Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: Mmdpt+M+rKrTpSb6Pbm4GT+fnssh2h4hIMEVihJE0Mk=
Subject key identifier: 4A:AE:EA:F0:B7:ED:52:EB:61:A3:16:9E:3B:83:BE:C4:BD:67:F1:EF
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 01A0D983665559AED2214B3F352308D460BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1A7F
Signing time: Fri 25 Sep 2026 17:01:02 +0000
Manifest this update: Fri 25 Sep 2026 17:01:02 +0000
Manifest next update: Sat 26 Sep 2026 17:01:02 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: Sz86aBZjgFqeVtub122VPoWNyKW0PTSM2tlpupEg3yM=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:66:55:59:ae:d2:21:4b:3f:35:23:08:d4:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Sep 25 17:01:02 2026 GMT
Not After : Sep 26 17:01:02 2026 GMT
Subject: CN=4aaeeaf0b7ed52eb61a3169e3b83bec4bd67f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:08:ff:40:68:58:7f:94:7f:e9:b5:04:c8:
42:91:18:3a:05:3b:b4:0c:13:88:8c:02:f4:fa:aa:
cb:2d:b5:63:cb:a8:57:32:ba:41:24:16:b4:4c:b4:
0e:5f:cd:08:18:5c:18:cf:d1:87:8e:15:3c:0d:6d:
62:4e:2b:42:a3:31:21:7a:04:bd:da:46:c4:44:7b:
13:11:f0:bd:bf:74:13:6c:24:1a:93:ec:a7:2c:a8:
ea:99:c1:26:24:1c:1b:b2:2c:36:ca:df:3b:31:3e:
6a:e3:32:6b:e9:55:16:38:be:ba:a5:ef:53:5b:32:
d0:d2:a4:1f:70:18:e4:f4:1b:04:36:f9:00:15:f2:
30:ed:1b:4a:73:bd:5d:c0:7f:d6:b6:e7:af:cb:8a:
9e:6c:a9:94:85:0c:16:94:1e:d7:15:27:87:8a:6e:
f6:c6:44:10:10:5c:84:19:8f:b1:f6:77:24:47:4f:
17:07:7b:70:27:43:96:ba:e0:01:60:35:52:7b:82:
7a:4f:ee:b2:3d:c0:46:cf:b4:6c:24:1c:a0:f4:ae:
23:8f:2c:ec:03:91:b1:a1:88:ba:ed:ba:74:ad:14:
49:c5:0e:6b:f6:8d:43:c9:ea:77:ba:00:13:d8:95:
ff:c2:36:a5:df:5e:0f:73:bd:bd:77:8c:3b:86:a8:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:EA:F0:B7:ED:52:EB:61:A3:16:9E:3B:83:BE:C4:BD:67:F1:EF
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ea:f6:e3:29:0e:0c:34:09:cc:7c:80:36:ac:6d:a7:2d:c7:
41:8e:ac:fe:84:ff:a3:3d:13:dd:d5:f6:3e:8a:4b:d8:27:ee:
2b:27:98:2f:b9:c8:7e:d3:d5:14:2b:92:7a:a6:f7:6e:21:6a:
fa:eb:b2:83:4c:e9:8f:d5:8a:c5:eb:22:fa:04:16:fd:3e:52:
1d:57:c6:ea:7f:7f:b6:2d:15:42:14:5a:52:b1:9f:64:d3:93:
70:2e:96:e0:20:2a:b8:ae:49:c3:61:7a:3d:35:af:d9:24:96:
af:75:af:43:94:48:82:03:67:ba:31:71:5e:9f:17:bd:a1:a2:
67:6b:b5:2f:3f:67:3a:98:fe:37:01:15:c8:c8:6d:63:8c:d6:
b9:ec:87:f5:eb:88:b4:c6:36:53:62:bd:85:3a:4e:5c:d5:2e:
17:54:62:58:b9:77:1b:8b:9e:44:c9:31:21:9a:1f:b0:e4:37:
dd:95:41:cd:cd:7f:9e:53:de:b7:e8:6e:af:a9:38:80:db:8c:
23:4e:f0:94:28:11:a2:c9:69:da:65:a0:26:19:ab:de:51:d7:
db:c1:ab:b9:32:73:11:1f:71:31:34:41:8d:c6:90:8e:a7:b2:
9f:e6:1a:a8:3c:2e:c4:0c:91:d5:b1:8d:c5:97:e0:70:91:0f:
a9:02:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:35 2026 by rpki-client