Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: WVM7UcGp44PB73QjKnGJijj/A564pyBVDyIkTC0rSA8=
Subject key identifier: 07:36:9D:DF:EE:F1:0A:31:92:EF:12:F4:48:B2:37:05:5C:63:89:F1
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01A103C99A4A85F0125CA797BCB7E920E0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1A6C
Signing time: Sat 03 Oct 2026 22:01:46 +0000
Manifest this update: Sat 03 Oct 2026 22:01:46 +0000
Manifest next update: Sun 04 Oct 2026 22:01:46 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: yBTOEcTmG8p0or4JI/ZGiI8O/NRaVI5b7KGeuk4ru5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:9a:4a:85:f0:12:5c:a7:97:bc:b7:e9:20:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Oct 3 22:01:46 2026 GMT
Not After : Oct 4 22:01:46 2026 GMT
Subject: CN=07369ddfeef10a3192ef12f448b237055c6389f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:6d:3b:6c:a1:54:45:70:ed:75:bf:6f:3c:
98:40:41:f1:48:6f:80:19:20:c7:4b:07:2a:1b:59:
c8:d0:92:d5:48:aa:14:9c:8c:46:ea:5f:bc:b7:a3:
d5:6e:41:e6:59:d1:e5:2a:2f:83:57:e2:12:9b:5c:
5d:c7:99:01:29:c9:76:9f:29:39:c4:6b:94:ee:90:
40:4b:c7:2a:a3:fc:b5:6b:23:47:c5:de:13:cc:44:
fc:66:1a:5a:d1:45:93:58:d2:6a:44:6a:8a:54:00:
cf:e4:b0:34:af:40:94:73:b3:4f:a4:c5:1a:9e:d7:
00:9f:ba:46:ed:af:50:b9:1e:6d:e8:8a:b6:d1:c1:
c3:f4:d6:64:cd:b3:c0:82:de:1d:43:21:83:2a:a3:
7f:22:05:24:ba:b0:aa:c5:22:a1:1e:c2:bc:a6:f1:
22:23:6d:98:18:2f:af:19:4f:8f:49:e2:60:02:e6:
3b:71:ec:c3:91:21:d4:ee:cf:fd:db:73:34:3e:94:
90:b7:29:f7:50:9e:f7:3d:92:ae:1c:2d:06:33:69:
e1:8a:00:c0:f6:ad:77:7e:37:48:11:75:80:4e:09:
73:6e:d1:b3:a7:a0:2c:66:24:8b:a2:0c:70:f3:d1:
60:a2:ba:0b:1f:d0:26:0a:19:06:38:a6:f7:d1:9e:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:9D:DF:EE:F1:0A:31:92:EF:12:F4:48:B2:37:05:5C:63:89:F1
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3c:c1:83:d7:7d:18:1c:fc:5d:0c:4e:2e:6d:fd:7f:cc:bb:
28:27:0a:fb:be:88:4b:29:13:08:79:85:d9:06:cd:bd:3e:04:
86:b5:4e:23:3f:27:00:ca:0f:89:35:66:b3:55:f4:14:ca:57:
ea:41:d3:f7:96:6f:c7:23:14:3a:88:bb:39:22:62:38:15:84:
bb:68:ab:1f:b6:ed:cd:33:73:e4:5c:f4:b9:54:a9:80:44:5e:
23:2f:55:7e:f9:01:01:56:bb:e0:14:aa:e5:d5:4e:93:1f:c1:
9e:68:5c:32:58:4c:68:18:5d:af:90:88:db:84:42:94:d5:bb:
80:b0:81:1e:15:0b:e2:c8:a7:30:c9:08:f2:6b:66:bd:18:84:
3c:64:52:23:13:cf:2c:04:d5:b4:cc:f6:b6:f2:66:c0:88:34:
b9:c5:ca:23:82:ef:c1:f2:46:e5:64:c4:ed:fe:9d:2a:46:54:
fe:a1:28:b0:64:ce:61:01:30:ec:89:00:cb:f2:7a:b1:f5:88:
b9:da:a9:fe:a7:36:27:3d:d2:39:0e:fc:5d:2b:01:02:46:a2:
78:55:70:98:e3:35:41:c3:3c:c6:7f:49:90:a9:11:9c:cd:f0:
5e:89:9f:28:b5:d0:af:e3:01:4c:ae:39:c8:87:d0:68:1d:0f:
0b:00:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:07:07 2026 by rpki-client