Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: dk8kXjrYFsmpUExuDkpdXcImAsIpEwNU4oBk61qV3+M=
Subject key identifier: 09:35:B3:5B:34:44:8C:98:E1:8F:45:0D:80:FA:CB:30:9E:2D:AD:6C
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 01A1DE39AD762DDE4C3B7A8CBBB1AE8D8312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1B06
Signing time: Sun 15 Nov 2026 08:01:24 +0000
Manifest this update: Sun 15 Nov 2026 08:01:24 +0000
Manifest next update: Mon 16 Nov 2026 08:01:24 +0000
Files and hashes: 1: bxe8_OOghXeeJNBS1LJite_JTKQ.roa (hash: SNnvmAY3MhgDBPaAU8BXN9WC/xup6duxDsZh0j7XDCs=)
2: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: 5LQ3V8VkGKE4D7B5240oqboMFTx5dVqsG03HPzHWsgc=)
3: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (hash: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:ad:76:2d:de:4c:3b:7a:8c:bb:b1:ae:8d:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Nov 15 08:01:24 2026 GMT
Not After : Nov 16 08:01:24 2026 GMT
Subject: CN=0935b35b34448c98e18f450d80facb309e2dad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:70:3c:eb:94:12:6a:32:5f:b7:33:13:86:
f2:73:b7:63:00:24:a4:96:a1:1e:d2:b4:e6:84:83:
eb:32:f5:1d:87:03:aa:97:27:11:be:fd:3f:fd:fa:
e2:98:1e:b0:6d:43:f0:a1:ca:d1:81:2a:07:d7:44:
36:42:36:7e:d4:1e:4d:4e:ea:a1:1b:6b:5a:65:60:
ba:a2:40:30:a6:8f:ba:cc:02:63:10:7d:dd:ab:ac:
ad:c0:9e:fa:02:68:a1:b1:d1:fc:51:dd:de:9d:a3:
0e:80:ab:10:ea:cc:10:47:d1:04:32:0b:72:70:11:
73:e5:27:1e:76:b1:ce:0e:aa:4c:85:be:58:47:b1:
0b:28:7c:0a:22:dc:25:62:06:b9:98:4d:38:2d:b3:
c2:52:53:e8:d2:4a:29:c4:0e:d2:09:50:ad:a0:59:
39:e2:77:f5:f5:43:14:d6:0f:ae:91:8b:2f:b8:f8:
26:2d:a1:d5:4e:7d:65:04:9a:6d:9e:79:d0:a8:08:
80:5c:c5:8e:cd:b1:94:f5:9e:35:e3:2b:87:ec:46:
f4:f4:1a:eb:a2:2d:19:9e:71:81:a0:8f:cc:82:a8:
b2:c5:fc:3f:ff:f4:a1:e7:66:18:17:b6:ff:0b:df:
39:69:e4:bb:3b:f9:6a:a1:11:7c:52:9e:67:1a:3f:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:B3:5B:34:44:8C:98:E1:8F:45:0D:80:FA:CB:30:9E:2D:AD:6C
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:27:ac:9e:79:59:fa:69:70:99:b5:63:55:3e:32:17:4a:
38:40:a1:5e:00:ab:8f:35:36:76:f5:6c:ce:82:6c:5c:67:c4:
75:14:0f:66:8d:25:1c:c7:cb:74:c3:b4:41:52:8a:95:4a:e4:
7f:03:e4:f1:9b:63:67:dc:26:54:48:e6:5b:ed:50:3b:a0:65:
a9:70:e5:94:a2:42:ae:d3:5a:52:8e:48:b1:b8:9c:7b:1e:81:
8a:5a:cc:32:f0:bc:47:70:60:41:c6:38:0b:50:1c:e6:74:d6:
68:6d:df:14:17:ab:31:d7:54:75:87:5d:0a:5b:48:9f:d1:31:
dd:7b:63:ac:7c:07:53:f4:a9:7f:79:f8:60:3f:ad:bb:4d:93:
ca:1d:0b:0d:cb:c9:2c:69:83:4a:ae:92:85:33:f0:d5:71:52:
e1:19:61:e8:3d:27:f5:44:88:58:91:ee:21:62:63:79:51:c6:
48:68:41:1f:07:d8:52:da:ec:f5:b9:71:dd:d4:78:10:b2:1b:
40:3d:2b:76:12:80:e4:b0:b5:6f:8e:16:69:84:b8:b3:64:d5:
de:6c:e3:e9:14:90:f1:a2:4d:03:21:59:27:0e:cd:09:00:51:
34:1a:bf:be:a9:0e:87:97:fd:eb:ca:c0:6b:6f:0e:1f:5f:fb:
35:8f:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:47 2026 by rpki-client