Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
File: jJED0ak0JRu5ixHxacuLK97Gojk.mft (raw, json)
Hash identifier: bpLnBlPUG3b8V4BcKP2rI+O/Ltnv7zLwGcy1YJ7ZI64=
Subject key identifier: 48:FE:94:15:E2:AC:32:71:24:D1:98:44:A4:CD:89:4B:60:9C:68:17
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 01A0FC7D40A007025F4606662F2C7570E615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
Manifest number: FC
Signing time: Fri 02 Oct 2026 12:01:01 +0000
Manifest this update: Fri 02 Oct 2026 12:01:01 +0000
Manifest next update: Sat 03 Oct 2026 12:01:01 +0000
Files and hashes: 1: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (hash: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=)
2: jJED0ak0JRu5ixHxacuLK97Gojk.crl (hash: 9DhMAwXYaKzXBgfwL5eVy8HoEmqGKqmovlJZJIM2wB0=)
3: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (hash: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:40:a0:07:02:5f:46:06:66:2f:2c:75:70:e6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Oct 2 12:01:01 2026 GMT
Not After : Oct 3 12:01:01 2026 GMT
Subject: CN=48fe9415e2ac327124d19844a4cd894b609c6817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:3c:13:5f:17:2f:c2:fe:b8:b1:93:30:40:
b1:f8:8e:23:4b:dc:78:e8:74:1d:4d:a8:91:78:a5:
d1:50:45:8e:2f:b3:19:28:e7:7c:02:57:e0:01:f8:
76:51:c0:ac:12:ca:15:53:0a:61:ab:54:13:4c:3e:
4a:05:c0:7b:d2:57:42:bd:da:c2:51:ec:0e:e8:61:
50:45:78:81:0d:cb:bb:11:a3:17:24:b6:0d:bb:7f:
b0:0e:3b:a5:a2:23:9f:59:d9:23:7c:88:f7:bf:1a:
36:fd:89:92:6a:33:82:d2:12:08:5e:09:a1:40:ce:
9c:dc:50:e4:43:e8:1f:1b:8d:17:f2:31:c0:5f:53:
bc:47:5d:3d:4a:80:57:56:82:69:69:d2:4a:c7:f4:
67:d7:56:71:2e:d9:af:79:b7:90:a6:6d:5f:b3:2f:
12:10:92:6d:a6:66:6c:50:1d:d1:0a:2d:09:ec:17:
2a:91:ec:07:0c:1c:9f:e8:06:d3:53:81:92:98:2a:
e5:76:0d:d5:03:f2:4a:55:62:09:f6:66:36:5d:c4:
94:ad:14:0b:81:f2:e0:97:83:a5:1b:e8:79:58:c8:
41:cd:ec:56:9a:25:c5:5c:e0:5a:e5:a5:59:08:26:
f4:27:4e:22:c6:fc:33:f3:eb:ce:98:ca:94:c4:f1:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FE:94:15:E2:AC:32:71:24:D1:98:44:A4:CD:89:4B:60:9C:68:17
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a7:9a:40:cb:e2:e1:e9:f0:d2:7b:7e:16:42:21:42:85:8d:
56:de:16:d1:55:0c:cb:ae:bb:62:90:f4:a6:b6:b9:28:92:7a:
5c:ad:58:f9:f6:6b:1e:c5:32:2f:e8:1c:95:d0:cf:89:26:74:
15:e0:73:35:ae:44:2d:98:45:1c:92:e5:71:19:82:3e:2e:b7:
8a:33:04:36:6f:1f:f8:ae:3f:25:19:ee:4f:9b:c8:6b:77:45:
72:50:2a:bd:ef:6b:6c:b9:38:b8:4b:cc:ff:95:75:e5:45:63:
58:b9:6d:07:49:3c:9b:81:0f:6b:ab:20:3d:ce:86:90:91:0d:
28:3d:0b:a8:53:9c:8e:20:cd:31:34:7e:a6:1a:1a:84:ce:3b:
e4:e5:8d:60:97:c5:01:7d:5f:f3:42:06:9a:74:30:9c:99:65:
d8:92:55:33:d7:f1:f1:3e:c0:20:00:99:eb:47:56:0f:ed:55:
86:70:43:f1:9a:13:a8:4f:4a:eb:aa:a1:58:3f:ab:b6:80:ea:
d3:25:45:ed:d4:f5:9c:e8:c6:a8:e6:e2:de:27:18:31:72:f7:
97:bc:a2:c7:a2:23:e3:04:35:67:88:2e:9f:28:b0:90:4b:81:
8e:d3:7d:f6:ad:b3:bb:d3:2c:7e:65:98:82:af:ee:ac:48:e6:
be:1a:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:19:04 2026 by rpki-client