Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: ojEu//CpUKzJ4Onxd2m5YJ2RCBbin0GQDOfNY/+0zsk=
Subject key identifier: F1:40:D6:D0:BC:53:EE:43:72:2E:54:40:41:E8:8F:C2:D5:94:8A:4D
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 01A132591B503B2C5B7870435A54A0EAB44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 09EA
Signing time: Mon 12 Oct 2026 23:01:02 +0000
Manifest this update: Mon 12 Oct 2026 23:01:02 +0000
Manifest next update: Tue 13 Oct 2026 23:01:02 +0000
Files and hashes: 1: aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (hash: Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: AzJWiOSZBnRWCKP3hoNAXMlnmqPLECj4lO8zo74DLlw=)
3: wRelCGO5kr4PionuAw4TmZeTb24.asa (hash: R4hwvYPLQTU3+ZW26hz18/RfC35G0WghkbbOHFf/yeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:1b:50:3b:2c:5b:78:70:43:5a:54:a0:ea:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Oct 12 23:01:02 2026 GMT
Not After : Oct 13 23:01:02 2026 GMT
Subject: CN=f140d6d0bc53ee43722e544041e88fc2d5948a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:57:7a:a3:3f:0f:25:ea:4a:3d:67:8c:99:
77:0c:bb:cd:db:70:5c:cd:a1:e8:48:ed:b9:c1:f4:
d7:0e:d3:80:10:46:96:87:8d:88:75:35:8b:bd:89:
e5:61:80:c1:08:5e:37:1a:32:b3:77:7b:a9:d5:35:
50:62:11:78:03:56:31:6b:39:06:4a:5a:bb:f4:87:
58:4e:4b:d3:92:48:7d:b8:10:f2:e5:0a:6d:5c:19:
7c:78:a2:f6:00:b8:e5:76:65:f3:9a:48:b9:41:e3:
fc:50:c2:4c:82:72:49:55:12:eb:65:09:77:a1:30:
33:21:68:f6:1e:31:91:57:79:26:4f:85:14:7e:fd:
0a:23:01:92:a5:94:e9:7d:20:6b:6d:e8:11:cb:2e:
f8:c6:a6:88:72:3e:b8:00:7b:d4:07:bc:cc:42:eb:
b2:97:cb:de:ca:12:98:b3:dc:5d:ab:f5:51:21:66:
06:7c:de:61:3f:a3:fd:d5:e7:8e:2c:ea:7b:fd:30:
cf:8f:42:48:1d:bf:5e:70:d2:0e:14:4e:29:39:a9:
37:51:47:02:a4:85:a5:2f:50:a2:04:66:77:f7:5b:
6e:bb:26:9b:d6:45:f9:86:f8:b7:eb:ef:91:da:c7:
12:46:ee:ea:7d:77:fe:49:08:5e:2b:99:cb:1c:d4:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:D6:D0:BC:53:EE:43:72:2E:54:40:41:E8:8F:C2:D5:94:8A:4D
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:87:03:3b:f7:7e:d3:d7:31:49:c0:c7:aa:e9:ca:6e:74:d8:
52:0c:ac:2a:47:aa:01:53:6d:ac:c6:6d:94:fc:7e:aa:ea:c6:
44:f6:a5:f3:b6:dc:e0:5b:4f:ca:4a:8c:eb:fd:7a:aa:6b:24:
22:3e:7e:04:89:26:8a:1f:3c:cc:51:6e:50:e8:d5:32:fc:2e:
ca:a9:f9:fb:97:d1:cd:2a:94:a3:a2:78:0f:5e:28:04:cd:99:
cb:e7:d0:81:52:b8:8a:16:ad:02:5a:b4:9b:66:39:a2:dc:b1:
cb:4d:e7:2d:5d:78:51:10:61:f3:bb:ba:81:bb:f8:34:b8:cb:
07:f7:df:f9:46:fd:1b:d5:d3:60:93:82:75:d5:1b:23:dd:d5:
52:4f:7f:c6:52:19:18:06:13:6d:f5:20:75:ab:fd:7e:24:a5:
7a:8d:4c:53:5c:0c:f8:cf:f1:84:8c:8e:f4:d4:99:ee:ed:9f:
d1:b2:43:0b:53:45:7d:a8:a2:de:66:0e:f2:50:7b:2b:12:83:
e2:39:aa:75:b0:f1:d4:68:60:78:32:33:c4:8a:eb:e4:9a:73:
ca:af:5e:a4:7e:e7:72:b5:11:a0:0c:3a:61:9e:f5:cb:f2:f2:
ed:c0:60:42:52:e7:e3:b8:69:f7:79:1e:39:89:dd:0d:25:2b:
cc:fb:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:09:42 2026 by rpki-client