Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: p3DoBb78gZDyZ8KhZpTBp38tsBCCHSJcEfawsWvX3VU=
Subject key identifier: E4:D8:66:B0:15:FE:EB:08:3E:6E:9F:97:73:3D:0E:68:B5:7F:94:15
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 01A1E027FACFDDB5E544613EEEAEF07EFD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 17:01:18 +0000
Manifest this update: Sun 15 Nov 2026 17:01:18 +0000
Manifest next update: Mon 16 Nov 2026 17:01:18 +0000
Files and hashes: 1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: wfm3qQrZwjAlMsUP1vEppSIgz8KCKazJS3z8ojoVJbU=)
4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:fa:cf:dd:b5:e5:44:61:3e:ee:ae:f0:7e:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Nov 15 17:01:18 2026 GMT
Not After : Nov 16 17:01:18 2026 GMT
Subject: CN=e4d866b015feeb083e6e9f97733d0e68b57f9415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:f5:53:d1:ca:d2:02:ec:b9:72:7c:09:d7:
d2:36:64:aa:2b:88:75:11:0b:16:29:7c:1e:e4:c6:
b9:e7:bb:8f:43:0a:e7:d8:5b:09:51:54:ce:ce:8f:
1d:a3:35:b2:af:e2:d2:64:32:e1:8c:2f:7c:55:65:
31:a8:6f:95:d1:1f:31:6d:22:fb:a9:b2:f0:27:38:
25:c3:39:b4:d1:31:cc:58:58:06:7a:7c:16:a8:ab:
98:f8:c9:aa:9d:1f:a2:d4:aa:3e:fb:e4:c8:1e:68:
82:a4:43:0c:b1:24:a4:7e:87:a4:31:c6:30:02:f6:
5a:31:19:6b:c9:30:34:0f:35:42:72:11:80:1d:71:
02:bf:4b:95:bc:5f:f0:52:79:e4:52:04:6c:e6:68:
1e:e1:33:2a:1d:7e:09:44:40:45:bf:01:bd:42:e0:
ca:e8:4f:c9:bd:b5:34:36:94:74:3d:22:0d:98:ef:
d8:01:55:2f:e4:47:de:e9:49:82:e9:ef:9b:d6:4e:
68:3d:a9:56:28:66:29:31:c2:e4:59:60:2a:00:62:
3f:34:8d:9a:be:37:aa:be:af:9e:aa:3c:ca:3c:18:
ba:fe:da:10:63:48:63:87:dc:c3:65:4e:60:41:74:
7c:59:72:42:ef:b9:09:c5:da:63:0e:6c:1f:43:23:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:66:B0:15:FE:EB:08:3E:6E:9F:97:73:3D:0E:68:B5:7F:94:15
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:02:82:e4:4c:60:6a:05:9e:68:cf:d2:05:98:01:2c:da:28:
fa:1f:c2:50:b4:9d:c4:8b:50:77:d9:13:15:6d:97:1e:99:06:
cb:4a:11:c8:e4:c0:ce:61:fe:e0:68:28:89:63:4f:f5:f3:26:
ad:67:5b:a2:86:b4:a0:fb:17:74:8b:73:64:03:e0:63:e3:24:
a7:23:f3:70:6e:29:00:77:59:a7:68:dd:9c:fa:47:c3:0d:b7:
54:20:54:83:ad:97:14:1f:45:a8:31:68:0d:90:41:45:6b:df:
d1:57:1c:89:3f:e0:a8:61:c6:95:ca:e2:f3:18:6d:b8:3c:97:
8d:0a:94:82:95:fd:ac:db:66:1b:03:90:5c:0d:7b:73:86:a3:
03:06:32:64:47:04:05:7f:3e:16:a2:15:2d:97:f3:14:0e:23:
ff:8e:b0:72:ae:82:15:ef:60:63:df:88:22:da:82:f3:9f:ee:
04:24:e7:30:35:5c:0e:f1:26:61:1f:8e:ea:b2:62:24:03:ae:
ad:2e:5d:ec:17:59:c7:69:2b:b8:16:30:ae:94:f9:b2:86:9e:
2b:fd:2a:39:d7:bd:86:c4:4d:5d:5a:c2:c4:da:52:df:02:43:
67:8c:4c:58:ff:5d:0b:8a:30:00:1e:65:20:6d:71:31:eb:8a:
2a:e9:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:28 2026 by rpki-client