Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: tVsIQundgOAaPX9dF6vkq2NpwauoaAraDVJY7++p+/c=
Subject key identifier: EE:50:34:21:39:97:76:96:A9:35:35:30:1B:75:BC:30:4E:28:6F:A9
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01A1DDCC2B92ADC77AD3C0D75C005A2278C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 06:01:47 +0000
Manifest this update: Sun 15 Nov 2026 06:01:47 +0000
Manifest next update: Mon 16 Nov 2026 06:01:47 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: C6wIBMdYAZutbj1y652YZJC0j7CJlF047mqf1uoEIxE=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:2b:92:ad:c7:7a:d3:c0:d7:5c:00:5a:22:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Nov 15 06:01:47 2026 GMT
Not After : Nov 16 06:01:47 2026 GMT
Subject: CN=ee50342139977696a93535301b75bc304e286fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:14:27:54:98:e6:b7:60:65:3e:17:99:09:06:
cf:ec:cc:1d:b8:ee:8e:8c:13:a9:03:92:45:37:6e:
67:e0:78:6b:f8:75:2a:48:36:7b:5c:bd:09:d5:74:
91:20:87:99:eb:fc:9f:ed:a5:1f:6e:53:0b:eb:68:
84:c0:84:70:9a:f7:02:0a:1f:32:0d:ca:d9:f6:43:
55:8f:7d:04:7a:79:6e:5d:1b:6b:ba:1a:f7:ee:58:
c1:bb:76:e0:99:ba:89:84:f6:78:f6:b4:f1:3c:58:
71:cb:9e:93:58:62:a0:9f:c9:3a:c3:7b:95:47:1a:
bd:05:51:ab:33:5b:ed:23:ce:3d:a0:06:0a:48:00:
e6:27:42:44:21:e5:19:d0:8a:02:7f:83:07:fb:d0:
87:bf:2b:75:50:d2:e9:44:28:23:d6:95:0e:38:83:
b2:c5:6c:af:ef:87:5d:60:16:1f:ed:31:49:bd:10:
7f:62:8e:81:0e:19:c0:eb:0b:45:ac:e4:a2:de:84:
e4:6a:80:3d:14:33:f0:cc:a1:39:d4:57:40:b5:0b:
73:80:4e:7b:3f:08:b4:86:94:78:c7:e0:3c:69:cd:
91:fc:ab:3c:59:85:56:d3:e3:45:f7:b1:40:60:99:
9c:72:29:c3:d1:bc:14:2e:f5:20:44:9c:73:9b:fa:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:34:21:39:97:76:96:A9:35:35:30:1B:75:BC:30:4E:28:6F:A9
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:2d:00:68:7c:fa:17:8f:7b:0b:af:3d:ab:5d:4d:44:72:
9b:e8:c8:58:3a:17:27:72:29:60:06:4c:f5:3a:85:a7:85:30:
50:76:e5:a6:94:0d:12:5f:e6:4b:5c:5b:eb:2a:b3:2d:8c:eb:
b1:39:d0:58:0b:f3:a3:0c:35:b7:2b:ee:24:90:32:d0:59:a5:
b5:10:36:f0:4f:28:94:e3:72:9c:ff:55:a4:8d:b9:76:34:f1:
a8:85:de:a5:91:11:0b:fa:8b:d8:38:92:e2:7a:91:09:94:7f:
bf:23:6e:7e:8c:81:56:aa:99:71:f8:52:a3:de:8d:c3:52:82:
28:20:7c:35:10:6b:47:fd:4a:a7:e8:ec:f9:d4:a4:c4:5e:1d:
0d:d0:76:0f:1e:22:ed:fb:f5:44:4f:4b:85:a9:a6:f6:3d:2a:
b1:51:73:7d:70:c1:a5:9a:f1:19:a0:31:2a:82:a6:6d:5b:85:
83:52:ae:b8:bb:e2:3a:db:29:56:a3:16:7a:48:8c:53:92:24:
70:72:8d:08:ec:d7:39:63:24:3a:30:d4:ed:e3:c8:23:4e:3c:
61:1e:45:57:2e:aa:4d:e1:4f:24:6a:b7:9c:eb:70:40:c3:8a:
eb:80:56:15:73:b6:a0:5f:c0:1a:cf:9c:32:d1:4a:85:f2:59:
23:e4:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:45:25 2026 by rpki-client