Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: nagNC006XDkd1l2gNoXREAaUP4+8LqokrG4LFA2JDqk=
Subject key identifier: 5B:0F:72:1B:9F:8E:46:C6:BD:AF:9F:46:B5:B0:CE:58:F2:55:99:2E
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 01A1295646F300B4F0D9C983A94747792E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 12B7
Signing time: Sun 11 Oct 2026 05:01:22 +0000
Manifest this update: Sun 11 Oct 2026 05:01:22 +0000
Manifest next update: Mon 12 Oct 2026 05:01:22 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: m0u1BKVzxuU41+NzF0TcbBfrvCsctyhB0FLgS+4todk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:46:f3:00:b4:f0:d9:c9:83:a9:47:47:79:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Oct 11 05:01:22 2026 GMT
Not After : Oct 12 05:01:22 2026 GMT
Subject: CN=5b0f721b9f8e46c6bdaf9f46b5b0ce58f255992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:92:37:c4:c9:ae:f3:c0:5b:97:07:1b:be:
0e:2a:e9:ff:70:e4:00:21:54:8c:90:81:42:59:e5:
77:00:e5:d7:38:f5:6a:9d:30:1e:c2:0b:21:cc:b6:
c6:75:23:b3:32:26:dc:7f:43:75:e1:d3:f1:e7:87:
a4:7c:c4:e7:43:89:16:22:85:52:76:fc:8c:23:05:
23:c1:48:70:6b:bd:bd:c5:fe:fb:de:ca:dd:d0:f3:
9a:ac:57:96:60:d0:0d:02:97:f3:05:18:c7:32:7b:
2f:81:3f:03:c7:1a:3e:35:36:44:8c:70:e8:1c:05:
17:96:e8:29:9b:f8:2c:3e:00:98:b6:50:55:7c:c3:
1c:43:20:3e:12:09:e5:8b:a3:6b:89:c3:42:60:4c:
89:08:06:b5:70:3e:5b:5b:aa:fe:14:ab:51:d5:89:
e0:0a:3d:ac:4d:8b:67:b8:93:09:3a:ed:58:0e:34:
9e:ab:0f:ab:77:71:f9:d0:8a:80:cf:44:31:08:ea:
65:37:f3:99:8f:a9:37:45:d1:46:58:05:85:31:89:
3c:97:c6:77:f5:63:f3:cf:45:22:2a:8b:4c:3d:a4:
01:7b:43:c7:51:89:74:7d:89:9d:e0:c4:ca:1c:66:
1c:22:4c:e9:f0:56:5d:9c:50:a4:99:db:42:3f:e4:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:72:1B:9F:8E:46:C6:BD:AF:9F:46:B5:B0:CE:58:F2:55:99:2E
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:6f:26:9e:f6:50:a0:55:6c:db:be:d9:20:0c:84:bd:31:
6d:0a:2c:67:39:0f:59:52:73:3e:80:1e:58:47:54:6d:bd:9d:
6b:5e:85:99:a8:68:2f:ab:20:ee:bb:71:c6:08:68:b5:97:83:
79:4e:a4:a3:95:2f:1c:34:eb:07:33:69:2d:d5:94:69:55:23:
ce:5c:11:4e:d5:6f:01:bb:32:7e:63:e9:a1:4d:0d:d6:89:12:
4e:37:b4:7b:4f:31:a7:20:6c:0a:02:d0:27:84:86:3e:b1:b2:
30:b8:9b:23:5b:4a:f4:b7:35:e8:0c:df:6c:e7:04:4f:00:02:
cd:e3:1f:c6:86:9a:2d:b8:b7:f5:7f:60:7e:f0:f6:ce:ce:ac:
b0:fb:a7:53:09:2e:73:d7:60:35:32:89:77:6d:db:d1:e4:e8:
51:c0:3e:fa:3d:ea:16:19:de:68:26:d9:b1:f2:0d:9f:a5:08:
f1:6e:cd:48:ac:d4:7d:41:01:c3:2f:d1:c2:7b:d2:d7:24:94:
cd:29:12:fe:4f:89:50:2a:0f:10:56:04:0f:0b:97:bd:cc:b9:
7a:4f:51:40:ab:55:56:e9:5d:5e:ef:28:ca:ec:41:b3:6e:8e:
26:61:e2:86:c7:d6:e6:87:ff:ba:0d:74:c2:88:53:f2:da:04:
74:74:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:46:33 2026 by rpki-client