Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: vxOX1ZhAESr5XZ2xdaQ3wOGwLc8Z6T2ZqHqsQvX1CkQ=
Subject key identifier: B6:BC:13:43:F9:CE:E5:DB:4E:9C:36:AD:62:06:FF:E3:B6:D2:00:58
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01A0E3D08492D7B28126D2B2BDA46EFE4A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 17:01:28 +0000
Manifest this update: Sun 27 Sep 2026 17:01:28 +0000
Manifest next update: Mon 28 Sep 2026 17:01:28 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: GOUcb6OOlbL0YbcPN19SrMigccJRNDSMzjA0yzwegVA=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:84:92:d7:b2:81:26:d2:b2:bd:a4:6e:fe:4a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Sep 27 17:01:28 2026 GMT
Not After : Sep 28 17:01:28 2026 GMT
Subject: CN=b6bc1343f9cee5db4e9c36ad6206ffe3b6d20058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:ba:12:7a:03:51:be:4a:bf:01:37:60:90:
da:68:b3:51:df:a6:0e:61:a2:d2:d6:63:a3:06:83:
2e:c3:8e:87:69:7a:f9:ce:c2:62:01:cb:3e:15:bd:
97:2e:e0:94:61:cd:54:72:c7:67:b9:fa:bd:99:ac:
ff:e8:79:5d:48:0c:b2:ee:3e:8e:dc:ea:f3:c1:61:
3c:da:9f:ca:c0:52:4f:7c:63:d0:56:0b:22:f9:e4:
7d:51:63:20:30:78:e3:b8:d2:f2:5a:a3:de:c9:1a:
22:6c:fb:99:57:b6:81:b3:c5:14:92:be:b9:7e:5d:
82:80:ef:1b:34:29:70:53:62:8e:34:4f:19:26:d0:
11:cb:76:1a:89:6a:73:96:4c:68:bb:60:e1:5b:57:
a9:ab:ad:47:64:b8:f4:8a:c3:80:ff:1e:f2:7d:32:
c7:ed:7b:d3:73:f1:66:fe:3d:bc:82:6c:00:82:4a:
28:68:69:cc:9e:f1:dc:5b:7e:ab:6b:71:00:24:9d:
00:2a:d1:b5:5c:c2:2d:39:93:e6:08:54:17:3a:be:
e9:bb:f0:48:d0:db:11:69:19:ff:f2:c9:72:a4:4c:
59:15:75:2d:49:b3:5c:86:f0:6b:f4:52:ac:51:bf:
e5:5b:e4:f6:59:fe:17:dd:2e:27:d5:a0:d4:4c:3e:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:13:43:F9:CE:E5:DB:4E:9C:36:AD:62:06:FF:E3:B6:D2:00:58
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:b7:39:81:f5:45:97:f8:fd:6d:5f:2d:09:b5:c4:2e:41:
19:36:0f:2f:fa:3f:b6:47:02:e8:df:a7:42:c1:88:40:37:b8:
30:17:87:0f:34:9c:10:66:1d:ed:19:16:c4:40:ea:45:17:98:
2b:ac:d9:8c:54:92:27:41:77:ff:16:74:50:5e:39:32:a4:fd:
3e:92:ec:b8:41:cb:a2:4e:0e:c4:a6:14:c0:e3:14:eb:16:93:
1d:57:8f:81:a6:ca:ca:d2:3b:80:4f:aa:a1:28:ef:49:2c:cd:
73:e9:eb:58:7c:fc:73:f6:3a:b8:74:4a:7d:ab:c7:b1:e5:c3:
e0:ad:05:62:04:ff:6a:e5:f6:94:35:03:9a:8e:ac:ba:91:19:
4f:3d:ea:84:d2:b4:a0:b1:c5:3d:6c:4b:20:bc:1c:e1:6b:d2:
a7:b6:cb:52:89:c7:55:03:3a:c9:18:67:60:b4:c8:ee:ae:ba:
a0:52:ee:ce:e2:0c:74:17:85:56:a9:46:a8:7e:5d:29:88:02:
29:ed:8f:91:00:3d:91:1b:7d:01:8f:d0:2c:96:75:d2:bc:aa:
80:de:e9:1d:a5:c9:ad:b7:db:ad:c7:63:8d:0c:f5:10:59:a0:
6a:5d:8d:73:30:32:21:04:14:15:32:17:15:f6:f2:06:7b:20:
a2:e0:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:08:13 2026 by rpki-client