Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: JLDeUeDjiKgcgWuw7iEw6jz1m2lPm3BkuuRbNE8iiLk=
Subject key identifier: 0E:57:02:9C:4A:06:18:90:7D:EC:48:7B:77:AB:32:ED:2F:B0:D6:C0
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 01A1385B516EF06533A41AC0E372D3127B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 0BA9
Signing time: Wed 14 Oct 2026 03:01:11 +0000
Manifest this update: Wed 14 Oct 2026 03:01:11 +0000
Manifest next update: Thu 15 Oct 2026 03:01:11 +0000
Files and hashes: 1: fh9uRAVYnSSMh7fswD9NgEP6Yxg.asa (hash: OPltXIvomNjtQHGnIYuR9i3ncanMWYY9Ag1iFDtLcE8=)
2: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: YtBK/2nOBaTLllTqySvkQbIjEKf4T9q4DJ1sKl6c198=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5b:51:6e:f0:65:33:a4:1a:c0:e3:72:d3:12:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Oct 14 03:01:11 2026 GMT
Not After : Oct 15 03:01:11 2026 GMT
Subject: CN=0e57029c4a0618907dec487b77ab32ed2fb0d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:46:d7:53:1f:f3:78:75:c5:67:c4:14:4f:
e7:31:cf:38:ad:75:f9:e3:2b:24:dd:01:2d:6c:75:
74:93:f2:25:5d:fe:b7:62:a4:f4:65:80:4a:3e:f6:
fe:ff:63:c9:5c:d4:6d:76:67:c5:56:18:b7:cf:f9:
2c:3e:0b:65:2a:09:d3:79:cf:1b:85:41:c9:d6:bb:
2d:24:f2:43:a7:e8:11:ba:c9:92:3a:5a:9e:8c:f3:
14:51:0f:39:fb:8f:aa:8f:c8:bc:54:1d:f6:49:00:
17:ee:4f:f3:45:35:fe:fc:f6:1d:43:65:d9:db:af:
39:43:7d:d9:4d:7a:c6:10:22:d3:35:e4:a9:bc:16:
d9:13:2c:28:48:ab:f9:51:42:69:98:62:34:4b:6b:
9b:7b:aa:7a:80:6e:02:6a:61:a7:28:f1:6a:1e:0d:
d9:5c:b2:a3:03:d5:d9:d1:2c:67:dc:4a:77:bb:60:
5c:d5:a6:b6:19:82:f3:c9:1f:56:df:c8:87:36:2b:
71:67:cc:df:53:5e:a3:28:b0:a4:c1:79:ac:75:4f:
a6:10:d8:c8:68:0d:68:14:1d:f0:f5:6b:26:6c:bf:
ae:03:1b:98:82:41:f2:d1:d4:6d:8d:24:84:4b:8f:
0b:7d:a8:b9:cd:2b:6c:a2:2f:43:99:18:92:43:fa:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:02:9C:4A:06:18:90:7D:EC:48:7B:77:AB:32:ED:2F:B0:D6:C0
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:35:03:66:4c:8c:b3:79:a5:2c:80:e0:40:71:64:c6:24:
0a:f2:5a:b8:1c:73:bb:b3:28:d4:85:d4:3c:bb:a8:b2:f0:29:
14:76:de:ad:86:b1:5c:18:b1:dd:5a:3a:7b:b4:81:99:cd:8e:
49:8a:75:44:9a:2f:06:28:77:c1:09:c9:4c:d9:5d:3a:17:5d:
4c:07:6a:55:fe:43:1f:ce:b7:68:f4:87:2f:75:f0:de:fb:45:
dd:5c:ee:3d:8f:81:f0:86:f7:4f:98:2a:49:bd:eb:06:85:fb:
11:0f:d0:75:df:92:c9:f1:30:80:47:0b:31:a4:68:f0:9c:87:
7d:4b:4f:54:9d:0d:6c:6a:6b:22:9c:69:70:c7:7f:0c:24:c3:
e2:71:47:03:cd:05:b5:56:80:ae:b1:56:49:b5:c9:83:d3:c3:
8c:9a:18:b0:02:ac:62:cc:e5:a7:fa:43:36:91:78:19:4c:5e:
93:88:c3:f2:9c:63:d7:70:6c:99:4d:cf:22:e8:ee:cd:dc:e4:
33:1c:c9:6e:d9:95:07:b1:b0:13:24:3c:22:6b:e8:20:97:32:
9f:cf:30:46:2b:42:da:24:77:9b:01:95:f1:5b:70:8f:75:01:
8a:89:fa:bf:42:c1:10:a1:1e:44:5c:42:29:09:07:72:c4:19:
e4:cf:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:09:55 2026 by rpki-client