Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: 4m6rDM6ByHFhG6OaS6+8UxKOM32zhMvBPr7b++e3vxc=
Subject key identifier: 7F:67:30:8D:91:71:6B:64:AB:55:33:CC:C6:1F:BE:DB:9E:9C:26:8F
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 01A1DE027178F8CB00446210BA62B1577063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 1865
Signing time: Sun 15 Nov 2026 07:01:04 +0000
Manifest this update: Sun 15 Nov 2026 07:01:04 +0000
Manifest next update: Mon 16 Nov 2026 07:01:04 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: b6dmTL6HcG8+einBvRw74uwt29zSFjixHvYF74itStk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:71:78:f8:cb:00:44:62:10:ba:62:b1:57:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Nov 15 07:01:04 2026 GMT
Not After : Nov 16 07:01:04 2026 GMT
Subject: CN=7f67308d91716b64ab5533ccc61fbedb9e9c268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:5e:44:3e:54:3a:8a:55:e4:f0:b4:34:04:
98:d6:43:06:15:85:25:d2:e8:81:dd:6e:d4:47:d5:
19:6d:6c:33:df:ef:1d:13:97:d6:4c:14:b4:50:ee:
46:f5:06:1f:e2:76:9a:8b:1d:ab:eb:a9:32:c3:d7:
28:22:32:84:de:fb:38:dd:7f:33:e3:7d:bb:f2:be:
25:12:0c:a7:7b:f1:c3:e2:2b:59:75:81:6b:c9:3a:
7b:cf:31:2f:aa:b9:f3:75:70:05:52:e4:e1:6c:47:
7a:5c:00:ef:f8:12:9f:b9:66:02:22:3c:d6:01:c8:
6b:6a:77:8c:2b:5f:77:3c:cc:59:ff:bc:e5:19:bf:
cd:fc:9a:b9:5a:6b:d6:d7:c9:da:8f:6c:65:83:63:
49:81:a0:d4:99:9a:ad:02:2b:35:4f:99:67:c1:eb:
10:a5:ed:0e:90:f6:50:3e:42:1d:22:8a:9c:a3:2f:
ff:ea:82:13:64:01:b9:85:24:e5:0a:a3:f2:cf:38:
29:95:fc:15:dd:25:e5:d2:64:71:e4:90:b3:20:e5:
1a:1d:b7:41:b3:1a:c3:c1:0b:35:75:21:85:8e:f4:
8f:eb:3c:27:f1:ad:33:6b:cd:66:6f:ba:64:0f:75:
8f:a6:3f:da:09:af:bc:5b:38:09:6b:c8:48:5e:88:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:30:8D:91:71:6B:64:AB:55:33:CC:C6:1F:BE:DB:9E:9C:26:8F
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:7d:80:6b:25:d2:ac:f6:98:f1:d5:6a:6f:92:88:ed:43:
00:28:dc:63:45:e9:0e:47:7c:a2:d8:a6:e2:38:c5:64:46:72:
a5:1c:9e:eb:c8:8e:ee:b2:ee:15:29:ac:e6:4f:23:f5:c2:ac:
97:6f:fe:ef:47:76:1f:6e:90:64:ed:4f:5f:05:34:57:04:f3:
29:00:cd:3d:00:83:33:34:a7:d2:80:bf:0d:4b:c1:1f:6a:8c:
64:4b:12:de:54:5e:48:ae:ca:37:99:b7:c8:f9:25:b7:16:33:
d3:a3:8d:25:cd:d5:da:6d:79:3e:19:d7:9d:11:c9:7c:c6:74:
a7:51:4a:bb:f4:f3:ab:29:4d:92:7a:7b:3f:61:e9:3a:4d:84:
ea:54:e2:a6:79:9b:32:1c:ff:55:27:d5:50:75:0c:4b:bf:d2:
39:48:c1:f3:44:99:c0:40:e5:51:50:0a:23:44:78:8b:5b:fd:
c8:6e:c8:42:fc:f6:34:d3:6f:80:27:5f:ac:f9:19:74:22:a0:
f6:f9:24:f9:bf:b3:cf:c0:ba:3a:90:31:4d:68:7e:2b:4f:d3:
d3:4c:f5:56:a6:81:22:af:e3:0f:63:e2:a0:0c:f8:4d:a1:dc:
4f:d6:26:b3:17:e7:99:5f:f2:35:48:9a:e2:99:ff:7c:2d:0a:
77:01:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:42:58 2026 by rpki-client