Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: cSFJ3P4oE37/vRb3V7wvdxlrNt/VQrP7lodAFn+lotg=
Subject key identifier: 85:F7:39:F7:4F:FF:99:F7:70:9A:4E:E0:3D:58:9F:F8:55:A8:AA:F8
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 01A0C93404559E1C02015401BF9EE9A546DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0D31
Signing time: Tue 22 Sep 2026 13:00:24 +0000
Manifest this update: Tue 22 Sep 2026 13:00:24 +0000
Manifest next update: Wed 23 Sep 2026 13:00:24 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: KVbt1EL2DKEU1obwKWOWgMwgWk7G+oAP5RJ1ZWGAZsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:04:55:9e:1c:02:01:54:01:bf:9e:e9:a5:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Sep 22 13:00:24 2026 GMT
Not After : Sep 23 13:00:24 2026 GMT
Subject: CN=85f739f74fff99f7709a4ee03d589ff855a8aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:a3:8e:bc:5f:7d:a1:02:d8:7d:8e:67:c3:
6a:1f:4e:3d:9f:4d:c3:bf:60:3a:df:ac:8f:8d:86:
60:fa:d1:24:e0:83:c2:09:f9:f2:2a:77:99:9a:42:
c7:6b:ee:de:5a:e4:e2:d4:a5:27:e2:e3:b8:35:93:
66:1f:7e:56:be:12:7c:4c:9b:b1:ac:38:70:1e:93:
7c:a6:06:b0:d8:e5:d4:38:c4:5e:de:3f:94:1a:cb:
f2:d8:ca:59:14:e3:de:d0:95:13:83:57:12:6c:ba:
09:30:0d:7d:b5:95:ba:80:b2:62:92:21:46:ea:55:
a5:1e:89:c1:e8:a0:94:10:c0:22:f4:c3:e2:39:31:
9d:ef:1e:a3:33:63:ff:2e:c9:aa:09:5b:0c:01:f6:
42:ae:b2:d8:7e:c3:1b:fe:cb:95:7e:0e:c8:6f:ed:
62:98:bc:48:e7:a0:7e:9f:67:7b:ae:1f:46:c6:3c:
68:91:c2:c9:79:ac:53:50:77:51:31:4f:98:03:4d:
f9:a4:1a:be:41:d6:7a:68:97:32:e5:29:c9:d2:42:
41:f2:98:04:34:a0:f5:77:25:38:63:3b:53:f1:e7:
11:45:0b:17:2f:0d:dd:2c:6b:24:f4:a6:40:44:13:
05:cf:4a:be:cc:ab:5d:f4:37:97:1b:64:12:0e:eb:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:39:F7:4F:FF:99:F7:70:9A:4E:E0:3D:58:9F:F8:55:A8:AA:F8
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:02:db:59:22:a8:37:04:a4:d7:f0:8f:44:8a:3a:54:07:
35:29:20:09:7c:0c:7d:a1:d1:9d:35:ff:65:ad:8c:75:74:c9:
72:14:3e:1f:94:2a:22:2f:fd:ad:32:68:8c:94:3d:83:d6:72:
e3:64:e9:c2:3e:41:63:eb:1b:b7:b0:3e:51:e0:b6:da:52:1f:
53:4f:3a:b2:16:6b:10:87:6e:1e:04:4b:00:81:b9:6f:88:f8:
73:5f:51:15:b9:12:5b:72:9b:b6:64:00:9a:bd:fe:8f:2c:2d:
e8:7f:93:5d:e3:b9:76:87:6d:6c:70:7e:ef:bf:2d:63:9a:1f:
58:eb:ba:73:0a:d1:67:1c:73:a5:90:3b:40:c9:a9:ab:74:c9:
79:27:4d:c3:a6:58:a2:dc:60:af:65:62:b1:59:fa:82:0c:36:
88:7b:23:bd:ae:ca:e6:28:4d:f0:55:d8:87:fd:18:e1:80:e0:
06:4f:98:eb:90:c9:2f:bf:7d:71:b4:64:54:35:49:56:5b:b7:
92:6f:42:c1:34:9b:c0:20:cb:56:f1:c6:5a:aa:c1:6b:5b:47:
35:e8:34:fd:61:40:77:92:bc:9b:e7:22:03:e6:f8:e2:7d:29:
aa:76:bb:18:e1:91:5b:f0:43:90:61:2b:ab:b7:72:6e:7f:cb:
5d:ec:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:22:14 2026 by rpki-client