Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
File: J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft (raw, json)
Hash identifier: x7BnUSmwunTEF2PcuIvD34AWFJW91UhryKqDRi1QjoA=
Subject key identifier: C0:A1:00:9E:D5:4B:1E:72:82:B4:D7:9E:81:3A:E5:B9:57:50:2F:84
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 01A0C28DD0D1009E63768E34CCDCF1FFC14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:01:08 +0000
Manifest this update: Mon 21 Sep 2026 06:01:08 +0000
Manifest next update: Tue 22 Sep 2026 06:01:08 +0000
Files and hashes: 1: AlUMjDs1AMrse1G7Mm4Ls5MOqbg.roa (hash: 1qWTrC8IRHVNBmVAFfK+oN6U6pjXzgDE6zNivII8rew=)
2: FQ-cn1xD6KsvCiukzaSyL7Bi5fs.roa (hash: 9/gq5XTu7uOiRhd+dP7NFtGAPJ4cf/D1aTBzP0UWPcg=)
3: J50zmCtQdo-LbJV1zf8tg_pspRY.roa (hash: rmMwifoRriqaztxBUMCiGtVjFrOwYaPJiXLxhJjafM4=)
4: J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl (hash: iCeDJ1gL+8CjRnEDi24vv9dSpIz/OU6S99hzHiorsA8=)
5: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (hash: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=)
6: b80T5aKo89J4YEAP6bAiheKe6EY.roa (hash: CLeP0I5fgLyLMgId9gEX6E6rFzYBTw+ow8e/05qzkMY=)
7: icPfEymP4sS-B5f6ECwDv6uqJfE.roa (hash: dEtKNt+6pxMCaYnPSrEzFG7rO6REUpLEotnEHbtCIIY=)
8: r0qZ8D2aTVCBnUaFMEdO5JjY_WE.roa (hash: vpPL8rRx0AJAgJ6HwLPSPxj+S6uKrcpsWXCyy/Hr0EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:d0:d1:00:9e:63:76:8e:34:cc:dc:f1:ff:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Sep 21 06:01:08 2026 GMT
Not After : Sep 22 06:01:08 2026 GMT
Subject: CN=c0a1009ed54b1e7282b4d79e813ae5b957502f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:46:6c:42:1e:f0:59:5f:a2:55:03:60:0b:
b1:6f:19:81:ef:8a:9a:cd:3e:bd:06:2f:9a:e8:fa:
6d:89:91:02:74:21:24:fd:74:17:9f:7d:22:a6:83:
f7:0d:a9:2e:e6:ab:67:49:c7:7d:e5:53:be:2f:a5:
77:8f:0e:cd:2c:8d:11:01:c1:ea:ac:88:77:2e:8c:
03:94:14:c1:d1:fc:ca:fb:db:34:0b:66:a4:a7:f1:
15:37:13:31:53:ae:4a:2b:c7:f1:5d:b4:52:4e:bb:
1a:44:54:63:23:32:3e:e7:6b:2a:80:b1:ba:2c:d4:
be:77:79:7c:0f:1b:93:8b:da:69:0d:7f:1a:3d:01:
6e:c8:b2:93:c8:96:1a:9f:50:e1:a2:6c:cb:70:37:
cf:ee:a1:36:56:cd:27:87:c4:b4:8a:c9:42:2a:d2:
ba:ee:8d:c1:04:70:ef:67:02:48:02:84:38:5b:06:
fd:84:3d:c2:05:ec:2a:2f:6c:32:c4:ce:b5:a0:89:
72:c4:af:40:01:7b:f0:71:ba:7e:93:08:b6:18:d6:
8f:c8:b1:45:9b:1f:04:4d:d5:40:7b:b5:19:0a:96:
6b:f1:1c:d7:f4:80:55:d3:df:17:76:d9:9a:31:d2:
36:66:3e:6c:80:84:8c:83:42:37:6c:3e:be:b3:85:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:00:9E:D5:4B:1E:72:82:B4:D7:9E:81:3A:E5:B9:57:50:2F:84
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2e:c5:d9:89:2d:72:ce:e7:39:11:57:64:57:8a:df:b2:da:
ab:3f:63:eb:b3:cd:60:d5:36:ef:f0:1a:4e:b9:87:54:1f:70:
fc:24:82:f0:fa:25:12:69:df:9f:4f:6d:a6:0d:11:b2:6c:c7:
a1:87:46:bf:1e:61:32:07:b7:4d:ba:00:ac:67:00:72:7e:00:
e4:b5:9c:20:04:3a:a1:c8:9a:67:2d:a3:13:de:13:c1:77:9c:
59:b9:de:27:7c:da:c5:83:f9:f1:cb:7b:98:ce:13:7e:71:c3:
91:44:19:97:a3:bb:55:e2:b1:40:76:c0:67:f6:4e:ce:a8:55:
f7:95:a6:20:e8:15:9f:c6:65:ca:86:42:9e:72:a8:19:84:d0:
6c:62:b9:9a:85:f2:a2:e6:18:31:87:33:0a:d5:32:5e:74:d0:
bb:d1:f1:ba:c1:40:69:cd:81:1b:da:7b:2a:01:9e:1f:e7:15:
31:7a:8a:ed:c6:d7:09:81:9b:92:37:9c:2f:a8:d5:06:c6:32:
79:44:18:fc:02:f9:5e:c2:f4:fe:0f:c6:0e:2b:b0:e3:0e:5f:
bc:70:ce:70:ec:3e:52:ce:22:cb:30:68:21:3c:d8:8b:c5:c9:
ca:a7:3b:16:e1:1e:c4:91:da:6e:c1:2f:3c:2a:3a:34:23:f4:
ed:09:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:10 2026 by rpki-client