Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: fc3Tn4JFBIXPXWmAr8TPUpdaBKhwQA4D43RaZghj+LQ=
Subject key identifier: 43:52:06:31:CA:92:0D:59:2D:3B:4C:14:EE:3C:B5:46:92:0C:F8:0D
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 01A0D796E584E5DFDDB53A8C9BAEB45D3A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1A7A
Signing time: Fri 25 Sep 2026 08:03:05 +0000
Manifest this update: Fri 25 Sep 2026 08:03:05 +0000
Manifest next update: Sat 26 Sep 2026 08:03:05 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: NCGKSngq7LPF5qLnPmAfbmQexWjsLAMJFyvDWxQS/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:e5:84:e5:df:dd:b5:3a:8c:9b:ae:b4:5d:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Sep 25 08:03:05 2026 GMT
Not After : Sep 26 08:03:05 2026 GMT
Subject: CN=43520631ca920d592d3b4c14ee3cb546920cf80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:00:69:18:ae:07:b5:be:30:a7:99:c9:6e:
9e:f6:32:fd:8f:79:a4:d1:3c:5c:0d:2c:c7:d5:46:
31:53:1f:20:a1:ee:e9:cf:2d:89:c3:3b:36:b6:b9:
57:2d:1c:15:a0:63:04:d2:9b:97:54:a4:5a:e5:0f:
56:64:22:77:f2:43:91:c1:c6:a2:e0:ce:97:cd:41:
7b:e5:05:c9:2b:bf:9c:20:c7:51:d4:39:f7:cb:06:
4c:1e:43:a3:37:c4:36:9c:17:2b:12:3c:b9:8b:a8:
93:00:10:87:16:f8:c8:bb:4a:ea:19:c7:b4:34:4e:
71:33:25:42:a6:18:97:f7:ba:ec:05:8a:4c:1f:c3:
57:df:be:d4:ca:5a:00:ca:4e:32:ef:2d:1e:66:25:
58:5c:ad:31:1b:43:30:f3:a2:73:2b:e8:54:d9:d8:
c1:f4:12:84:05:56:0a:a2:76:6d:59:d4:38:44:28:
08:05:ee:7c:d0:4a:0b:82:61:b7:10:5d:2d:56:4d:
9f:73:89:f4:17:20:63:a2:ff:d9:13:71:c1:e9:6a:
3b:ea:bf:94:4c:cf:df:61:98:66:f8:4d:f5:32:16:
81:e0:f1:ef:30:3e:8b:9b:d8:04:0e:70:44:ba:2c:
f1:e9:a4:1c:5f:b6:12:f6:ea:46:07:e9:aa:00:a5:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:06:31:CA:92:0D:59:2D:3B:4C:14:EE:3C:B5:46:92:0C:F8:0D
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7f:d6:bc:ec:b1:69:e6:5e:a4:4d:2b:e6:5e:e5:12:62:bf:
76:8d:32:5d:08:91:f1:86:96:ca:2b:70:85:d0:53:c2:53:50:
a6:3c:f8:f7:13:82:fc:d8:d2:a2:6f:12:94:0a:d1:91:f4:8f:
dd:91:1c:c9:30:72:fd:34:6c:ac:15:71:35:12:61:7b:60:1c:
66:64:78:8e:b1:a6:67:52:bb:75:9b:51:cb:83:0e:18:8f:e8:
12:36:a0:41:63:67:fa:84:4c:19:b6:f9:7f:6b:9a:e6:5b:b4:
8e:ee:89:7b:53:62:80:b2:db:53:a7:7c:ff:74:e9:9e:9a:66:
ad:d6:02:ef:fa:b0:49:7b:fa:dc:eb:f6:0b:d1:d2:32:14:d7:
7a:48:5f:96:b0:7f:ef:91:5f:f9:31:2e:d4:a7:2d:23:ea:43:
e8:fb:bb:f8:c5:64:49:db:7d:f5:57:b4:02:b1:db:44:e4:a9:
cf:a5:52:56:9b:b6:3c:85:a7:55:3a:34:f2:10:15:ae:84:57:
76:b6:4f:e6:cb:90:9a:c2:7c:78:36:db:01:f3:66:72:d4:41:
60:d8:fe:8a:5d:8c:f9:fc:35:7f:e0:b7:2e:62:b5:22:1e:15:
e1:8e:a4:3a:55:99:37:9c:db:e8:62:44:1f:ff:e2:f1:b2:3a:
49:dd:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:43 2026 by rpki-client