Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: Rq2HLecwb4ckk4gjWWBS4auD3CsbZVjG2lYT1WhIKPg=
Subject key identifier: BF:8F:43:DA:A8:DB:9F:D2:9E:C6:56:C5:4E:B2:A0:67:F2:B6:8A:43
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01A1DD953710C4D1103DA31B0721EDDCD790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 186E
Signing time: Sun 15 Nov 2026 05:01:45 +0000
Manifest this update: Sun 15 Nov 2026 05:01:45 +0000
Manifest next update: Mon 16 Nov 2026 05:01:45 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: ZyatZh2HRWWKXYMZv6UGPvSkzfl/sA3XM8zPNE028JE=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:37:10:c4:d1:10:3d:a3:1b:07:21:ed:dc:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Nov 15 05:01:45 2026 GMT
Not After : Nov 16 05:01:45 2026 GMT
Subject: CN=bf8f43daa8db9fd29ec656c54eb2a067f2b68a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:38:3e:b3:06:8f:ce:a8:3c:64:f8:a8:db:
d2:77:6d:9a:b7:73:7a:56:7b:6e:32:56:54:65:f4:
60:f4:6d:74:6a:fc:42:04:6c:c9:67:b7:f0:b3:f2:
e6:9a:f4:19:3b:da:0d:77:ab:1e:36:c3:67:01:63:
85:de:77:53:a3:d1:a2:6f:d3:d5:77:dc:31:a3:e4:
4e:4e:a4:82:68:12:1a:d4:f6:c5:4a:f7:df:73:f4:
88:d9:e2:0f:4b:92:38:ec:79:ee:71:99:66:18:6d:
7c:34:30:f2:66:16:84:37:ea:00:f4:cc:a3:14:9c:
d4:dc:00:1e:b4:54:06:14:f8:5b:7b:6e:b6:de:92:
8b:c7:ce:86:1f:43:bd:0d:44:bd:cd:d2:f8:08:41:
29:41:1b:23:5c:96:ba:97:01:2b:bc:d0:93:f6:87:
ea:98:3d:99:8f:c7:55:e4:f8:74:13:65:83:1d:dc:
a8:d2:c3:ed:d3:d7:e8:b3:1c:04:b8:99:4d:3d:d2:
2e:e1:a6:59:a0:8d:f4:26:be:b3:ec:7c:14:72:e5:
17:0b:ca:f8:15:40:e6:7f:2e:5b:df:eb:7a:70:c6:
c4:79:19:19:32:ad:08:8a:7e:f9:f6:ff:36:7f:66:
6f:cc:4b:f2:24:72:45:5b:9c:7e:ca:a3:78:33:d8:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:43:DA:A8:DB:9F:D2:9E:C6:56:C5:4E:B2:A0:67:F2:B6:8A:43
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:02:05:15:08:c4:f6:88:4f:aa:5f:23:3f:ec:34:26:f7:
c5:bb:84:f9:5d:77:07:9a:1d:1a:b3:2e:e2:d5:fd:81:81:03:
60:1f:52:e1:01:fc:1a:2e:c8:f9:f0:45:dd:36:d2:05:f3:c5:
c8:0b:41:a1:be:42:2f:f1:fc:46:fd:c1:0e:8d:90:78:49:0e:
ee:e8:ea:fa:df:c9:bd:c9:b5:a0:26:48:76:0d:41:e5:c4:91:
91:9c:01:70:63:57:02:77:87:41:a9:b0:f7:f7:09:5c:a8:02:
38:df:37:a3:bb:61:18:1c:08:36:13:ac:cb:33:1b:7b:82:bd:
e1:d4:4f:e9:c1:74:05:51:5e:51:6d:94:f8:8e:52:01:5f:03:
50:67:4a:b8:6b:eb:b6:36:1d:17:a7:a7:92:e6:8d:a3:76:ea:
37:07:53:fa:1c:00:1d:9a:db:fc:cc:d3:fb:f4:0a:9f:d5:71:
08:e6:f3:e9:07:e9:86:e8:10:4c:28:cd:3a:d4:d0:2f:82:91:
83:ba:69:3a:d6:cb:03:66:e1:e7:f2:10:df:46:da:5a:d8:6b:
32:09:26:6c:71:98:5e:4d:51:96:08:6f:8c:18:79:51:eb:cb:
e7:c8:af:a3:19:18:93:8c:11:17:75:fb:57:be:f4:51:ef:6b:
36:16:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:21:39 2026 by rpki-client