Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: 3jNebPePS8Py+pce7kMlV0xyjK0yZooiJKi9HK+mdBI=
Subject key identifier: 8C:0B:39:9F:24:7B:AF:B7:EE:AD:19:C9:40:89:E9:65:8F:82:F8:87
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01A101362987737CD999E61DB25180306E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1394
Signing time: Sat 03 Oct 2026 10:01:29 +0000
Manifest this update: Sat 03 Oct 2026 10:01:29 +0000
Manifest next update: Sun 04 Oct 2026 10:01:29 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: uzToq+Zs0YaSM5APv+66bkaxBGqe06OKX3Z8vvZX0yo=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:29:87:73:7c:d9:99:e6:1d:b2:51:80:30:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Oct 3 10:01:29 2026 GMT
Not After : Oct 4 10:01:29 2026 GMT
Subject: CN=8c0b399f247bafb7eead19c94089e9658f82f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:de:5c:9d:d3:c7:54:8e:a6:0f:f6:71:58:
63:e6:d8:a6:c5:30:94:0f:47:4f:03:f5:cb:7a:fe:
8c:cb:f1:47:56:a9:ca:af:94:62:46:cf:15:bb:91:
89:09:6e:e7:ee:a1:a4:db:73:b5:81:dd:13:4e:1b:
c0:f6:86:30:50:5b:e2:49:8c:e6:d9:03:d9:bd:15:
12:21:12:c4:af:06:65:3d:f7:61:33:11:dd:c5:97:
96:0d:fa:3a:21:d5:14:2a:21:e0:e2:47:11:b0:5a:
64:7d:9a:a5:b3:74:cc:a3:b2:94:ba:af:f5:d5:00:
50:ee:bd:89:aa:ae:72:df:71:61:f1:d5:f1:1a:29:
bc:c8:3a:ce:46:54:b7:03:28:df:d0:26:0e:7e:bc:
dd:7e:5c:0d:48:d8:5d:d9:81:ee:d5:ff:92:77:05:
61:79:28:08:32:00:00:d0:47:d4:d0:ca:f8:53:2e:
2e:55:f1:4a:13:c6:d0:f3:65:70:49:82:be:d4:b9:
8f:e8:0f:24:0d:84:fc:b3:f5:20:4b:56:92:7b:90:
c9:83:35:2d:b3:be:f4:b9:4b:19:5e:76:82:62:18:
cb:9f:78:8f:bb:c0:ee:0e:00:63:2b:b8:43:a9:d2:
79:dd:7f:58:b1:49:1f:3b:96:47:fc:74:6b:b7:60:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:39:9F:24:7B:AF:B7:EE:AD:19:C9:40:89:E9:65:8F:82:F8:87
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:83:77:e7:08:c0:14:24:78:de:04:26:a3:ce:a3:82:e4:
59:0c:8a:db:3a:70:70:b3:58:f4:54:cf:22:5e:64:6f:18:0a:
8c:7a:72:57:fe:ee:4f:b4:2a:d7:7e:ab:36:1a:fb:51:c9:04:
4f:4f:81:5e:d2:8a:c8:28:14:b1:2d:d4:72:da:0a:4d:62:31:
48:3c:32:4a:86:68:8d:35:f7:1c:1e:d1:bf:5a:66:ec:0f:25:
c9:d5:9c:03:e3:9c:78:ef:53:bb:e0:66:07:76:ff:0b:7d:9f:
40:52:ea:80:3b:bb:d4:30:15:dd:5e:53:26:3d:a3:9a:7c:57:
f7:1f:e3:ef:84:f8:40:bb:55:f0:e8:de:d5:14:c0:9b:97:7b:
81:f4:a4:7b:16:5d:3a:a9:b8:5e:b1:23:cb:a9:44:f9:26:93:
36:b7:58:20:c2:68:d7:d4:49:e5:d7:56:44:e4:ef:98:df:ea:
4a:5d:d2:ce:f7:ee:58:bd:69:00:21:a9:dd:3b:7a:6b:82:e0:
81:72:f3:47:df:cf:f9:10:0c:a1:48:a4:58:24:77:6b:71:d0:
c8:99:75:ad:59:b0:73:bb:e2:77:a8:97:93:8d:34:01:93:43:
04:5d:20:61:be:3e:a7:7d:6a:73:da:b7:4f:a8:a3:41:07:38:
4b:64:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:39:38 2026 by rpki-client