Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File: J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier: 1bKUBTYFeroUt38wR8M9rCIfvAs782XtemGESRa6dK0=
Subject key identifier: F9:85:21:C0:55:37:54:50:F2:FB:A7:07:FB:69:7D:86:77:56:1B:06
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01A13C37E93DF6AF0FEAFD2847BA538924F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number: 16AA
Signing time: Wed 14 Oct 2026 21:00:59 +0000
Manifest this update: Wed 14 Oct 2026 21:00:59 +0000
Manifest next update: Thu 15 Oct 2026 21:00:59 +0000
Files and hashes: 1: IGGsOWInx7GDiTu-4uOnz6TKF_4.roa (hash: hCa0gQemcviWEbgPvunZmS38fuAZ96Xy3vU8q4L13BQ=)
2: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: 3WpWbvQ/JbN7BkFsM/oHHYqYZpSqmb5GTyShXLoCSbs=)
3: oRmOzlxkjaKvIFitB3DoJI9OFPY.roa (hash: YHu28evWYm6LA/MihdvRJT4qUDYpq3RC/bhLC2lzCms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:e9:3d:f6:af:0f:ea:fd:28:47:ba:53:89:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Oct 14 21:00:59 2026 GMT
Not After : Oct 15 21:00:59 2026 GMT
Subject: CN=f98521c055375450f2fba707fb697d8677561b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:fc:32:d5:51:31:11:f5:cd:df:be:bf:e1:
02:6d:b5:53:91:5c:d1:b8:c2:0a:f5:09:4c:19:95:
47:54:aa:ba:97:f6:9e:b1:2f:09:62:c8:15:50:3a:
d6:df:2e:c2:7f:2d:4b:68:aa:32:04:0a:14:09:dc:
fa:70:31:fd:b4:0d:08:d3:3a:5d:11:28:71:d2:23:
00:8d:0b:88:81:73:0c:f2:d9:97:1e:de:ff:6b:a1:
c7:53:e7:48:c5:0c:0f:4a:b5:51:bf:f1:61:c7:5f:
f5:9f:c8:73:d7:fb:c3:cb:e0:1d:03:a4:96:7b:22:
07:30:7f:4e:01:98:14:e4:12:04:19:c1:84:2a:86:
59:e7:76:bd:74:2c:02:fa:a3:e4:28:ad:45:65:f6:
21:b8:5d:4e:0f:0a:12:08:b1:bc:de:a3:fa:e3:95:
a2:f5:43:42:9a:78:0e:81:17:91:bc:46:38:ca:24:
57:3c:e5:8d:d6:35:46:1d:46:84:af:09:96:a5:b1:
60:de:a5:cd:95:01:c5:87:4c:1c:64:76:d1:e1:2a:
3d:1a:82:9a:39:44:03:23:30:01:03:cd:c9:b9:5c:
ef:fe:99:5b:11:d7:3c:87:3d:5e:8d:ae:db:76:bb:
66:73:e0:53:b3:a8:02:0b:97:b4:43:00:2f:85:ee:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:21:C0:55:37:54:50:F2:FB:A7:07:FB:69:7D:86:77:56:1B:06
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1a:95:d8:12:e0:74:e0:70:e3:9d:59:67:3b:07:a9:c6:9f:
60:a2:9e:e9:63:04:ed:43:16:90:ac:ba:6b:28:88:8d:a7:25:
8a:40:8d:e4:48:5e:1a:69:2e:35:86:68:f1:2f:ec:ba:c0:76:
fb:25:6c:2c:92:f8:c5:8f:dd:d3:9f:dd:9f:72:c9:02:04:9a:
9f:f0:a3:4e:b9:60:99:3f:5d:f7:48:87:61:3a:86:c6:62:1d:
5a:00:fe:6d:a4:ae:4a:58:19:e0:db:37:cc:3e:15:b1:09:7b:
52:e3:78:f6:d2:84:fe:b3:88:19:a8:a8:69:08:c9:55:73:88:
ec:1f:f1:18:ca:b1:bb:c9:60:9a:9e:d9:83:e1:90:26:cf:92:
36:6e:7c:6a:32:30:9c:1b:7d:68:f9:e9:0a:cd:3a:d8:f6:3a:
72:45:bf:0f:ac:72:2c:d1:95:1a:3c:16:a4:11:36:6e:a3:6b:
e7:c0:9b:47:ba:0f:44:e7:a5:e3:d3:fd:a8:82:e4:a6:c9:34:
e2:1b:5f:7f:53:3f:d9:ca:5c:da:f6:5e:e4:22:2c:7f:36:0a:
e9:6e:2b:71:13:82:c9:8a:57:0d:1d:6a:83:72:e6:c1:2c:3e:
87:e4:35:d3:1e:2c:4b:17:40:bf:bd:99:83:68:56:32:cf:a9:
e6:12:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:59:10 2026 by rpki-client