Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
File: jrM9OZ3Q9flhftTkcOa9ydELeiA.mft (raw, json)
Hash identifier: MpuUK+4ija+ImKqA6Ukhk07QrjQi5AsKzOI7ogDyFmU=
Subject key identifier: 55:5F:34:48:D0:08:41:41:1D:BE:A1:DF:F5:77:45:9E:AF:E3:99:75
Authority key identifier: 8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
Certificate issuer: /CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Certificate serial: 01A1062593BA9896D42DC8DE2CEDB918278D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
Manifest number: 021A
Signing time: Sun 04 Oct 2026 09:01:28 +0000
Manifest this update: Sun 04 Oct 2026 09:01:28 +0000
Manifest next update: Mon 05 Oct 2026 09:01:28 +0000
Files and hashes: 1: _Wy5a31X0fWVI5kzqNmJQQC4UbU.roa (hash: 9Bcaw7GkeT0B0JGjnO2Z6JkUkn/KrawL89AtsYKJKU0=)
2: jrM9OZ3Q9flhftTkcOa9ydELeiA.crl (hash: 3sNgehkn14LaU2Lw5Ak2IfhoLt0CHaPWb+d5Di18I0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:93:ba:98:96:d4:2d:c8:de:2c:ed:b9:18:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb33d399dd0f5f9617ed4e470e6bdc9d10b7a20
Validity
Not Before: Oct 4 09:01:28 2026 GMT
Not After : Oct 5 09:01:28 2026 GMT
Subject: CN=555f3448d00841411dbea1dff577459eafe39975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:01:bb:74:38:ac:63:66:1b:30:4a:f4:20:
95:5e:85:65:f1:ba:d2:ae:cb:26:96:eb:7e:5c:69:
fe:71:6a:f9:a1:1a:69:a3:ba:33:a4:63:04:21:de:
ba:0f:c3:0c:1f:6d:03:43:f6:33:37:90:f5:31:86:
4a:c4:be:ee:2a:a0:82:62:7b:a2:41:e6:1d:6b:4f:
46:52:b3:75:ec:04:3e:b6:50:ce:d2:ff:d0:b3:eb:
63:6c:5f:f5:a8:ce:e6:d0:01:40:b6:15:fd:73:1f:
67:db:fe:be:16:d1:9c:92:8d:27:eb:59:09:b0:6f:
fd:8e:e1:6a:07:bb:7d:48:c7:61:14:5a:44:01:74:
96:a0:52:16:2e:eb:85:e9:09:23:37:f9:a0:04:c1:
42:35:0b:a3:95:c6:b8:82:11:cb:de:03:ae:a5:ed:
fc:02:44:cc:30:e3:18:42:d9:5e:ea:f4:98:b1:d4:
bf:a2:7b:8f:ce:84:a8:eb:e9:8f:e5:ce:0a:11:10:
70:74:7a:15:4d:54:f8:f5:05:4b:12:41:f1:2a:50:
93:fb:ad:a7:a1:2a:a2:4d:2d:aa:11:0a:c4:78:b9:
7b:2b:11:6e:10:5b:b5:39:2b:b0:b0:44:67:c6:32:
ce:73:7b:8b:7a:b3:89:5c:ed:db:13:a2:53:5b:f5:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:34:48:D0:08:41:41:1D:BE:A1:DF:F5:77:45:9E:AF:E3:99:75
X509v3 Authority Key Identifier:
keyid:8E:B3:3D:39:9D:D0:F5:F9:61:7E:D4:E4:70:E6:BD:C9:D1:0B:7A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrM9OZ3Q9flhftTkcOa9ydELeiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b10f05-4c5c-4747-b704-fd17ba88d8cb/1/jrM9OZ3Q9flhftTkcOa9ydELeiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:6d:7d:19:7a:22:42:b7:2a:fd:55:51:8a:32:41:d4:05:
a3:2e:43:b5:21:c0:e3:3d:38:72:59:9e:68:5c:48:5a:f8:29:
72:50:31:85:50:81:1f:a6:8a:7e:19:c4:b1:c5:51:41:e2:6d:
5b:25:11:16:59:60:37:74:81:24:a7:dc:4d:ce:f2:29:2a:9b:
56:62:9d:0f:77:71:a4:94:be:88:45:10:06:3a:9d:5f:b3:5a:
4c:ec:99:82:e0:56:36:c7:8d:79:ce:3e:1a:51:e8:02:a3:49:
c5:27:a4:c6:7e:e3:46:fc:94:b2:81:62:fa:96:d5:9f:5f:a7:
bb:ca:84:5b:86:04:bc:04:c2:42:45:79:7b:69:09:5e:aa:c9:
d7:9f:72:40:e4:1a:0e:a2:0c:3c:29:d6:3a:3b:2c:c5:23:34:
86:b2:5e:19:7a:a0:c1:ca:cc:f0:4d:56:a8:ab:6e:ea:93:58:
52:82:43:21:5c:86:fe:8a:29:2c:fd:69:00:5a:4a:68:cf:14:
56:9e:74:b9:93:f2:f0:d1:81:23:73:82:05:a6:24:a8:ce:93:
c0:4a:5f:64:e1:98:a2:9e:c1:5e:d2:4d:79:c7:9d:70:fc:8b:
a7:8a:3c:1d:1e:32:e0:d4:20:69:cb:f4:7e:b1:16:e7:69:69:
22:a5:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:22:43 2026 by rpki-client