Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: 7yrcYftAcGLE95HMS9VFJrY7rphuHyTVAEOWkClRT9g=
Subject key identifier: 13:90:15:CE:34:B5:25:88:05:52:99:B6:C7:B6:EA:A6:27:76:72:45
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 01A136DAA73267F92DF3212C73DDB957A24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1A33
Signing time: Tue 13 Oct 2026 20:01:01 +0000
Manifest this update: Tue 13 Oct 2026 20:01:01 +0000
Manifest next update: Wed 14 Oct 2026 20:01:01 +0000
Files and hashes: 1: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (hash: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=)
2: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: O85OZNK2nznu7ClevsTD7OmW+lIvYqUSz3IR9nIsvPk=)
3: v9qEJJrE4bIoJLkvQpDIDEFgGF4.roa (hash: kl+PP56wx1175s4ViXBlwNJra6/Xw7Fsdl6qvV23Cuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:a7:32:67:f9:2d:f3:21:2c:73:dd:b9:57:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Oct 13 20:01:01 2026 GMT
Not After : Oct 14 20:01:01 2026 GMT
Subject: CN=139015ce34b52588055299b6c7b6eaa627767245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:93:1a:8c:d0:42:ae:a8:78:4b:c8:0d:24:
28:0e:cd:63:25:83:f5:c1:9b:60:ee:32:cb:d9:57:
4c:ba:3b:4c:0a:df:46:eb:7c:3b:11:49:18:c4:28:
c3:c4:cc:01:ce:10:6e:0a:e0:0a:a2:50:60:f3:4f:
49:1c:79:58:44:0a:3c:03:03:91:2f:dc:bc:ba:0e:
4e:69:70:fb:a2:8b:62:7b:1a:e2:ac:20:07:b2:d5:
ee:e2:a8:e0:9b:37:e6:10:85:8f:16:3d:68:24:26:
21:1e:c6:ec:47:c8:38:0c:bb:4f:66:fb:de:0b:fd:
41:2e:79:fe:12:0c:ae:9a:6a:b0:42:7e:81:d9:b8:
11:58:ec:3b:de:72:96:eb:32:de:2e:d3:52:6d:65:
0d:b2:cd:a8:e2:e6:c7:68:4b:25:74:8f:b9:9d:d3:
9b:8a:8f:3d:e3:73:ec:ed:19:87:ed:fb:91:c5:be:
ac:d0:b2:b9:06:c0:b2:67:d8:d3:17:41:86:5d:66:
99:ca:51:cd:fc:1f:b9:05:84:7f:1b:d5:92:ff:e4:
08:e2:92:39:5a:41:c5:19:99:92:2e:4b:9a:34:a1:
a6:19:f9:96:65:8d:a6:01:07:b7:ad:ff:e0:53:45:
f1:a7:4a:d7:65:ff:79:99:70:11:49:d4:e4:a4:db:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:90:15:CE:34:B5:25:88:05:52:99:B6:C7:B6:EA:A6:27:76:72:45
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:b4:3c:47:45:d3:30:d6:f7:5e:31:35:c4:a8:3e:2b:5a:
68:57:1e:82:4f:11:7a:38:c7:46:77:eb:14:63:39:d9:af:58:
91:d6:24:b0:f4:8a:33:d9:87:d3:51:ff:49:b1:8f:34:bd:cc:
7a:87:bd:ca:fd:f6:be:a4:b2:25:80:2e:ca:3b:8e:e5:a3:3f:
f0:6f:ef:a2:b8:68:03:d9:2a:23:f0:e5:15:0f:2a:2f:af:00:
c2:2a:4f:05:ca:16:17:2b:d1:3a:8f:19:af:41:30:b6:cd:ab:
55:1a:79:73:53:55:50:e3:53:36:25:8c:95:dd:11:54:6a:78:
72:86:fc:34:cd:75:b9:49:39:c8:0f:2c:d2:9f:2e:4b:3c:e5:
1b:b1:fb:a5:b5:13:da:70:02:ec:07:92:5c:04:84:c5:2c:a1:
a8:40:4b:4c:1a:aa:c4:91:7c:fd:cd:64:3f:c7:77:88:50:21:
5f:4a:69:ca:08:7c:3f:99:fa:d2:9c:46:7e:88:c7:e0:3b:d3:
1c:d4:d8:76:a4:b1:31:40:70:dd:29:da:97:5d:3d:58:02:ea:
fd:4d:d9:cf:bb:80:4d:49:15:aa:d5:fb:02:08:50:ac:ba:4a:
21:c1:e7:22:c2:ff:73:20:d5:5f:f2:08:52:ee:e5:78:30:9f:
ef:f9:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:43:34 2026 by rpki-client