Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: i6Xpgis1ZVZpMWeqdBiq9xPSKOEX3RWcPC34knNX3xA=
Subject key identifier: A8:04:C3:4D:02:09:C2:5B:75:E1:87:C8:6D:BA:C0:F1:99:D5:2A:42
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 01A0D9170A2D4D29154D64A2339DC7B56E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 109F
Signing time: Fri 25 Sep 2026 15:02:40 +0000
Manifest this update: Fri 25 Sep 2026 15:02:40 +0000
Manifest next update: Sat 26 Sep 2026 15:02:40 +0000
Files and hashes: 1: UIv6jVS0p5268_XYhub9OHb_bA0.roa (hash: KT5y+HpZ43GmqDM+m5jLP788GzijAuuEants3+erKgY=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: seH8SEhW7xs+0YtewNHAPsGIDo5wyg2Ze6mtaKZzuvI=)
3: lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa (hash: qcCySn5tj9h14UpAI2UnCKnAlV7VQfAi0DGrUD+71GM=)
4: v9kA4OCGrHclzg_4NvmtIc2Yk_A.roa (hash: tSlWesgG1ectPhUdMe7kuRGZ0HEk92YblgLL18UTzMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:0a:2d:4d:29:15:4d:64:a2:33:9d:c7:b5:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Sep 25 15:02:40 2026 GMT
Not After : Sep 26 15:02:40 2026 GMT
Subject: CN=a804c34d0209c25b75e187c86dbac0f199d52a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:31:89:a1:3b:66:9c:79:a6:d0:8f:57:4d:
5d:03:c8:75:57:6e:37:a0:0b:23:88:49:33:cf:b6:
b9:c6:c5:b3:2d:bf:5b:15:a7:13:d0:d5:30:7e:b1:
58:4b:6f:39:1b:27:96:be:7a:4b:c8:99:a0:67:4d:
26:9a:ed:c6:59:2b:9e:f0:8c:d0:a1:83:b4:e3:6a:
cf:46:61:19:5b:19:fe:d0:7a:c7:eb:2f:98:c6:9f:
89:94:cb:1d:7c:d5:80:2c:a7:94:ac:b6:1b:9f:ff:
48:7f:59:78:2b:67:2d:ff:21:c1:0d:2c:19:31:59:
d9:95:b3:f6:54:45:fd:ec:b2:0d:7d:13:7d:95:9a:
94:ad:99:58:8f:3b:ad:65:d0:11:93:c0:d0:c3:ab:
86:34:d8:40:3d:1b:02:45:9a:72:e6:e8:c6:14:29:
06:f4:2c:b8:3b:d7:cb:d5:df:1c:c7:3e:80:f4:49:
d5:ea:9c:ca:01:4c:55:5a:b0:cd:b1:5b:bd:6d:12:
c2:8d:dc:0e:de:75:0f:49:b5:ca:6e:50:b9:3b:39:
2a:f0:6d:ff:f7:3e:51:37:a0:72:25:0a:cd:9b:df:
58:f9:42:3f:ea:3e:8f:88:d3:f4:43:00:1c:51:61:
3c:46:7c:fa:86:8d:48:b4:02:0c:82:c1:05:c0:7f:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:C3:4D:02:09:C2:5B:75:E1:87:C8:6D:BA:C0:F1:99:D5:2A:42
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:74:ac:0f:db:4f:bd:30:84:94:ff:78:7d:9f:95:15:d6:51:
50:19:95:ce:b2:f1:3f:ff:39:f1:19:72:69:1a:c2:8b:a1:fb:
ac:38:dd:4b:a3:d0:24:20:bd:c8:82:9f:98:c9:8f:30:94:1a:
7f:6b:eb:91:b6:53:9f:39:e0:c7:6e:b3:d6:97:39:ad:58:be:
39:2b:c5:c4:fb:90:c8:30:90:89:9e:17:bb:40:a3:ff:16:cc:
87:9c:a6:8a:91:4f:66:82:a8:c9:04:e4:0d:71:12:70:1d:07:
f8:82:5b:c6:b5:a7:1c:68:48:79:ae:25:4a:6b:c7:8f:72:fc:
ae:f1:ce:0e:65:32:12:f0:48:c7:ed:d6:86:7e:84:77:8b:9a:
f9:1e:4f:4a:fe:40:94:8e:78:e3:ef:29:5d:47:63:7f:18:c9:
23:2e:b8:4d:35:be:33:b2:35:a8:24:2b:e2:e5:f4:35:4f:74:
39:ac:58:9c:d3:f7:61:06:66:84:10:ab:cc:4b:35:29:93:da:
fc:54:87:3f:52:e0:cc:53:63:26:6c:b7:cf:fd:6e:7b:f0:72:
20:4d:04:4b:50:8c:a4:63:90:5a:b2:a4:3a:40:61:d9:e6:ea:
52:ae:d2:22:b9:e7:6f:05:5f:98:74:dd:0b:10:d9:c9:8e:a7:
0a:c9:57:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:11:04 2026 by rpki-client