Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: RyOokq3I+E0kSx4z90+ygnpF0EVtOjKUmhGulKxd7DE=
Subject key identifier: F2:3A:3A:19:B6:C8:C8:F4:49:AF:F6:10:B8:71:B7:89:2A:51:A9:D1
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01A146BB365A90B254625263732D0D834439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1AAD
Signing time: Fri 16 Oct 2026 22:00:36 +0000
Manifest this update: Fri 16 Oct 2026 22:00:36 +0000
Manifest next update: Sat 17 Oct 2026 22:00:36 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: ieAt77uTNrIM+9ddGtm778lelsTAPFit+0rjUZFELxQ=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:bb:36:5a:90:b2:54:62:52:63:73:2d:0d:83:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Oct 16 22:00:36 2026 GMT
Not After : Oct 17 22:00:36 2026 GMT
Subject: CN=f23a3a19b6c8c8f449aff610b871b7892a51a9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:f2:ab:6e:63:f4:f3:b1:46:d3:b5:80:66:
bd:0b:10:64:72:81:a3:7c:31:ae:5d:b8:41:a1:0f:
9a:1f:c8:0e:83:2d:63:42:33:25:bd:d7:7f:41:99:
91:13:f0:5b:26:79:45:ab:0e:17:9a:a1:93:47:ba:
f8:66:5b:26:61:0e:af:02:62:82:5c:12:4e:45:39:
42:86:6e:78:7a:d3:32:6e:a4:3c:47:ca:f1:67:d3:
f0:09:39:64:9a:de:fd:06:2f:79:d4:6f:1b:34:c6:
fb:33:a7:82:2c:57:e7:81:b0:97:e3:53:fc:a6:69:
36:78:fb:3f:a7:a4:d7:5e:77:ee:cc:65:d9:b6:46:
c3:2c:b1:36:98:a6:f7:76:59:5d:fe:0c:3d:d5:f0:
22:94:17:27:b4:31:31:27:75:fc:60:52:0b:98:10:
5d:1f:68:de:23:a5:8f:e2:cd:43:95:9a:85:98:a6:
77:78:b2:a0:c0:7c:e0:08:87:3b:4b:5a:28:af:81:
2b:84:60:1c:64:01:9f:54:ab:f6:89:c3:b2:b0:b5:
fb:8d:b5:ba:84:84:f3:f9:91:19:8e:4b:be:3e:a3:
70:6e:84:d8:ef:e1:b9:68:9d:65:c0:42:53:cc:55:
1e:ab:ec:1a:46:6a:6a:09:45:9a:14:8c:8c:bd:fa:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:3A:19:B6:C8:C8:F4:49:AF:F6:10:B8:71:B7:89:2A:51:A9:D1
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:1b:44:2e:ed:61:b3:76:0f:a3:2c:8c:52:ae:1d:e4:f2:
02:c1:62:52:2e:3d:19:77:35:b9:a4:fc:42:59:cc:07:a9:ff:
a1:03:98:9f:d1:5a:df:86:81:ed:84:7b:84:d0:84:bd:c0:bd:
22:f4:76:cf:89:60:72:70:af:36:e0:0c:7c:b3:33:bf:15:9e:
81:e5:c9:0a:c6:c9:d3:04:d5:66:9e:84:ef:81:38:83:5d:1a:
3f:12:82:fd:c3:c9:c8:7f:ea:86:ea:20:c7:5f:12:b0:79:24:
cf:f2:00:c3:98:b8:96:39:4b:04:41:2b:28:80:2c:0b:42:b2:
a4:a0:33:a1:15:89:79:01:e2:d3:96:ad:fb:34:8a:6e:55:d8:
ad:09:b7:04:b1:37:09:89:5d:44:2f:8f:f3:c9:d1:6e:0c:4f:
93:25:53:16:a8:51:d3:42:e3:0f:1c:e0:11:ed:df:eb:e5:40:
8d:0b:cf:54:50:7c:fb:60:d5:f3:f6:6a:30:27:fa:69:f0:e7:
ed:8d:55:1c:f8:dd:e0:e9:97:49:8c:71:b2:6a:ae:0b:a7:c6:
98:9e:67:1c:02:44:16:bc:9f:db:8c:a6:73:4f:09:f5:3f:bf:
a9:f8:73:7f:34:53:a0:3b:ed:83:41:d4:a1:7a:7f:18:85:f3:
dd:05:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:24:59 2026 by rpki-client