Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
File: jSO9EjEKkSMxYPAReGphEDDw-l8.mft (raw, json)
Hash identifier: 1d6kqiYlI6G7etQZahyxsDTWBELZuM2pyyCTSSUyvvA=
Subject key identifier: 86:E1:DA:E5:45:4C:17:2B:88:4C:61:7C:8D:50:97:25:E2:CF:57:15
Authority key identifier: 8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
Certificate issuer: /CN=8d23bd12310a91233160f011786a611030f0fa5f
Certificate serial: 01A136A3C02DAE0D140C822DF706EEDD523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
Manifest number: 03A5
Signing time: Tue 13 Oct 2026 19:01:03 +0000
Manifest this update: Tue 13 Oct 2026 19:01:03 +0000
Manifest next update: Wed 14 Oct 2026 19:01:03 +0000
Files and hashes: 1: jSO9EjEKkSMxYPAReGphEDDw-l8.crl (hash: wVE+ia0jjZF/0NKVjT1l7r8TytMBeHEJla1ZENUCidk=)
2: qN669ymg8nK0FcenUzEimvS6bD0.roa (hash: BwVKGc9Um4MKhEVa9QsPEHNNx57h0Tvo1ZPD7iZnTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:c0:2d:ae:0d:14:0c:82:2d:f7:06:ee:dd:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d23bd12310a91233160f011786a611030f0fa5f
Validity
Not Before: Oct 13 19:01:03 2026 GMT
Not After : Oct 14 19:01:03 2026 GMT
Subject: CN=86e1dae5454c172b884c617c8d509725e2cf5715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:e8:2e:61:6b:cf:4d:5d:00:dd:24:c9:b2:
42:52:7b:7a:32:b4:cd:e2:48:98:06:a3:6c:55:59:
3c:94:53:96:90:4b:a6:12:a6:4b:7e:40:2b:4c:0b:
76:3f:27:f8:54:18:f5:eb:ac:0c:04:8a:5d:da:0e:
f4:a7:6f:e1:0a:44:c7:ea:52:57:80:66:fb:28:93:
18:c8:cb:c2:40:83:e9:27:9a:ba:bc:25:53:c7:a7:
5f:78:7a:06:41:1a:7a:d3:07:2d:dc:b1:93:a6:d1:
fc:72:f8:f8:08:2f:f8:4b:f1:86:bc:db:b7:06:0d:
42:b5:ad:6a:c1:13:96:6c:c6:4d:6c:1a:9c:fe:1f:
5e:26:5a:e1:45:ac:bc:8d:48:39:e6:d8:ea:a2:39:
f7:46:1c:ca:3d:87:cc:53:f5:b9:9b:14:f4:c4:2d:
95:2f:f9:f4:4b:a8:69:af:a7:f3:a5:53:38:31:c2:
62:7e:fa:df:05:9b:c0:8f:17:6d:62:ce:6c:d3:70:
64:0e:09:36:29:6d:47:0f:9f:fe:76:bf:5d:29:16:
ad:a6:34:d2:0c:0e:86:11:d3:b2:97:76:3c:1f:40:
84:09:61:5a:be:02:af:3d:ee:1b:d7:6f:31:59:c7:
14:93:4c:fb:e2:50:0a:c2:f8:b0:57:ae:dc:11:94:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:DA:E5:45:4C:17:2B:88:4C:61:7C:8D:50:97:25:E2:CF:57:15
X509v3 Authority Key Identifier:
keyid:8D:23:BD:12:31:0A:91:23:31:60:F0:11:78:6A:61:10:30:F0:FA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSO9EjEKkSMxYPAReGphEDDw-l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a71e45-80ee-4887-83b1-498b9d4f757e/1/jSO9EjEKkSMxYPAReGphEDDw-l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e0:48:77:a7:b8:ea:be:b0:4a:33:f9:74:bf:d8:e6:06:26:
34:78:9c:96:a8:f8:5f:f4:69:bc:10:a0:fc:f8:ed:2e:9c:62:
0c:e0:34:94:a2:ba:d0:c9:c6:77:f7:80:88:b4:2f:fa:09:41:
ee:ed:a1:8b:f9:ef:d5:1c:b6:c2:fe:6d:3e:ef:11:9f:27:c7:
78:52:10:05:2f:2b:33:ce:2d:38:99:43:82:1b:7f:51:74:31:
05:ed:28:e4:c2:e9:44:00:a4:82:da:94:82:18:36:22:4f:13:
e4:32:e4:df:43:1b:b6:b0:71:ae:3c:3e:c1:85:62:25:aa:d7:
e0:06:10:ac:c6:bf:66:ea:62:53:f0:8a:28:87:8f:e5:ec:7d:
17:93:87:39:9e:c8:ef:b0:e9:aa:e3:db:b6:85:3f:61:da:f3:
42:81:77:a3:e5:0e:d6:78:81:ba:c1:61:c0:64:ce:3a:84:37:
c2:0c:4c:1e:1c:de:8c:4d:d1:54:67:7f:5e:5f:49:23:57:7d:
d0:0c:17:35:c6:77:d1:66:a9:39:9d:ed:96:87:51:2c:0a:cf:
e9:26:78:1a:2b:a7:42:e6:0f:be:8e:ea:43:87:76:56:a7:bf:
9f:eb:85:7f:9f:d5:71:8c:cc:16:94:ac:ca:e2:ba:c6:69:0b:
6f:f8:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:47:48 2026 by rpki-client