Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: GwELcFEus8uimb3H+TLlY2QnVbSY4pqagc4lWfLGDck=
Subject key identifier: 31:D6:4F:2D:D3:C6:DA:2F:31:68:42:DC:8A:97:FA:6D:E8:82:EE:95
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 01A0E098B550ECC97EBE8C028C57191AC0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 01C9
Signing time: Sun 27 Sep 2026 02:01:39 +0000
Manifest this update: Sun 27 Sep 2026 02:01:39 +0000
Manifest next update: Mon 28 Sep 2026 02:01:39 +0000
Files and hashes: 1: DXFnpgsoAJDSh1GQIY3dLsC542M.roa (hash: aPR1e33+9EP8BG3ZvfZllvca2KoUBSV0RYS/0Gf7RO0=)
2: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 3RVcWwlqe31EqQzqrsh1X7BQkfsxKeNw5v2tCfQhl9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:b5:50:ec:c9:7e:be:8c:02:8c:57:19:1a:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Sep 27 02:01:39 2026 GMT
Not After : Sep 28 02:01:39 2026 GMT
Subject: CN=31d64f2dd3c6da2f316842dc8a97fa6de882ee95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:44:ee:00:8e:6a:aa:dc:43:93:c6:ce:18:
93:31:77:12:67:dc:b7:9f:2c:b0:2c:a0:80:45:70:
55:77:d4:5f:ee:f8:7a:a4:fc:da:66:b2:4a:3b:94:
4b:c4:b1:93:bd:b4:08:09:42:6a:2c:36:f7:45:bc:
83:60:ac:40:79:1f:9d:61:29:e9:71:b7:1b:fb:59:
10:88:b2:7e:a2:2a:a1:8a:cd:98:b5:d3:d0:c0:83:
9e:e9:f0:86:f7:0e:46:66:60:7f:ec:a8:97:73:81:
c9:f7:b8:e2:d9:74:0b:cf:02:d8:10:e4:20:3e:ab:
5c:5b:e6:8f:32:97:1e:f4:b4:d6:b8:58:ac:a0:bd:
32:63:4c:6f:f2:3d:0c:90:69:71:00:f2:82:62:21:
dc:be:4b:8f:e8:9c:53:26:26:d1:fc:0c:f8:fb:4f:
86:17:66:f4:5a:a6:e0:ea:07:98:81:f3:29:52:db:
38:36:06:17:d8:94:0d:64:20:c9:d6:d0:a4:80:94:
b5:45:18:59:6e:92:49:89:99:94:2a:e3:98:d3:b2:
97:51:63:16:e0:e5:4b:96:b5:eb:df:46:3e:71:58:
c8:21:95:de:bb:12:4f:03:48:d6:0d:5a:5b:7f:ea:
06:b0:c9:9b:e1:5e:17:4d:6f:df:d9:88:33:f3:c9:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:4F:2D:D3:C6:DA:2F:31:68:42:DC:8A:97:FA:6D:E8:82:EE:95
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:50:df:18:96:86:94:68:8c:b6:44:33:c9:9d:6c:7a:9d:3d:
41:5c:b7:77:98:92:78:31:e8:4b:a7:af:9f:1e:38:db:b6:a6:
85:05:bc:7a:a9:ce:35:2d:2f:4d:21:ed:67:3a:88:1f:d9:69:
ba:d3:b0:96:93:b4:ec:06:d9:3c:50:29:be:8b:40:f0:2c:63:
30:df:60:64:94:52:50:2e:5e:88:47:9c:51:96:16:04:c0:8f:
44:f8:63:3c:1b:db:14:da:11:d9:5d:7f:ad:af:aa:20:6b:e6:
2a:2f:22:a6:17:a8:93:0a:bc:70:78:40:50:fd:f5:90:3c:42:
80:53:2e:c1:0c:13:3b:32:c9:cd:90:17:df:a5:ae:5b:8e:8d:
61:a9:9b:f1:ca:64:2d:b4:bf:66:08:6b:85:65:90:8a:f6:74:
92:68:b6:8d:7b:85:b3:0d:7d:81:b1:d8:6a:ed:f9:e9:98:ae:
b7:0c:80:fd:6b:9f:65:f8:65:04:64:38:64:b2:84:7f:40:ba:
c7:ff:f7:46:7d:e0:b7:33:05:4b:0e:dc:a4:fa:f7:57:37:98:
99:b1:07:f3:4a:c7:be:dd:4f:5b:89:73:70:c4:44:13:0c:7d:
16:f9:11:e3:c7:6e:0f:e9:32:43:7f:d6:25:e7:44:3d:b5:51:
7c:6e:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:20:02 2026 by rpki-client