Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: 3GAEjJZjljMbpZdSaxR6WMzHlF4vVsjr6aY0RquhP/c=
Subject key identifier: 95:70:C4:B2:54:7A:97:9D:E3:A0:7D:31:0B:B0:2C:5E:69:82:91:3F
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A0C9345E91F45E688866DFCFF5D224E24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 17B4
Signing time: Tue 22 Sep 2026 13:00:47 +0000
Manifest this update: Tue 22 Sep 2026 13:00:47 +0000
Manifest next update: Wed 23 Sep 2026 13:00:47 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: NrTnDJMgd9P6V7OU39/2SpSbyFLdXf93xYf9yR5LLqM=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:5e:91:f4:5e:68:88:66:df:cf:f5:d2:24:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Sep 22 13:00:47 2026 GMT
Not After : Sep 23 13:00:47 2026 GMT
Subject: CN=9570c4b2547a979de3a07d310bb02c5e6982913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:91:39:9d:d3:83:d0:bf:2e:00:da:b2:44:
d1:7f:5b:79:a5:6e:be:e8:75:11:70:49:e9:4b:96:
d0:b1:57:3b:84:a9:56:fb:10:6e:a7:c0:bb:b8:cd:
b6:f1:28:97:08:c7:79:11:4a:69:ce:82:bc:90:3a:
50:d0:4b:3a:55:07:16:c4:f8:53:55:57:77:f5:4f:
92:6f:53:10:92:04:67:3f:a3:02:18:38:6a:76:a9:
1d:55:ab:0d:e0:2d:54:52:35:7b:ff:0a:6d:16:b1:
78:ae:50:e2:bf:0e:01:d1:1c:b5:0d:a1:56:3a:13:
8e:cb:72:c8:b8:8b:82:33:6a:04:3a:31:c1:0e:6f:
6f:2a:f8:a4:e8:66:d6:f6:22:bd:0a:f3:02:de:63:
04:33:f2:31:61:73:63:db:25:d4:2b:69:4f:81:ff:
31:15:4d:c2:d6:86:7d:a2:6b:91:5c:f8:ba:88:b5:
31:cc:e1:f4:d3:a3:12:79:09:9b:78:5d:40:9b:f2:
7c:c6:e0:03:e3:de:b6:85:bf:53:40:ca:45:ff:bb:
65:6c:5d:08:f6:99:f4:29:c2:ca:e6:81:80:25:8c:
f9:80:3c:e7:52:ce:45:5b:f6:4e:07:b2:5f:6d:2e:
82:f3:78:ca:cd:69:a1:f3:23:3f:d4:d6:32:12:85:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:70:C4:B2:54:7A:97:9D:E3:A0:7D:31:0B:B0:2C:5E:69:82:91:3F
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:27:6b:64:0f:53:ed:cf:28:67:de:76:7b:f0:e6:89:64:7e:
ce:44:76:c3:e8:b1:e1:3a:b5:90:83:49:9e:33:42:e6:b1:f2:
50:d2:23:22:db:12:0a:f5:27:80:7a:12:c9:e3:31:3c:d2:bc:
5f:e9:31:92:e2:f5:4e:70:9a:54:c7:1d:95:db:ee:ac:b7:64:
e3:c8:2c:52:0e:e1:51:81:87:46:8c:1c:c6:30:d7:bb:16:87:
d0:fb:79:c2:13:8f:57:98:e7:4f:30:ea:af:40:ae:9f:80:ce:
74:fb:4b:0e:be:11:48:01:34:11:28:51:e0:e0:bf:49:d3:14:
e7:69:e2:69:8d:4c:45:d1:15:f0:b5:73:70:2c:70:fc:f9:df:
c7:af:95:ae:49:12:0e:21:f7:43:94:7a:db:71:be:fb:01:cd:
24:90:3c:33:f6:5c:57:c6:c8:42:76:da:cd:ab:0e:83:c2:e6:
ee:58:2e:71:26:09:ce:4b:d9:99:10:06:a1:ee:4d:69:5a:41:
5a:3b:da:59:5c:52:cb:b7:22:c6:17:3e:0d:70:0a:00:12:9f:
67:66:ee:59:e2:a5:33:be:db:fb:6d:57:a2:9e:85:3d:25:6c:
0a:49:b5:8d:1d:5a:1b:b2:57:d8:d6:9a:e5:78:51:72:e4:1e:
4a:15:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:56 2026 by rpki-client