Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: f/9MDnJJYOFBEW3Eb8LyVuLYGlUPTzMbAGWyjKKnpjg=
Subject key identifier: 79:A7:7A:75:E1:95:02:DA:EC:C9:FF:35:04:9D:E1:87:D2:E0:51:CD
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01A0CFA44CAC235C3BE6C8EB8F54675CAEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 153B
Signing time: Wed 23 Sep 2026 19:00:46 +0000
Manifest this update: Wed 23 Sep 2026 19:00:46 +0000
Manifest next update: Thu 24 Sep 2026 19:00:46 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: XbrtsheGxkPp6a+F9xiuTkr245XgKM30u2kLMLvpzD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:4c:ac:23:5c:3b:e6:c8:eb:8f:54:67:5c:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Sep 23 19:00:46 2026 GMT
Not After : Sep 24 19:00:46 2026 GMT
Subject: CN=79a77a75e19502daecc9ff35049de187d2e051cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:ea:36:39:f3:16:19:69:75:cd:54:57:01:
73:5e:e4:cc:b7:17:3c:82:d3:45:b0:97:34:0c:f6:
d6:d6:db:54:49:60:0b:8d:dd:7b:e5:e2:e3:3b:65:
3e:7a:62:c8:3b:82:c3:87:1e:c8:6b:3f:47:d4:9f:
05:64:92:38:fa:32:b7:a6:8f:f1:78:a2:46:fe:ec:
23:84:6e:14:de:20:2e:0e:26:65:da:b0:b9:f8:db:
89:87:0e:75:26:c8:47:db:93:61:2c:b0:a8:20:ec:
70:aa:c3:5c:ca:2d:65:20:00:c5:35:1d:fd:5d:f6:
61:9c:3e:00:83:36:66:6e:f6:f5:cb:46:d2:36:7a:
46:5f:95:84:48:11:95:79:b7:b3:b6:91:9f:ac:eb:
3d:5f:fb:a4:ee:70:2a:6d:3c:59:df:fb:ea:cf:8e:
85:fb:d4:7a:e3:03:1b:7d:da:4e:64:73:aa:27:de:
82:02:8b:2d:b8:c8:cb:cb:13:68:d1:27:d5:da:5d:
84:d2:ac:c4:7e:98:3f:c8:02:c0:9d:69:95:a8:ee:
a3:4f:bd:98:56:7d:c7:24:dc:b3:91:e8:85:7b:d5:
b5:c6:b8:83:07:e3:f9:28:de:e1:fd:90:fd:14:90:
30:42:87:97:21:5c:ec:2e:70:86:68:ab:c4:ae:e2:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:7A:75:E1:95:02:DA:EC:C9:FF:35:04:9D:E1:87:D2:E0:51:CD
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:ee:13:86:99:e5:e5:d8:ee:f8:36:43:82:07:22:5e:65:
2c:a7:9c:6a:af:ec:55:f3:d5:09:7c:82:28:c4:96:cf:a4:62:
20:b4:62:81:a4:63:8f:e0:9f:fc:42:77:cd:94:da:c0:a4:36:
a2:a8:a8:e0:2d:58:87:08:71:21:99:82:17:3d:64:96:03:66:
53:ce:2a:95:e0:7c:a7:b2:a3:99:89:af:15:2d:ec:9e:72:62:
c1:02:63:40:18:e0:44:e7:bd:6c:76:5c:4f:b6:7a:2b:ac:04:
c0:16:36:95:73:97:9f:18:8e:de:da:10:25:2b:f9:a7:3c:ef:
c8:d5:37:5c:ab:a2:7c:20:88:44:74:63:3e:71:0e:ff:d1:2b:
2e:c7:fe:8a:32:ec:42:c5:da:2c:78:68:1c:27:5d:14:b6:fa:
c5:0f:9a:d2:29:ea:49:cd:6a:73:7d:ce:66:6e:1d:5a:40:ac:
75:25:65:6d:60:ad:f6:27:30:13:9b:c0:9c:00:dc:6f:a0:97:
c9:ec:64:8f:af:aa:6e:29:8e:29:f1:d4:ab:56:50:b4:29:7f:
00:58:74:92:90:72:9f:4c:44:8c:6b:cc:d9:a8:54:54:cd:a7:
71:62:75:57:d4:5e:89:f0:48:ed:cb:28:46:56:52:a9:a4:92:
d4:16:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:01 2026 by rpki-client