Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: oaVjmJWO7zVwWlp+rlUqzYhNe3mkZLG9DJFcn+mV320=
Subject key identifier: 17:C3:B1:9F:05:EB:EA:46:1F:78:D7:8E:DF:5E:EF:20:50:D9:9D:6A
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 01A0E13D177B0A632696B6655A6C9ACC50D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 05:01:12 +0000
Manifest this update: Sun 27 Sep 2026 05:01:12 +0000
Manifest next update: Mon 28 Sep 2026 05:01:12 +0000
Files and hashes: 1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
2: Kcv3yLrqvaGlFWwvs82z1--Ykzw.roa (hash: hLFp9RkiGgmZxvQmgYWOjpj1pnCpuiwxyWBm/03r2rk=)
3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: WDyEv+VTUp9iWfqwutttqbGOofl42n6NkKq5oSCqhjY=)
4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:17:7b:0a:63:26:96:b6:65:5a:6c:9a:cc:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Sep 27 05:01:12 2026 GMT
Not After : Sep 28 05:01:12 2026 GMT
Subject: CN=17c3b19f05ebea461f78d78edf5eef2050d99d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:cb:bc:6b:5c:02:63:2c:a1:5d:fc:5a:af:
02:ca:18:b8:d4:b7:a9:6b:d7:3b:a5:17:de:01:84:
d3:0e:41:e2:98:5d:f7:b5:a6:6a:63:e9:af:8c:dd:
4a:c4:6e:e8:a5:f5:23:87:03:da:9b:fa:a6:2c:ef:
ab:66:34:7e:9b:6b:84:57:c9:a5:35:32:f7:8d:f9:
96:88:2f:9f:d1:11:d1:7e:17:d0:8c:10:ae:b2:18:
e7:c2:6d:3d:79:4a:33:e2:49:5f:ca:e3:34:9b:3d:
d5:cd:37:80:ff:1e:8b:ba:88:e9:22:8d:14:d8:1b:
65:92:f8:af:4f:a0:f3:92:6e:65:76:79:b1:c1:15:
48:32:bb:fb:ca:6e:7d:87:7b:31:a8:7b:8d:36:9a:
d3:b0:46:c6:32:a5:9c:4f:67:d7:28:64:5b:5b:a9:
86:09:6e:e1:18:8e:32:bc:0a:bd:34:25:06:4e:b9:
b4:71:c4:7d:a9:87:d9:35:8c:13:bf:31:fd:72:85:
71:35:ed:4f:f1:1d:fc:32:8d:87:c8:c9:12:4c:b6:
2d:8b:70:9a:03:59:a8:1f:b8:19:5b:20:5b:55:61:
19:49:ad:42:af:8c:36:13:8d:48:df:8a:e0:cf:91:
c1:32:ad:65:56:c9:6b:41:ab:71:52:b2:b3:c4:6f:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:B1:9F:05:EB:EA:46:1F:78:D7:8E:DF:5E:EF:20:50:D9:9D:6A
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b3:99:8c:8b:a2:f2:19:d4:9a:2d:6c:22:ed:a9:cb:8a:2e:
1a:80:5a:2d:9c:13:bd:3b:0e:00:49:30:fd:40:79:58:5a:30:
ea:83:fb:ca:e0:1d:d6:10:f0:74:45:9e:bd:26:42:b2:3d:27:
7a:f1:52:cd:92:af:db:6a:b3:8a:6b:1e:da:9a:84:2f:d7:fe:
56:e3:76:f0:87:e0:0f:2f:c8:f6:23:fb:7f:a5:9e:87:ce:25:
25:3b:89:26:98:6a:41:e3:9c:fa:fa:24:dc:52:3e:b2:23:c3:
2e:48:7a:a5:05:c4:cf:05:9d:3f:f1:b3:b8:c5:7c:e4:8f:9f:
3d:0d:c8:14:bd:0a:55:1c:c0:d1:19:a2:6e:22:89:8b:c1:0c:
61:21:a1:9e:00:db:29:af:c5:77:a0:0b:c6:5f:5a:8e:66:e7:
56:a9:a8:2a:aa:f1:1b:14:71:39:1b:19:d1:11:cc:ee:a7:25:
d7:4c:7c:f5:c7:c8:89:a8:0a:27:13:47:23:02:5c:97:02:3a:
66:83:ac:3e:6d:7e:a0:a0:c6:ee:c5:c5:66:be:6a:19:86:76:
ee:e8:08:0a:f0:e4:c9:de:06:ac:fa:d6:ac:eb:d3:32:d3:ee:
55:ba:6d:0b:ae:1b:a5:ef:47:ca:73:d1:e8:cb:31:40:5b:b7:
a8:02:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:13:46 2026 by rpki-client