Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: VfuQwcOWE+LAPKwNN5wUYz0jOgCn2SU/GgJUibh0rNE=
Subject key identifier: 3A:6A:8A:A3:5D:32:6E:BF:CD:3A:DC:33:23:89:C9:BE:3C:9C:FD:9A
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 01A0E66376A48EFB51F7D4174A291F65E156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 0335
Signing time: Mon 28 Sep 2026 05:01:13 +0000
Manifest this update: Mon 28 Sep 2026 05:01:13 +0000
Manifest next update: Tue 29 Sep 2026 05:01:13 +0000
Files and hashes: 1: 2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa (hash: sDIfURTzJ4IeJdUJuR0VKVKFISBvpz2O883KP+aaCxY=)
2: dCE2fA2T7JJJftADurwqnINg4Xk.roa (hash: l0uqVxXQwge535nKbCJaHwwjDYSKYXonosppxPWkUPs=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: Jk0a57W/nJ8Bjl0oiBCPZJ9LLgq1A6vbyGJViR+aLBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:76:a4:8e:fb:51:f7:d4:17:4a:29:1f:65:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Sep 28 05:01:13 2026 GMT
Not After : Sep 29 05:01:13 2026 GMT
Subject: CN=3a6a8aa35d326ebfcd3adc332389c9be3c9cfd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:89:53:ea:80:da:04:36:e5:50:e1:5f:69:
fe:b7:e5:dd:84:ac:b6:3d:22:37:5b:5e:fa:ef:3b:
79:b1:77:e6:25:31:5f:9f:dc:2b:ed:28:02:49:a6:
36:3d:6d:05:cc:f0:2b:e4:3c:37:a2:2d:c2:f4:ed:
8c:67:36:38:cc:fd:07:68:39:8f:1b:27:b6:8f:e8:
f0:ee:be:8a:bc:b3:f5:0a:a6:bb:0a:dd:80:ad:a6:
27:9b:d9:19:62:14:22:dc:29:a8:48:96:b8:8a:82:
d1:2d:26:18:6e:8e:b8:8f:e8:a8:af:c0:07:76:ab:
b0:85:82:06:62:34:5e:89:4e:44:51:ce:a9:3d:11:
b6:21:3f:e0:b9:fd:78:38:62:6d:bf:59:37:47:08:
8b:f1:54:2b:cb:01:7a:e6:f3:dd:55:3c:c2:f2:b9:
7c:af:e3:c9:26:fc:bd:b3:34:4e:02:25:68:7b:46:
d0:0f:18:99:a0:d5:26:ad:fb:c5:4d:b6:4f:3f:52:
5d:47:d3:d8:7d:e7:66:d2:64:11:68:23:7a:97:6f:
fd:ce:e3:40:dc:f2:92:23:fa:f6:ff:d2:80:35:de:
47:bc:19:54:73:54:7b:8a:33:6c:15:65:42:a3:e6:
2f:b4:2e:35:db:c5:13:b6:93:63:52:cb:06:2b:1c:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6A:8A:A3:5D:32:6E:BF:CD:3A:DC:33:23:89:C9:BE:3C:9C:FD:9A
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:39:98:82:3a:6f:70:a6:eb:17:99:d7:69:a3:f3:10:49:
47:a2:01:5e:8a:5f:6f:9e:9d:e2:73:18:a8:67:7c:b1:c6:a3:
f6:ac:f5:86:50:23:51:e7:3a:23:19:7d:f0:b1:29:a4:dd:7d:
e0:12:2d:85:25:e6:8e:ed:c2:f6:7f:02:56:4e:1f:77:db:ae:
85:cd:77:fa:3d:fa:ce:33:cd:70:32:9e:36:4f:8e:a3:5f:de:
11:d5:d6:d5:bb:fe:60:66:bd:fe:17:de:af:e6:22:51:5b:9d:
46:36:9a:bb:f7:80:9a:fd:bf:22:ed:01:ed:e3:b4:50:1e:6f:
e4:c9:88:da:43:6f:c2:f3:ca:77:3f:cd:9f:d5:74:17:97:83:
6a:c9:35:98:63:87:de:a2:e8:68:13:4c:fc:dc:29:67:05:19:
58:7e:7e:02:98:6c:c9:bc:ed:c0:6f:d5:04:d9:50:aa:e5:c2:
46:da:91:52:2a:f3:25:70:18:57:20:58:7a:2e:5d:80:98:67:
bc:a1:50:91:3a:b9:e0:c8:d6:aa:a0:4b:00:b9:87:0d:74:ba:
a0:94:93:ef:08:24:51:14:64:86:68:87:42:4b:a7:21:70:3a:
c1:2e:a9:73:37:a1:30:0d:9b:00:b6:e0:72:17:dc:70:84:fa:
84:b5:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:37:09 2026 by rpki-client