Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: Bahyz2CgDGx3cy7e5xteplvJX72RIPZ6NNVIsPMnq0Y=
Subject key identifier: 52:BF:58:06:90:F2:BE:64:01:6A:56:26:F8:4F:25:5A:80:65:82:12
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01A0D56F94E1E0C4C39B05739055C30E7D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 22:00:54 +0000
Manifest this update: Thu 24 Sep 2026 22:00:54 +0000
Manifest next update: Fri 25 Sep 2026 22:00:54 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: MrTeH3244GhrsmktdFmsilQf7DQ.asa (hash: GC9kidXivmf55i4xsJViQsWGsdVImec2c8gAa1Wm8VM=)
3: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
4: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: slrYrFyRlNC5PNXZBS+CQ35uwKzjvzuJhe9k5XfZl/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:94:e1:e0:c4:c3:9b:05:73:90:55:c3:0e:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Sep 24 22:00:54 2026 GMT
Not After : Sep 25 22:00:54 2026 GMT
Subject: CN=52bf580690f2be64016a5626f84f255a80658212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:83:63:ab:0a:82:cf:d1:6b:e1:09:47:d6:
06:a0:51:9b:40:c8:f8:4f:02:1a:f0:ae:e6:09:be:
87:a3:84:c9:7d:fd:1d:e4:9f:1b:a3:9e:a4:50:0d:
0e:08:d5:a2:b4:61:14:01:e7:5c:c0:82:01:91:bb:
b6:21:49:3c:f8:bb:41:ca:b7:57:c7:2c:8e:2c:2d:
5d:5c:6b:40:a2:89:27:66:e2:48:f2:1c:c2:30:8e:
75:b6:59:dc:c0:c4:0c:05:57:e0:2d:0d:5d:0d:8d:
3d:88:fb:9a:3e:d4:8d:29:93:b4:4e:c0:cd:b6:48:
fe:7a:c0:65:61:0d:de:1d:51:bc:81:9f:dc:51:8d:
27:a7:fc:b2:db:12:0c:45:d0:e6:ff:21:f6:ad:53:
4e:1a:e6:d9:a7:f9:f3:96:ea:38:87:28:43:c9:3e:
e8:12:ad:f7:ea:8f:52:ba:8b:69:12:ae:99:8d:ef:
72:4a:e7:8c:78:86:4c:92:46:8b:42:61:dd:d8:0f:
e7:04:6c:a3:91:1d:16:99:ed:1e:a1:c1:31:82:9b:
9c:d3:60:8c:e7:00:8e:66:c4:48:89:bb:16:ca:80:
68:84:6f:9d:ff:48:d0:af:68:e8:14:70:83:a7:69:
f7:14:5c:e6:78:bf:8f:b9:c1:7d:e5:0d:34:e1:e7:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:58:06:90:F2:BE:64:01:6A:56:26:F8:4F:25:5A:80:65:82:12
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:04:c1:bb:51:34:b5:61:d0:43:f6:91:36:28:c7:c2:11:bb:
2e:2d:f4:d4:de:34:73:6b:24:5c:34:9f:80:85:23:e4:06:a9:
29:ec:ff:7a:ab:62:f9:b0:08:ea:6e:29:69:18:cb:ef:23:43:
63:4d:88:e8:8f:eb:40:6f:36:6d:54:30:4b:6d:1c:68:55:d1:
f0:8d:11:14:51:de:6c:58:63:39:52:fa:c0:e3:fc:bc:b6:2c:
10:83:13:fc:e9:2f:37:e3:1d:72:59:9b:83:1a:d4:cf:1e:50:
a6:53:d2:99:38:b0:c7:65:30:1d:68:08:6f:98:e7:34:96:4e:
ef:ee:24:11:19:7d:48:cd:44:50:9e:1c:15:e7:c4:f0:00:b7:
36:11:67:b2:73:d1:27:d2:76:4f:d1:f3:24:19:68:91:09:38:
dd:c7:28:a6:51:bb:43:6f:50:fc:62:72:65:ac:7a:85:41:80:
47:5d:05:78:f1:8c:87:64:59:de:50:d2:92:38:f4:70:14:9e:
a5:8c:3f:b1:24:eb:38:17:32:13:30:fa:b5:58:9e:81:07:88:
34:9b:ea:47:7a:e6:ab:16:1a:47:4e:2b:a3:43:b6:0a:83:ea:
fe:83:2e:4b:c7:ca:ce:a5:b3:3d:f5:c2:f4:c9:b9:b7:c5:74:
41:cf:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:57:05 2026 by rpki-client