Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: ev8btbqD/gL4Xk3G838iSUHWGthu0TY/1AZ5Ox7xG/Y=
Subject key identifier: 39:95:71:B1:26:03:D5:F4:A5:13:53:17:EA:CC:C8:93:B6:13:66:3F
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 01A0CFDB2B7A5676DCE4FD55E7056B5F4C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 0AAD
Signing time: Wed 23 Sep 2026 20:00:42 +0000
Manifest this update: Wed 23 Sep 2026 20:00:42 +0000
Manifest next update: Thu 24 Sep 2026 20:00:42 +0000
Files and hashes: 1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: u1YLddVpIerxhKNEVVyptNvnwX/mV6KYlv6s4M31A5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:2b:7a:56:76:dc:e4:fd:55:e7:05:6b:5f:4c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Sep 23 20:00:42 2026 GMT
Not After : Sep 24 20:00:42 2026 GMT
Subject: CN=399571b12603d5f4a5135317eaccc893b613663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:4d:ca:19:6b:21:ec:0d:4b:57:da:53:0b:
ad:7a:76:18:7d:d1:f2:a6:0c:c6:31:a7:31:a6:4b:
6e:11:94:24:dc:5c:b6:6c:a6:11:2c:89:e7:15:6e:
3d:89:85:b0:94:d9:ec:c0:bf:5c:1f:d9:36:69:9d:
2d:9f:f7:65:f7:54:bd:af:c6:ba:71:e7:36:5c:1e:
eb:81:1b:83:bf:11:2f:dc:db:8b:c8:ff:42:5b:e7:
a4:97:14:ca:83:f3:59:b1:85:94:8a:dc:d4:dd:ed:
c3:1b:2d:cd:d1:7f:e6:d1:33:41:27:9a:6d:b1:74:
86:a5:1e:02:2a:13:7a:56:91:79:71:54:77:66:61:
21:7a:87:bc:79:3c:1e:11:e6:d3:78:8c:09:8c:4f:
14:47:96:08:a2:16:5e:45:0a:20:c2:95:ae:51:79:
aa:ff:4e:d2:bd:7f:53:33:c4:90:b7:14:1a:dd:ab:
b7:c2:1d:0b:cc:23:05:be:b9:2a:49:a2:a2:00:dc:
f7:9d:ae:37:af:40:a7:cb:08:c2:b0:dd:4a:09:5c:
4d:36:8e:7f:01:63:35:04:18:95:66:4e:3f:ef:77:
70:65:12:53:75:18:a3:74:f8:7d:eb:f0:87:3d:4c:
f3:56:67:63:00:44:46:90:b6:13:55:3e:4d:c8:16:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:71:B1:26:03:D5:F4:A5:13:53:17:EA:CC:C8:93:B6:13:66:3F
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:48:bf:93:0e:15:07:c8:e4:e8:11:b6:cb:44:4d:00:65:
66:84:3d:2d:f7:7c:76:30:d0:07:92:99:8c:b9:1b:f5:2f:ac:
9f:b7:a3:27:f4:e3:cc:c5:46:24:84:2a:ad:e7:fd:b1:db:87:
97:9c:ba:09:8a:45:90:a5:a5:75:24:76:4a:59:da:32:2c:2e:
43:2f:6a:e6:ce:f6:29:c7:7e:ec:01:74:e5:5d:bb:03:a3:bd:
34:13:5a:93:b4:96:d1:88:93:ea:5d:0f:e2:3c:ec:eb:76:e8:
a6:9c:9a:0f:ef:f4:de:30:50:b0:14:92:1a:aa:7a:3b:91:6e:
71:18:a7:20:39:52:87:12:97:6b:cb:6a:fd:0e:11:03:8e:b6:
bf:4a:a1:e9:ef:be:06:f3:d3:89:72:fd:c4:29:af:43:97:b1:
cb:46:be:e0:66:62:ed:42:20:b3:0b:f4:35:6d:ed:65:69:ed:
98:f9:ef:52:f3:3f:86:e8:29:76:d3:32:4b:cc:ba:eb:20:a3:
44:37:06:66:09:6a:a6:5e:b9:08:ef:13:72:30:5a:10:25:3c:
55:9b:d1:29:ff:a2:39:fc:8e:9e:70:1d:8d:f0:83:77:4d:93:
32:1f:7e:06:55:44:fc:14:3e:18:48:82:9d:cf:61:e7:00:2c:
70:d6:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:47 2026 by rpki-client