Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: eShJr3nFhn9eIIVDc3CppGhzXVitxGPa8RZ2OAXL+kY=
Subject key identifier: 1D:70:12:4F:48:7A:82:B7:47:40:2E:4D:86:55:FF:DB:E7:FE:AE:23
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 01A12C8E0C4F0655CD6484C8D4E3AF92EE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 20:01:09 +0000
Manifest this update: Sun 11 Oct 2026 20:01:09 +0000
Manifest next update: Mon 12 Oct 2026 20:01:09 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: SB8EFRktGYl+IyQviTBzQw6CKLkANEBihrpt5BA+BUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:0c:4f:06:55:cd:64:84:c8:d4:e3:af:92:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Oct 11 20:01:09 2026 GMT
Not After : Oct 12 20:01:09 2026 GMT
Subject: CN=1d70124f487a82b747402e4d8655ffdbe7feae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:db:91:ae:c3:dd:b5:55:10:ae:56:c9:19:
fc:f9:18:97:39:5e:fa:be:f1:31:a0:56:5d:7e:02:
4f:9d:62:73:db:e4:a5:ec:0a:66:4f:0a:2a:cd:74:
38:49:7a:72:95:d7:13:93:9b:6b:02:7a:ce:2e:21:
49:d8:9d:fc:5a:52:57:16:95:dd:a9:7a:68:13:0f:
b2:2a:14:4c:6b:ed:eb:5b:a5:fc:8c:18:38:7a:2e:
1d:50:32:57:4d:d6:a0:50:66:8e:12:6c:be:aa:ba:
b7:c2:3a:52:1b:99:1f:28:16:62:f3:1a:1e:75:dc:
fc:95:f3:18:b5:63:ab:d1:d8:b7:46:45:49:52:c5:
2e:e3:6a:82:a8:5a:bc:1b:e9:6d:c6:cf:32:ae:fa:
9f:70:ce:0d:03:88:8c:36:3e:11:02:b2:84:a7:61:
7c:a2:63:82:5e:6d:95:07:03:18:48:83:a6:48:73:
0d:7c:98:01:3b:4b:f9:37:9f:a6:63:de:5e:85:06:
a9:bb:e2:52:b4:ed:6e:ff:42:f7:6d:ff:6d:87:9d:
37:fa:db:5c:08:17:25:c1:6d:7e:f3:dd:19:7a:76:
e8:ea:74:85:d8:a1:24:48:cc:43:0f:cb:59:e7:87:
f6:84:d9:f1:04:8e:cf:c8:52:78:4f:7b:c4:06:98:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:12:4F:48:7A:82:B7:47:40:2E:4D:86:55:FF:DB:E7:FE:AE:23
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ea:42:8a:c7:b4:53:fd:3e:79:b7:ed:d6:cf:98:48:56:a8:
c9:c0:ca:f7:12:da:87:99:f5:f3:73:b8:25:21:e3:67:99:19:
a9:8f:d9:a0:25:6e:32:8f:a2:13:a0:a9:91:60:30:8c:d6:37:
1f:e9:0b:8e:b9:d8:bc:82:cb:47:fa:e4:48:91:2f:8f:a4:bf:
c4:85:cc:6e:7d:28:e6:70:b9:83:79:05:7b:73:e9:d5:e7:4e:
f7:96:5e:44:fc:2f:35:b8:a7:e3:bf:76:cc:87:24:94:38:d6:
ac:d3:af:11:5c:d6:67:cb:2d:6b:cc:ef:fb:44:0e:9a:7e:09:
b9:5d:ef:40:2d:1d:e7:ef:6c:c3:7e:a9:e3:a6:81:c4:2b:eb:
83:9d:90:00:e0:60:93:51:24:4b:c9:89:34:6e:b2:f0:d1:5c:
c7:e7:19:3f:fb:8f:c9:53:bf:85:bf:b9:ab:ad:b5:7b:25:b6:
c3:df:e4:20:2a:25:cc:47:8a:1b:8c:89:70:09:bf:a7:c1:44:
7f:8f:fe:23:eb:29:0b:3d:4c:69:89:28:db:33:1a:55:2e:70:
c7:19:21:67:11:90:3d:44:16:f9:cb:ac:0e:70:2d:ac:81:f6:
5b:7b:ca:45:1a:93:a6:d5:88:ee:80:3f:e4:63:5a:25:b3:36:
96:61:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:35:27 2026 by rpki-client