Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: Q01zC1V3qxoEYppabrE2wXbNnwmXsZB5kVLpyJ9VnXc=
Subject key identifier: 0C:B4:D8:B2:A8:DD:C5:F2:05:CC:17:EB:E6:75:CB:99:E3:85:63:7F
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 01A1DE029A533088A6D0B22292A4ED924723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1B43
Signing time: Sun 15 Nov 2026 07:01:14 +0000
Manifest this update: Sun 15 Nov 2026 07:01:14 +0000
Manifest next update: Mon 16 Nov 2026 07:01:14 +0000
Files and hashes: 1: IPD7v-J9c376oyXeNIKc_aWnNmQ.roa (hash: EEItVG+CeXn/JupxjY6OK4AdQvnwdrYLgxk2U0ldhpY=)
2: LL3At7JbewVHNRXMTWxBEzOztjg.roa (hash: +WpNgZ2w7aJQTwGBk3CQne457+iBvPsYhfCTsL1+tUY=)
3: anTJWEQp0i6KTaSXHOsTHQh5WnE.roa (hash: ZtVU1H4tfyZrn5QvM+PL/R2U7WZ74D460z4PylgnXrM=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: d/fSdSJ5JxRiMOM6PZBVM5UkjvEqdEReqDVAZkLkTGI=)
5: lkChSpn2Pj9BZbhbqhu03FMhDys.roa (hash: yYjtG9ThGBjd6+NRNSCZP/C1Ipp2hIAVQCQKfhenN+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:9a:53:30:88:a6:d0:b2:22:92:a4:ed:92:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Nov 15 07:01:14 2026 GMT
Not After : Nov 16 07:01:14 2026 GMT
Subject: CN=0cb4d8b2a8ddc5f205cc17ebe675cb99e385637f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:26:81:ad:20:9c:ac:fe:ac:8c:ef:c2:13:
b8:86:7a:f9:4d:49:ff:e8:c6:76:86:3b:f4:37:bf:
ce:cf:35:91:56:79:14:ad:02:d6:d6:d4:f4:22:4e:
77:dd:9a:dc:50:ba:e6:1b:38:8e:92:31:74:74:3f:
48:54:f6:b6:96:3e:e0:df:1f:6a:51:31:e3:9a:fc:
2f:6c:40:16:f4:00:61:c3:fb:0f:46:26:c1:79:5a:
1f:d6:16:f9:56:c3:10:c3:21:cd:4e:9f:9b:66:ae:
94:35:45:6f:34:fe:e4:78:a8:f4:89:3a:97:d5:24:
b7:e7:19:7b:bf:73:c6:f1:1b:01:48:62:69:be:07:
62:7f:72:17:3a:e7:30:5d:96:ca:61:fc:97:2f:9c:
ac:7b:64:9b:a5:64:5d:2a:a3:76:da:a1:82:d3:25:
76:e0:3e:f5:c2:50:72:6a:d4:64:d6:13:c4:a6:f7:
8f:14:ce:12:a4:7a:6f:9b:7c:08:a7:ee:98:07:ed:
30:86:8d:c7:a4:b4:1f:42:d3:a1:76:98:00:8d:75:
b2:0b:bb:10:36:6e:cc:2e:a0:45:a5:dc:a5:9e:de:
ab:e5:47:77:8d:99:de:f1:ef:83:e4:af:f5:96:08:
d1:3f:5f:fb:7e:ef:42:a9:cb:05:d0:ed:c1:15:36:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B4:D8:B2:A8:DD:C5:F2:05:CC:17:EB:E6:75:CB:99:E3:85:63:7F
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:ea:1d:eb:04:b8:9d:fd:87:61:af:53:66:f5:69:04:28:
63:23:9e:9b:3a:ab:29:e6:63:80:13:61:c4:18:28:c4:a4:64:
0a:f5:ac:b3:71:61:2d:22:bc:9d:48:59:2c:d9:5e:01:4c:8d:
3d:09:6c:b2:63:b0:d3:9e:e5:34:bd:e1:5a:74:ff:af:7e:c2:
36:5c:7d:75:e2:f7:2e:19:99:0a:a9:0c:b5:2b:3e:1f:23:51:
96:8b:11:b7:28:3e:4a:c8:17:07:8b:a6:4a:85:3f:7c:4a:7e:
f5:e2:ed:25:d4:99:ce:01:7d:fc:2d:91:db:f4:be:46:35:42:
1c:ab:92:98:0a:87:a5:2e:ca:d3:02:ce:bf:eb:5b:e0:af:f2:
16:68:d6:35:cd:74:a0:26:a5:17:ef:75:99:05:6d:d0:c0:89:
f0:ae:45:16:50:25:e5:d4:3d:3e:d2:a4:19:05:35:90:4c:cd:
f5:f0:2d:01:97:2c:6b:e7:99:11:ae:39:e2:03:4d:e3:18:2a:
56:85:2e:e0:09:24:32:b7:06:bd:27:56:ae:79:88:ba:fd:df:
c0:2b:92:f6:a5:70:8d:8d:3f:3e:42:fe:46:b3:9b:0c:20:ec:
a0:bd:11:06:33:28:14:5b:11:17:c0:9c:75:5d:bc:3b:d4:c6:
ec:66:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:55:06 2026 by rpki-client