Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: sBrU1+M4lKiPFYE1aUy983S/5CjiHYiIxyts1t7Ykmg=
Subject key identifier: 9B:BF:AB:57:1A:C9:02:23:32:73:70:60:BB:70:15:A3:6B:12:7D:20
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01A0D9BBD444FF4B832ED2B2565C5DE0C435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 18:02:40 +0000
Manifest this update: Fri 25 Sep 2026 18:02:40 +0000
Manifest next update: Sat 26 Sep 2026 18:02:40 +0000
Files and hashes: 1: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: odK3O5Mv3mZI8/sZADNsLLFpO9SeKM36Ya2/a5jEZ78=)
2: cORc3qu37fcnfHhNQ9vgijmtC08.roa (hash: oI9BBm/OuVRQh4y8Jupoc4Ov/7EAnptE5BO887roNik=)
3: qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa (hash: 91xfdGqmAApu2khp5vZdzslMXh1yO1zr4vIkqEJnHgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:d4:44:ff:4b:83:2e:d2:b2:56:5c:5d:e0:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Sep 25 18:02:40 2026 GMT
Not After : Sep 26 18:02:40 2026 GMT
Subject: CN=9bbfab571ac9022332737060bb7015a36b127d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:a0:a2:8c:a0:3b:fa:a3:cb:dc:09:be:28:
29:15:1c:fd:f4:6a:b9:22:9e:64:70:c7:ed:a4:e7:
4e:80:24:41:84:e6:c1:f2:27:c9:cd:21:99:76:09:
00:90:b0:b2:33:08:38:1d:da:c6:b5:a2:66:3d:1b:
aa:e1:99:30:59:19:8d:00:6f:56:4c:9c:74:20:e8:
41:7c:8f:6c:b9:90:37:3a:f4:2c:e1:be:c4:2e:83:
f6:b1:1e:ff:8c:69:6f:59:0c:e0:14:52:78:da:77:
9b:6d:fe:ca:dd:9d:c6:c1:a4:2a:7a:71:75:c9:4b:
ba:cb:d0:b0:0c:56:af:8b:18:11:3c:b1:4a:99:55:
07:e8:b1:29:3c:d0:2f:79:a4:e5:55:bf:3a:c4:1c:
dc:b1:78:e2:b6:8a:1b:3d:c5:bf:df:79:7d:cd:b3:
e0:ea:90:a2:3b:df:e5:cf:05:8b:77:13:97:7d:bc:
14:46:0c:e9:0d:ae:89:55:78:67:3d:e8:a3:67:92:
08:33:ac:4c:3a:29:d2:a3:b6:d6:7d:cd:aa:ec:aa:
84:bd:cb:17:c5:64:ac:94:9f:d8:8c:67:ca:0c:3f:
80:48:64:65:58:52:b3:49:bf:66:c3:56:49:ae:6d:
25:9c:ae:78:0e:24:a5:ba:48:25:06:d4:ee:9e:25:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:AB:57:1A:C9:02:23:32:73:70:60:BB:70:15:A3:6B:12:7D:20
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b9:01:57:b0:25:8a:5f:19:ce:62:f3:41:cd:8b:8e:40:3f:
88:32:04:52:5a:67:d3:8b:db:42:3a:32:f0:fb:67:c3:37:57:
65:96:44:08:52:e9:78:79:f7:e9:91:46:87:27:69:2e:b5:82:
16:20:7f:9a:bf:06:36:e7:87:aa:fd:91:4e:9a:42:05:7a:bd:
36:b7:5e:1e:96:55:ea:cf:29:a7:ce:b6:36:d4:67:fd:1a:8c:
a1:a4:7e:96:d6:2e:8b:2a:47:6b:a8:eb:8a:63:18:14:52:49:
ea:44:c3:9d:81:3e:3e:08:c6:4f:62:83:f6:a8:16:d5:09:8b:
55:57:c0:21:a7:0c:bb:05:4d:8a:ec:05:8e:4b:94:85:fa:87:
9d:f3:75:6f:c6:43:f5:98:42:50:e5:bc:e9:69:34:dd:f0:df:
5a:5e:10:81:4b:e1:30:e1:4c:45:15:7b:84:5f:0c:e4:70:c2:
0d:ad:b2:17:b0:48:74:24:1c:57:90:f4:24:a0:dc:c2:9f:93:
48:93:27:9d:93:a8:47:7b:9e:1f:91:32:73:1b:f8:a8:bc:cf:
36:94:05:56:9f:82:3a:02:b1:db:dc:35:c5:70:4f:0f:35:53:
73:3b:92:72:8c:2d:01:f7:86:0a:96:23:db:24:e5:36:05:59:
b1:a5:a6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:54 2026 by rpki-client