Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
File: j6nQXioyGuy6TsxKvsD3jqzeVbA.mft (raw, json)
Hash identifier: n85MMHUoLSCg8q66Of97hrot3phavoWk/0okLPeZJRU=
Subject key identifier: 11:2E:96:28:A1:C4:77:57:6B:BB:DA:3B:59:21:9F:45:FE:A6:C4:02
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 01A0D3155132F12464F73B20954771F2152C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
Manifest number: 032B
Signing time: Thu 24 Sep 2026 11:03:04 +0000
Manifest this update: Thu 24 Sep 2026 11:03:04 +0000
Manifest next update: Fri 25 Sep 2026 11:03:04 +0000
Files and hashes: 1: 2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa (hash: sDIfURTzJ4IeJdUJuR0VKVKFISBvpz2O883KP+aaCxY=)
2: dCE2fA2T7JJJftADurwqnINg4Xk.roa (hash: l0uqVxXQwge535nKbCJaHwwjDYSKYXonosppxPWkUPs=)
3: j6nQXioyGuy6TsxKvsD3jqzeVbA.crl (hash: Sh6EBZL5QtGsDZCht50RWCOzyNjNbxzpLBPYRIR+jqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:51:32:f1:24:64:f7:3b:20:95:47:71:f2:15:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Sep 24 11:03:04 2026 GMT
Not After : Sep 25 11:03:04 2026 GMT
Subject: CN=112e9628a1c477576bbbda3b59219f45fea6c402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:b9:c4:d4:da:30:7f:97:c5:ee:6f:c0:27:
88:f2:5e:ab:e6:0c:1c:83:35:55:b2:b9:1a:ad:8d:
ef:fd:e4:b0:46:1a:90:d6:03:53:b2:a1:bd:e3:19:
15:55:0c:59:90:dc:47:2a:76:14:50:80:f3:b5:fc:
f6:36:2a:df:8e:17:8b:dc:8d:c9:bd:4b:35:6c:19:
dc:2b:c4:15:dc:bc:7f:34:b3:88:e0:f1:7a:2a:64:
fc:88:18:e0:26:2d:1e:86:cf:e1:6c:ad:a0:8a:36:
cc:06:c0:10:66:59:d6:f1:2f:f9:f4:27:d1:83:13:
bb:8e:88:0d:f7:e4:09:73:c2:03:21:3d:56:2a:1b:
ee:90:bd:bc:8a:81:57:8d:ba:2f:f8:89:d9:42:60:
26:35:2f:52:31:f2:43:54:71:e8:82:eb:75:f6:61:
00:e0:17:1f:4a:0e:f4:70:db:4c:1e:7b:af:43:f8:
06:f7:1e:4e:f7:88:1e:ec:a7:51:27:43:e5:21:c7:
2d:28:45:ae:53:0b:70:9b:3c:55:94:db:a5:c3:a5:
9f:09:f0:37:e4:da:13:70:70:96:ab:6e:64:6e:5e:
e5:97:06:71:76:b4:d9:6f:7b:6c:b1:5a:33:84:3a:
f3:0d:5a:71:fb:d6:94:79:90:1e:33:65:b3:3a:87:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:96:28:A1:C4:77:57:6B:BB:DA:3B:59:21:9F:45:FE:A6:C4:02
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:50:81:35:38:01:0b:be:74:b8:b8:90:d7:c1:68:28:41:f3:
ae:1d:7f:1f:55:c7:35:d9:09:e7:68:9a:f9:c4:c7:98:92:02:
34:8b:64:83:00:c3:04:25:e8:9d:0c:cf:38:bb:2f:a2:a9:47:
e6:9e:24:27:00:00:72:07:28:b1:51:4a:17:e1:8e:99:60:63:
3d:4c:41:d6:da:94:9c:70:4b:01:89:7d:b7:79:fb:ca:3c:1f:
84:07:e5:55:c3:64:67:dc:87:63:d8:d9:1e:de:36:a4:e0:5d:
bd:13:fe:79:c6:b0:ef:2b:6d:95:20:a8:42:3d:9c:bf:15:35:
cb:08:0a:8a:57:84:ee:2d:1b:5e:ff:f9:c4:a0:20:ba:75:90:
9b:ae:4b:93:02:57:3d:d4:03:26:09:78:fc:43:a1:36:90:77:
9c:42:15:07:de:9b:a2:0a:46:e9:f8:ff:34:05:82:d9:05:bb:
3d:52:a7:42:60:bd:55:54:f4:8e:8d:82:b8:e2:28:ef:5b:d3:
d1:b8:f2:bc:79:af:20:e8:0d:49:e5:51:a4:29:23:6e:10:fb:
57:43:44:4d:36:ee:3d:bd:f4:36:d5:7f:09:7d:ba:b4:32:8c:
53:78:99:91:2e:88:e7:37:a2:a6:14:8b:5a:e4:a1:3f:79:29:
ae:66:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:44:11 2026 by rpki-client