Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: UbkJGXeA/ewccUZo1Yr9plLcO03z804ulpiTJr/gK3Q=
Subject key identifier: 5C:90:22:08:15:54:F4:1E:96:88:08:1A:2B:6C:A3:5D:7E:82:0C:CB
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 01A0D45CEED8A0823EF54FA00DEC3B627F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 17:00:55 +0000
Manifest this update: Thu 24 Sep 2026 17:00:55 +0000
Manifest next update: Fri 25 Sep 2026 17:00:55 +0000
Files and hashes: 1: 1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa (hash: oRVTaOt3U0YoXKj3+Sn3M9/Gmc3MrUZYmaGBPKb5vvw=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: fCOI9VIQojOfullJzkN3WB3TFPH/AWLkoX8ITAcr1YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5c:ee:d8:a0:82:3e:f5:4f:a0:0d:ec:3b:62:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Sep 24 17:00:55 2026 GMT
Not After : Sep 25 17:00:55 2026 GMT
Subject: CN=5c9022081554f41e9688081a2b6ca35d7e820ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:23:32:db:4f:d9:d7:02:45:7f:c3:d7:4f:
70:78:24:67:46:ea:36:27:1e:0d:4d:1d:b5:05:0e:
31:e0:22:d5:a9:13:74:07:37:00:17:e9:66:6a:ee:
49:76:02:a5:4e:9f:9c:fe:e2:0b:9b:d4:6f:08:7b:
dd:ac:54:28:20:d6:3a:1d:ad:5b:bc:a5:00:7c:22:
2e:6f:5b:09:a1:80:a1:5d:e8:f0:52:82:bc:51:67:
79:ac:a5:09:30:f2:eb:8a:03:a6:50:b3:f8:22:13:
a6:f6:85:c8:3f:83:7e:77:14:09:ea:cf:3e:ba:5f:
ef:78:19:a5:0d:52:a8:b5:f8:28:cc:36:50:96:7c:
b5:10:45:d5:fc:d2:e2:e7:52:41:c2:35:2f:13:78:
b5:cf:6c:1f:1c:6e:da:e3:92:40:48:d0:76:b2:83:
75:5d:9a:a5:1b:df:86:7c:0e:c3:09:c7:08:57:87:
67:d9:3e:3c:26:3b:de:34:89:b5:54:02:cc:e2:a3:
8b:cc:f1:75:d2:be:77:55:9f:52:92:6d:43:4b:bd:
a0:5c:a5:2d:34:e4:ea:57:bf:6e:97:77:a7:06:c7:
7c:1b:10:78:dc:82:f3:df:a6:6b:51:a3:7d:96:15:
0e:ab:3f:0e:cc:ae:57:52:43:54:84:61:15:37:7b:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:22:08:15:54:F4:1E:96:88:08:1A:2B:6C:A3:5D:7E:82:0C:CB
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b5:ac:ec:b0:04:fe:aa:54:bb:c8:f0:9c:86:6a:07:70:88:
e4:0b:60:9b:07:75:81:f3:39:9a:76:bc:a1:45:e8:f6:57:90:
b7:cb:d2:07:d2:9f:23:9c:0b:49:d3:55:cf:ba:86:60:55:62:
3c:b0:1c:11:c4:e5:7f:c1:b8:0a:5e:42:dd:6a:da:a3:61:3d:
68:50:a0:a7:3f:bf:06:37:04:46:65:36:0c:b9:cc:62:1f:23:
2f:4c:44:3b:e0:ac:bc:24:07:f8:20:0c:b7:80:aa:ba:1a:e1:
c7:69:9b:a5:dd:b6:89:fb:c2:94:65:a0:8c:c2:df:40:b5:9d:
45:b3:de:60:2b:af:35:f6:32:2e:d1:bf:a2:d8:10:99:4c:af:
dc:15:3d:16:35:d3:52:a1:a9:31:e0:fd:d5:56:ff:06:98:70:
2b:ab:08:06:b6:a5:06:15:8e:15:bb:3f:60:a1:bf:ca:9b:6d:
d1:4a:be:01:22:54:1a:e8:78:48:68:72:8f:77:82:fb:07:ad:
93:a5:89:7c:22:6c:1d:d0:9e:7c:c9:86:d5:1f:82:34:69:c7:
66:dc:b8:29:1c:05:47:07:46:0a:35:7f:9e:94:7a:4e:27:41:
46:b5:3d:ca:bf:47:2d:6e:40:04:3e:1a:68:0c:fb:c6:3c:6f:
4b:9b:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:45:52 2026 by rpki-client