Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: J+9Kys0uF5HL1nORY5xb7mzI4krHZ+n6HCUN1GomYWA=
Subject key identifier: BB:01:57:95:DA:D1:07:5B:5C:7E:D3:2A:B8:B6:6C:F8:CB:5E:86:E6
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01A0D61542512FF590767177722CC58E9B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0768
Signing time: Fri 25 Sep 2026 01:01:52 +0000
Manifest this update: Fri 25 Sep 2026 01:01:52 +0000
Manifest next update: Sat 26 Sep 2026 01:01:52 +0000
Files and hashes: 1: Bwg79WzNGXuNDZQSD0VsKUr5blo.roa (hash: /xVUo9naU8W1C7rWgQlkJRPv0Xsrg14Z0K50RIANuQ8=)
2: SoPl-FceNQvh4tMfOxE_AcHtfm8.asa (hash: cUeLaA0Vht9SwijgrX9Tc4UBzzMa5+2lTsXKWwL+29g=)
3: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: 4PScvmTMFE+3FDD5kbM0+uAvAeZi5ZYtfCOMZ8njouc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:42:51:2f:f5:90:76:71:77:72:2c:c5:8e:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Sep 25 01:01:52 2026 GMT
Not After : Sep 26 01:01:52 2026 GMT
Subject: CN=bb015795dad1075b5c7ed32ab8b66cf8cb5e86e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:35:e3:34:8d:da:16:c8:d2:eb:74:5f:00:
1d:b9:da:75:2a:ee:22:a5:12:4a:2e:d4:fe:d1:db:
2d:0c:0a:ac:ab:bf:97:bc:3d:52:ed:e3:e3:41:d2:
ba:e4:84:4a:0f:54:eb:6c:4b:d4:46:f0:6f:ba:8a:
a6:c7:77:df:f5:6b:73:27:78:4a:c8:88:0d:9b:99:
82:8e:f2:60:d6:51:68:fc:e7:df:7b:38:c6:f9:dc:
1f:81:a9:bb:3e:1d:df:5b:2f:a7:ed:d6:91:8a:fd:
2b:e5:30:8d:59:37:2f:bb:e1:03:1b:47:cb:9b:64:
96:84:95:71:32:3c:79:01:2a:7a:e7:3f:e5:3a:56:
3e:38:17:26:a4:9a:4c:55:8e:c9:f4:24:6e:cc:ad:
f8:95:a8:bf:49:80:2a:52:fa:19:9e:d5:56:89:cd:
5f:7c:c1:ea:6b:27:07:70:a9:39:79:3e:cd:29:75:
72:4b:df:d6:7f:17:3a:59:52:c2:ab:b0:f1:98:39:
64:f0:52:35:04:f9:09:95:5b:9d:b6:70:58:1e:2b:
4c:3d:b8:c0:fa:aa:8d:7c:37:16:73:41:28:a1:56:
48:da:3d:32:55:83:a7:41:cf:53:7f:fe:60:8c:d0:
68:0c:cf:0f:26:9d:99:60:5d:54:04:0b:0e:4c:7e:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:57:95:DA:D1:07:5B:5C:7E:D3:2A:B8:B6:6C:F8:CB:5E:86:E6
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:e0:e6:ee:2e:5e:7e:f4:33:a0:25:d0:d1:cc:f7:20:97:
66:b8:d0:a8:71:7f:28:e6:61:fa:e7:64:ff:8f:b6:6d:9c:95:
81:77:cd:54:7d:38:15:85:00:d3:c3:82:46:f5:46:12:e7:c0:
3b:1f:3a:b9:28:bc:43:72:08:2e:67:1d:56:f1:32:1f:92:b8:
d0:96:73:0c:72:9e:db:52:26:83:6c:8b:92:d2:df:eb:11:69:
07:6c:96:b8:7a:86:8e:b9:47:8c:46:30:25:59:fe:bb:b3:af:
8b:f9:6d:b2:9a:67:93:60:42:07:e9:76:e2:a8:f8:de:06:c7:
22:4d:dc:c3:75:2d:23:cb:d3:ad:74:ca:31:fe:44:e7:25:e6:
da:11:05:00:c9:9a:5e:50:54:67:4a:5a:2c:15:8a:aa:19:67:
19:2b:11:db:57:7f:f2:c5:b1:2b:11:8e:12:87:46:8b:32:11:
fb:d0:25:e1:5e:46:88:36:3e:51:13:27:00:56:6e:62:87:bd:
a0:db:28:0f:af:e3:11:c5:48:04:ad:1b:c9:63:93:68:44:13:
9f:30:b4:96:99:70:03:b7:4f:ea:9f:03:c7:f5:bd:af:b5:bd:
84:2c:da:35:8b:4c:13:a1:c5:11:ea:13:d5:97:5a:fa:bd:af:
d0:67:18:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:05 2026 by rpki-client