Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: 9jR4B2fdKHtZzzyZ6WEenshO692pZuSNktOSyw+Q0c4=
Subject key identifier: 79:92:45:3F:C1:86:19:10:2C:EC:44:99:91:C8:9A:CE:E7:E4:1B:D7
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01A0CF36AEBE66CDEBBA155759F24346FDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 17E2
Signing time: Wed 23 Sep 2026 17:01:02 +0000
Manifest this update: Wed 23 Sep 2026 17:01:02 +0000
Manifest next update: Thu 24 Sep 2026 17:01:02 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: UJIp1XUG/zPOICSHrYzAklV+yvVdNndSLPCdBqpsiCQ=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:ae:be:66:cd:eb:ba:15:57:59:f2:43:46:fd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Sep 23 17:01:02 2026 GMT
Not After : Sep 24 17:01:02 2026 GMT
Subject: CN=7992453fc18619102cec449991c89acee7e41bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:5b:9c:f9:5f:78:54:ca:83:3c:36:da:0b:
5e:82:14:e2:9b:13:e7:0f:c6:38:8a:2d:09:81:bb:
5a:83:c9:3d:22:35:af:1f:ab:9a:fe:4b:7a:1d:e0:
7d:35:98:f7:2f:50:86:4e:02:d8:72:dc:e9:a5:9e:
12:33:10:b5:9b:48:de:bb:07:7c:81:93:4b:49:98:
e1:f1:13:2c:2b:14:fb:8d:aa:06:c7:c0:f6:6c:d5:
43:a4:5a:00:db:70:96:4a:f9:f9:2d:ca:01:63:19:
f2:84:6f:c2:fe:85:21:db:fa:81:ed:8c:bd:fb:12:
1a:95:51:0d:8b:6f:73:29:c5:63:05:a4:22:71:e5:
4d:f4:a3:c4:23:ca:8b:c6:ee:b3:d2:97:b5:3c:69:
25:2b:74:b8:e0:83:68:f0:cf:b0:c9:be:72:a6:95:
1c:40:ae:93:ed:b8:4a:e3:41:7e:1a:c9:ae:d1:b6:
79:af:91:e4:c4:4f:bc:24:52:89:ff:8c:1d:cc:bd:
45:b2:ef:51:58:f9:0e:de:22:2a:2e:0d:52:58:c4:
ab:f6:c0:82:26:6d:3f:e4:3d:54:75:2f:46:81:b0:
43:5f:52:d8:db:2d:89:b5:8f:54:df:8f:fe:9c:22:
17:2a:6c:84:4b:cb:fa:34:bb:1c:0c:1a:14:16:20:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:45:3F:C1:86:19:10:2C:EC:44:99:91:C8:9A:CE:E7:E4:1B:D7
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:8b:c0:3e:52:bb:88:8c:5f:cb:f5:08:59:90:24:ad:80:
3b:b3:94:15:ad:96:45:e7:16:c5:e1:4f:7b:68:b9:85:8f:e1:
e1:26:47:e5:9c:d4:7a:0e:7a:07:ab:aa:b5:ca:19:f3:c9:ed:
15:ab:77:d0:6b:4d:0e:27:24:c8:73:35:89:03:9d:8b:71:72:
b7:f1:ea:b2:c5:22:b6:58:9c:d2:5f:a9:44:ab:e2:b3:3b:e6:
de:c0:1c:27:4b:95:68:88:1f:cf:e3:15:b3:7d:f5:35:8e:7d:
07:a2:fc:ce:7f:89:51:c0:b8:a3:33:22:10:84:09:9a:2a:67:
c6:42:90:a8:44:f3:f4:77:5e:b0:f5:b5:bc:97:33:91:29:8b:
3f:fd:b9:55:d5:ce:e9:c7:09:20:9d:73:a7:6a:f2:9f:95:95:
03:a7:2c:6d:45:8e:36:dd:c8:1d:2c:85:7c:25:a1:96:5a:d9:
b7:58:bf:e9:6c:22:0a:e9:f7:13:fa:7a:af:b8:f2:c2:8a:5f:
0b:f3:8d:c2:0c:91:cb:c0:77:d0:df:51:08:05:28:1d:cb:49:
70:a0:3c:59:40:89:44:a9:8a:46:ca:e3:5a:29:b0:7f:bb:2b:
05:70:e0:59:f5:a3:58:17:ff:98:1a:c1:9a:60:9f:61:46:69:
55:db:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:46:12 2026 by rpki-client