Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: lp51NCp0LvSlrHc+Y0pXltyagiey7aoXFIfxtvLDIhs=
Subject key identifier: 94:BE:5E:93:71:BA:93:D5:97:32:51:3E:7B:10:94:4A:AE:1F:BF:E0
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 01A0D682D468B035DF8F740C921A6178025B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 03:01:33 +0000
Manifest this update: Fri 25 Sep 2026 03:01:33 +0000
Manifest next update: Sat 26 Sep 2026 03:01:33 +0000
Files and hashes: 1: GkzZaU9MgVD-nMdbajbpL-Lxeic.asa (hash: a29ZY6jDI+dNv380NXhhKvjL2Q9sgN1KzPSWh3x0GTw=)
2: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
3: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: XhWrUbLiY4eQ0JDUeZ092sh8KYbKbU8g61hzlWnJIJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:d4:68:b0:35:df:8f:74:0c:92:1a:61:78:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Sep 25 03:01:33 2026 GMT
Not After : Sep 26 03:01:33 2026 GMT
Subject: CN=94be5e9371ba93d59732513e7b10944aae1fbfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:8c:76:ac:45:14:e7:ee:32:d6:4a:d2:6f:
a9:10:1b:02:6c:5a:34:3b:7c:8f:c7:4d:cb:d2:ee:
4d:e8:75:0f:d1:13:96:74:8e:f4:e3:72:9d:8b:c5:
78:73:30:7c:98:94:c9:6d:7a:c7:b1:74:d1:0d:a6:
63:1b:68:fd:bc:87:c3:d3:c3:41:79:b8:4a:27:24:
55:19:70:55:b2:22:35:76:d0:1c:94:b7:3c:99:65:
0f:a4:e1:1e:83:18:3a:fc:b3:14:21:91:2e:1f:b5:
b1:2e:29:c6:42:9a:1e:50:45:3e:63:67:37:8e:9f:
2b:9d:b5:c6:fa:1d:7a:bd:31:83:6e:b0:ac:10:26:
7e:e9:46:ba:ef:4f:d2:12:b0:e8:49:fb:08:00:20:
a6:cb:29:ec:cd:c1:8d:e0:28:d9:23:0a:de:27:24:
11:f0:47:6e:2b:6b:ef:ab:ee:f2:79:09:f2:44:61:
f6:23:78:2a:bc:12:8f:13:c1:6b:92:33:d4:4f:0d:
aa:fc:68:26:aa:52:43:de:e7:6a:2a:5f:85:85:c6:
51:da:de:74:13:72:9f:14:a2:eb:46:9a:0e:16:78:
b5:e3:af:94:98:d7:e4:bd:1f:b5:af:bf:26:34:72:
b1:c7:79:53:f9:21:40:77:9d:b3:69:86:38:38:f1:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:5E:93:71:BA:93:D5:97:32:51:3E:7B:10:94:4A:AE:1F:BF:E0
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:bc:24:df:2d:cc:e3:16:fd:7c:49:96:ff:3a:ac:a2:90:
72:b4:8f:58:0d:de:b4:3f:e4:7e:73:09:2b:6b:69:e8:96:a6:
fb:7c:08:88:6e:89:d4:c0:e3:91:0b:b0:89:d2:c5:0b:de:ab:
ea:8c:d7:3a:e1:56:8f:45:11:9f:11:7e:d1:cc:3c:bd:a0:0f:
6e:d2:73:2e:38:61:23:2b:1b:69:ff:42:70:f1:c9:26:46:ea:
7c:be:36:2f:d1:ce:26:83:7d:2f:0c:29:63:a7:81:94:0b:0f:
ae:e6:d7:63:fc:68:2b:83:60:b2:d5:c1:a8:96:61:9a:63:b5:
14:83:dd:8e:11:06:d0:ad:28:1d:77:8d:d1:a8:a4:5f:f5:f2:
a6:f0:f7:97:ab:0d:9b:d0:7a:1b:a2:69:cb:65:9b:0a:87:0d:
9e:5b:62:40:98:14:12:a5:99:e5:e4:cf:76:62:39:61:ea:91:
dc:33:9b:ff:15:16:56:37:73:dc:b3:01:a0:b8:07:1b:75:4b:
23:98:db:95:c6:18:82:f7:c7:e2:6c:c3:1b:23:8d:69:7c:60:
da:aa:22:d8:73:6c:85:0a:a5:42:c3:ee:04:34:dd:ff:e4:eb:
03:3f:ef:b6:69:26:ef:08:c5:42:fc:b9:f3:99:fa:8f:68:df:
13:e6:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:38:23 2026 by rpki-client