Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
File: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft (raw, json)
Hash identifier: H/tCP9v4NkuvdOLNAmtlgnVuBVaoPd219odzDYREi7s=
Subject key identifier: 38:66:9D:8B:96:69:60:20:C1:A5:8A:95:EB:DF:64:2B:A7:9D:1D:3E
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 01A0D3B8EE50232EB43EF2AFA7B87B499E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
Manifest number: 0D6D
Signing time: Thu 24 Sep 2026 14:01:46 +0000
Manifest this update: Thu 24 Sep 2026 14:01:46 +0000
Manifest next update: Fri 25 Sep 2026 14:01:46 +0000
Files and hashes: 1: Soe3DKxDV0NQtGiV-an_GIHVw-Y.roa (hash: Gv7ElP+BQYHC82SKplEJjWs+/+jO9wYbWeYmwSgXRpQ=)
2: j4s0fLaJ4M0j3HIUEYyBIZhw_Rk.roa (hash: YKWInfEvjT2tzjdSrpQyeMguWoSka4sAxAanPSwcSQY=)
3: jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl (hash: ch8EWsY4aApdsHWZYqhB8J2cBZL6gT3BRUp6BGxDjeo=)
4: xbvLEl-bI1ZciTrjNpTpBkbZl5w.roa (hash: sRB5VYXPyhewd7A0bgkSSR8jyDORVWSWKW7icOY0Uro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:ee:50:23:2e:b4:3e:f2:af:a7:b8:7b:49:9e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Sep 24 14:01:46 2026 GMT
Not After : Sep 25 14:01:46 2026 GMT
Subject: CN=38669d8b96696020c1a58a95ebdf642ba79d1d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:af:16:dc:4c:62:1f:63:0e:f3:5c:42:47:
cb:bc:8b:d3:2e:99:4d:51:7e:e9:8a:df:df:59:60:
b0:ea:32:ee:9d:47:c9:49:83:ac:91:ce:00:20:4d:
1f:d1:76:43:0b:1d:a6:27:6a:e0:39:3e:f6:a5:ae:
4e:ca:6c:4d:e5:95:b2:9c:40:f4:54:96:9f:f8:62:
2a:34:9c:9f:c1:6b:8a:9a:4d:f2:24:65:16:2c:43:
a7:c1:87:31:5f:68:b8:77:1a:30:2e:04:13:fa:ef:
ea:1e:6c:bd:17:1d:a2:49:b6:4c:8f:55:fd:2e:f8:
c3:f2:13:cc:b3:1f:97:1a:fe:93:9e:19:03:a7:29:
c2:91:67:cc:d9:97:54:09:a3:1f:52:ae:89:2b:47:
fc:ca:ee:ee:f6:27:f5:75:c8:52:8e:0d:71:92:48:
56:48:4d:81:16:8b:fb:98:1f:4f:c6:8e:65:6a:5e:
65:bb:08:77:cd:03:f7:b4:2f:9e:9b:b9:eb:86:82:
09:8b:1c:31:f7:42:2d:e3:32:9e:09:60:67:98:48:
58:cd:6a:13:d3:94:2a:82:6a:e0:d9:c8:44:0e:f8:
b6:df:45:92:be:d7:4a:45:56:8d:2b:5e:1e:39:fc:
ef:78:58:2c:85:f9:52:bc:e9:23:eb:b1:90:7a:25:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:9D:8B:96:69:60:20:C1:A5:8A:95:EB:DF:64:2B:A7:9D:1D:3E
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:66:dd:19:b8:44:3c:e8:02:06:20:00:9c:52:82:3d:4c:70:
d0:0d:d3:f2:96:24:8c:8d:b1:73:2e:75:0f:06:e1:dd:ae:a6:
f6:13:bb:6c:68:fe:bf:f8:bb:4a:db:ab:a6:92:68:2c:78:4b:
14:04:8b:9f:89:98:ff:7f:f9:cf:81:93:b2:eb:13:49:5a:27:
8e:c9:ce:9a:8b:58:8e:84:a1:6b:be:6f:7a:5e:ff:20:ec:5f:
20:1b:83:b9:c0:bc:34:68:3c:24:b3:b1:eb:23:89:0b:b4:97:
27:33:d3:35:f4:3d:c8:71:77:a5:d7:ae:24:2a:3e:93:1f:33:
7d:ef:49:16:1f:1a:c4:13:b1:b6:47:c8:3f:61:72:ad:d0:bd:
1a:4d:84:2c:e3:e8:e1:a8:4b:33:b3:eb:df:a7:9c:60:69:8e:
f2:d1:d1:19:18:df:62:c8:0b:b0:eb:70:fa:b2:51:07:41:3a:
b9:2c:9b:8f:66:bd:c1:24:25:76:90:1b:1b:71:5f:82:c1:e4:
56:a9:4e:78:94:26:50:8f:ea:48:c2:cd:be:f5:84:94:a0:98:
22:a2:f3:3a:07:8e:a1:2d:50:49:06:5a:90:30:1d:42:6d:bf:
d1:53:56:ba:31:71:46:93:9d:ec:7d:81:ef:b9:68:7e:29:9d:
83:2d:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:58 2026 by rpki-client