Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
File: j7lyrwthAUecHUYZkSh4p6ylX5s.mft (raw, json)
Hash identifier: /Uu2P2Ay6yeP6Ra9dbW78oVW93ZL9kW0j9HsPXFGnUA=
Subject key identifier: 8E:83:25:38:B6:9B:65:B3:AD:9E:12:20:47:39:4E:FF:6E:38:9A:C9
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Certificate issuer: /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial: 01A15176D0887C8D1D01E0D34725EA0DB97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:43 +0000
Manifest this update: Mon 19 Oct 2026 00:01:43 +0000
Manifest next update: Tue 20 Oct 2026 00:01:43 +0000
Files and hashes: 1: j7lyrwthAUecHUYZkSh4p6ylX5s.crl (hash: OtuSGkF6LJNE+L/ZSSHvoJpe0Cbs/j58XU9pNkWmoOA=)
2: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (hash: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:d0:88:7c:8d:1d:01:e0:d3:47:25:ea:0d:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Validity
Not Before: Oct 19 00:01:43 2026 GMT
Not After : Oct 20 00:01:43 2026 GMT
Subject: CN=8e832538b69b65b3ad9e122047394eff6e389ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:55:b1:3a:c3:f3:7b:fb:8f:10:1c:fd:a9:
28:32:13:e5:a3:e0:ff:ff:5e:6c:f6:3f:a5:05:f7:
2f:eb:0e:19:40:4a:62:f6:57:2f:54:21:d3:92:db:
c2:c1:ed:96:32:b7:f2:d6:71:2c:f3:7c:af:f4:24:
b2:15:9d:7e:47:5b:07:d3:54:c5:d5:ce:75:b2:ab:
5a:af:c9:32:ad:5f:dc:12:ec:82:b9:ee:d7:31:19:
61:81:c1:f5:6d:04:72:0c:3f:7d:11:2c:e7:83:9a:
5e:30:18:63:b2:f1:21:cc:6c:77:b5:01:03:67:aa:
45:9b:14:50:03:4b:ee:c6:99:25:55:ea:b1:b4:b3:
e0:38:50:f1:70:a2:2a:e0:09:20:93:d8:a5:c0:81:
e7:04:c6:dc:74:39:e2:f5:0b:eb:f9:1b:f1:02:bd:
58:71:3c:4c:b1:8d:07:4f:b9:56:2e:7c:d3:7d:3f:
34:be:79:ee:8e:55:cf:39:58:40:01:fb:9f:23:5a:
c3:9c:32:14:75:6f:99:34:3f:33:57:83:f5:33:2a:
7a:fd:e2:1c:d4:db:6b:b7:0e:bc:df:b8:38:f7:15:
de:93:30:03:8f:df:75:3a:d4:93:f6:77:de:f1:07:
fd:27:00:c7:56:18:88:ad:b8:ed:50:fb:2e:f6:fc:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:83:25:38:B6:9B:65:B3:AD:9E:12:20:47:39:4E:FF:6E:38:9A:C9
X509v3 Authority Key Identifier:
keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:e4:86:25:ac:58:61:b1:c8:95:e2:2d:b7:c0:12:39:45:
07:91:4c:00:cc:0a:4c:f9:d9:0a:12:9e:de:60:ea:ac:ba:4d:
44:15:4e:0d:ca:94:a2:13:38:41:e5:2e:4a:0b:16:2f:b4:8f:
19:13:67:7e:f3:c7:4e:5e:d7:e8:7f:93:ea:db:5a:67:ec:ad:
0a:87:c6:f7:4b:16:4c:cc:48:3d:63:52:a5:bf:9f:a1:97:ed:
05:66:37:ec:b3:2d:10:8d:c4:59:ee:28:55:46:c4:c1:25:cc:
73:16:fc:37:5c:ad:a4:80:6c:0b:8c:3c:50:aa:c3:c4:f6:a5:
67:a4:67:2d:4f:a2:e0:9b:dd:ce:75:cd:12:5a:67:9b:93:14:
7f:51:f5:9f:49:c8:dd:e5:e6:11:c4:2d:65:96:9c:4b:6f:b9:
fa:90:2c:9a:a5:a3:54:a0:7c:4c:2e:19:64:02:cf:fa:7f:80:
d7:d3:22:7e:65:00:18:37:b7:d3:05:d1:f2:6e:d6:91:c0:3c:
a9:b2:89:70:c9:e8:94:9d:b6:32:ee:db:30:58:d9:f0:99:82:
29:0b:7f:4d:f4:10:0d:65:d6:24:08:29:f9:ec:6e:fe:33:ce:
5b:22:5f:fa:e0:2b:8e:d2:7d:05:62:a4:e3:75:41:dc:7a:0f:
03:39:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:01:34 2026 by rpki-client