:59:90:f4:a7:86:0e:7c:3f:
da:ce:7f:5c:cd:ef:db:a2:44:55:d7:66:5d:9b:df:8e:57:69:
fe:42:5f:b9:8b:52:e1:f4:59:47:7d:fe:b3:bd:29:77:fd:d1:
75:37:bc:a7:2f:4e:cf:f1:f4:9d:17:23:99:3e:91:97:c8:bf:
09:c2:51:84:b8:74:0f:ad:5a:06:bd:8e:bd:60:b1:d5:22:e5:
e1:55:3b:a1:93:51:fe:fb:4d:0f:0c:e5:3f:07:c2:d7:57:7c:
51:7e:eb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:53:04 2026 by rpki-client