Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File: JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier: QP/n7vJGv5TM1xvE3tRis6oxyxpUJaPYTfJz8om4VUM=
Subject key identifier: 11:07:F8:58:E6:1C:AF:CE:4F:D3:41:2B:E4:8D:F3:CB:7B:7C:5D:ED
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 01A0D45D882463827532E6D37CB5922EB3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 17:01:34 +0000
Manifest this update: Thu 24 Sep 2026 17:01:34 +0000
Manifest next update: Fri 25 Sep 2026 17:01:34 +0000
Files and hashes: 1: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (hash: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A=)
2: C0xNgAEq_VkYSa0gjqSo4X9OgDk.roa (hash: rs9H4EjX84lTTLv+iIvf+6h9tBHNg+MMsrqn9SRaoow=)
3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: 6wtMKkuWRGndNxGWmbCwDTIThjU/Ew7POGOu+wc4wyA=)
4: PpAX2uR7dOm-fqI5gBjMqcI_sj0.roa (hash: hBH45ktoJ8q7ItYmiVnvXeZkIWerDTCntuxa+oH08yo=)
5: XVbyZDeAu74wqWgE4Lug0IJ0xJ4.roa (hash: G5/qOs1gotpqFOvbgNgnzqAQEWPvAJWudCVSYuYf4PQ=)
6: gVsFB1HmrHHx_F0oTpBh0qNylSQ.roa (hash: 0WvPL4gzlPSQJArhjHg92bA8wa85QK1qdsvxPM8R9XY=)
7: mcBG1OhhxrtDCLZbnbdmL8YYj1c.roa (hash: VU83ADSXkXkgxpUSiqeNZ14qzvTFwfPzksOEUTczOM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:88:24:63:82:75:32:e6:d3:7c:b5:92:2e:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Sep 24 17:01:34 2026 GMT
Not After : Sep 25 17:01:34 2026 GMT
Subject: CN=1107f858e61cafce4fd3412be48df3cb7b7c5ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:c1:fa:59:fe:f5:46:de:fd:1c:73:f8:2f:
5e:a6:bb:c9:f7:64:8d:6d:17:79:99:1f:d5:08:46:
62:8a:0f:7c:83:f7:9f:74:7e:df:f2:87:af:a9:f7:
c2:f2:b4:15:f1:ab:46:9d:31:3e:a7:c0:73:76:2e:
61:d4:b2:fe:15:fe:1a:67:a7:77:c9:7e:7e:a3:45:
95:bf:20:b8:e2:c5:49:0e:38:ac:01:c8:9e:4e:0b:
77:d6:7a:b7:48:47:e7:09:42:b0:02:14:38:59:eb:
27:56:94:85:46:d5:9e:25:da:4c:76:96:71:da:9e:
12:b3:1f:7d:d3:87:95:f4:9d:13:6d:ca:7a:56:d3:
50:3b:9c:84:ac:50:e8:4b:86:f5:fb:f1:57:0e:60:
5e:fd:d9:ce:20:8f:82:79:e0:ae:14:ed:6c:5c:ab:
ff:78:0a:9b:1a:f7:05:f1:5c:db:07:fa:fd:f1:b1:
46:cf:9b:cd:f8:11:68:83:02:75:59:eb:8e:7d:08:
58:d1:20:74:4f:c4:79:ad:40:c3:20:df:3f:3c:56:
65:fc:f1:8e:1b:0d:fc:72:41:69:b1:d0:12:d9:6c:
a6:74:89:c0:aa:ed:72:e8:c4:17:11:6f:8f:66:c7:
13:ff:f2:79:cd:cd:4c:8f:65:b0:5f:8d:e7:84:4f:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:F8:58:E6:1C:AF:CE:4F:D3:41:2B:E4:8D:F3:CB:7B:7C:5D:ED
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:53:fb:4b:51:3d:0e:16:4c:87:82:df:b9:9c:60:0c:00:34:
ac:bb:5c:15:98:5d:ca:1e:05:3e:db:03:ed:92:7d:5f:71:86:
92:34:da:0d:20:76:8d:18:9a:9a:94:9f:04:af:5b:d0:56:bf:
a9:67:27:e4:96:df:d0:f6:03:e9:98:d5:b0:03:83:5a:5e:f6:
77:f7:5f:73:2c:f2:f3:30:08:03:58:18:d3:4d:a2:8a:66:6c:
f6:b8:d4:6c:26:d3:b0:02:5d:69:4d:ea:63:03:66:83:19:a7:
ad:51:60:79:dd:7c:be:f9:d7:14:73:37:a4:56:ac:a2:b9:09:
0f:48:20:d3:6f:2b:48:b9:3c:6e:75:59:d9:9e:85:24:c5:15:
0f:4f:c0:93:a3:74:29:65:34:6f:2b:46:c1:62:2c:d0:48:d2:
e5:b3:c3:fd:60:f3:13:97:f8:bd:9b:d1:a9:a2:f5:62:60:df:
3f:0a:db:97:a5:b2:44:11:63:48:3a:67:7a:6d:fe:cb:9c:08:
1a:04:d0:51:62:24:9c:50:11:0e:94:97:2e:d1:8f:77:30:bf:
4c:c3:16:7d:ec:d7:f1:ea:18:c1:79:f2:68:b4:98:ba:06:cf:
5a:b3:49:37:9a:45:5d:5d:b9:10:ed:fc:cb:37:a0:10:15:64:
6f:7d:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:30:13 2026 by rpki-client