Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: h615+RRyvPgnXzZdCctnZZJuFoy04bWA/BUnMJAwtlE=
Subject key identifier: F6:70:CA:DE:A1:09:BC:F5:19:43:EA:89:CA:B3:CD:D0:D5:40:08:59
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01A0D237B4162701FA6D7DF4EE8ED3230E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0766
Signing time: Thu 24 Sep 2026 07:01:00 +0000
Manifest this update: Thu 24 Sep 2026 07:01:00 +0000
Manifest next update: Fri 25 Sep 2026 07:01:00 +0000
Files and hashes: 1: Bwg79WzNGXuNDZQSD0VsKUr5blo.roa (hash: /xVUo9naU8W1C7rWgQlkJRPv0Xsrg14Z0K50RIANuQ8=)
2: SoPl-FceNQvh4tMfOxE_AcHtfm8.asa (hash: cUeLaA0Vht9SwijgrX9Tc4UBzzMa5+2lTsXKWwL+29g=)
3: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: Ymy0SBa7PKFGf83CNl2hghcdEaNXDYotrG97YGtTrDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:b4:16:27:01:fa:6d:7d:f4:ee:8e:d3:23:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Sep 24 07:01:00 2026 GMT
Not After : Sep 25 07:01:00 2026 GMT
Subject: CN=f670cadea109bcf51943ea89cab3cdd0d5400859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:3e:f5:00:06:d1:61:e4:30:dd:eb:70:1a:
a4:9a:e3:6e:e0:c2:2b:d9:97:29:4a:11:cf:88:a7:
69:d5:2f:46:1b:e3:e1:f9:92:88:36:e7:2c:62:d7:
a0:59:6d:93:7c:db:48:d0:78:11:17:0c:a8:2c:7c:
c5:a1:d2:12:2f:e2:6a:09:ca:91:aa:bb:2d:ab:72:
4d:37:fe:57:7a:af:d6:ec:ca:79:80:c9:ba:97:4c:
02:95:61:a1:f8:f4:31:31:05:86:df:d2:41:11:ea:
45:9e:72:58:ee:8c:d3:d8:92:60:a5:94:00:03:b9:
c5:ee:c3:14:5e:16:d0:15:2e:27:a8:77:b1:a3:c3:
97:1b:f3:2b:57:68:34:4c:49:73:d7:4d:17:91:1d:
c5:3f:51:2f:c8:01:d0:d7:b7:5c:2c:aa:e6:54:65:
e1:68:29:0c:4b:bf:5b:b6:33:33:0d:81:f2:d2:88:
b5:af:f4:9b:16:0c:21:06:a7:00:4b:50:a6:23:8a:
d2:2f:17:47:7f:f1:52:1d:fa:9e:25:1e:4d:9a:e6:
a6:10:2e:38:cb:91:16:b8:d5:e4:93:f9:23:85:ee:
94:ee:6c:5e:7f:bf:d1:fc:2f:d0:1a:96:da:51:a6:
c9:fc:27:bc:e8:fa:e7:31:55:a6:46:14:c8:d2:a3:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:CA:DE:A1:09:BC:F5:19:43:EA:89:CA:B3:CD:D0:D5:40:08:59
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:2a:53:84:61:8e:ef:46:f5:39:5c:2c:1c:54:9f:ca:9f:
07:b8:03:28:f6:2a:ae:0e:5b:b6:a7:fa:2e:7e:70:18:d9:d7:
8f:25:39:82:b0:cd:9c:38:de:69:03:92:76:63:b5:c1:06:1b:
c8:01:f7:32:db:5e:f1:4b:47:d3:b5:f5:be:a4:c4:17:ea:dc:
19:2f:ea:02:d6:ce:e9:54:a1:b0:f0:c7:87:0e:f6:5e:82:7b:
23:48:cb:90:7c:03:38:b8:0e:f3:88:15:b2:22:cb:b8:bd:5d:
a4:26:51:cf:27:05:97:6c:a4:cd:65:0a:38:1b:9c:da:dd:45:
38:b0:f8:27:ed:93:a2:26:60:69:e4:19:87:77:42:87:05:cd:
e3:41:d8:0b:40:44:ed:64:20:ee:bb:66:c5:9f:ae:ca:22:31:
a4:b3:0a:09:90:92:c6:52:dd:02:4b:2d:0f:a1:41:87:6b:85:
fb:e8:6d:6b:50:e5:16:6c:b4:88:02:2e:3a:b1:9c:03:6e:71:
b8:e6:f7:28:17:43:83:e0:c9:17:fb:41:6b:52:13:f2:08:ef:
ff:f0:0a:6a:9b:13:39:eb:a0:b1:c4:e8:e7:6f:3a:45:32:5e:
77:02:f6:62:48:ce:1d:5f:b8:df:7f:2e:49:0e:35:24:a8:bc:
14:be:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:22:32 2026 by rpki-client