Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: SY8KRw1+MPoRRBlYmoGM1ZAzVgSmd0mhFLs0VhXZ9vY=
Subject key identifier: 32:E0:11:29:A4:31:28:7D:87:B9:37:F0:F5:30:A4:D5:5E:19:97:50
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01A0DCF23DF3E3DD8763BF1E8254280CEDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 09:00:58 +0000
Manifest this update: Sat 26 Sep 2026 09:00:58 +0000
Manifest next update: Sun 27 Sep 2026 09:00:58 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: oHIWcSS3nj7weAg8ld1HF+IyRAhKpT7ktSfCi1cDUII=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:3d:f3:e3:dd:87:63:bf:1e:82:54:28:0c:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Sep 26 09:00:58 2026 GMT
Not After : Sep 27 09:00:58 2026 GMT
Subject: CN=32e01129a431287d87b937f0f530a4d55e199750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:e9:a1:65:09:e4:a9:7b:db:b3:7a:06:2f:
04:bb:a6:54:33:cd:1c:d9:66:50:36:54:5a:e4:f9:
16:4e:cf:82:27:fb:6b:db:df:88:2d:0d:c0:4b:aa:
3f:7d:2f:ba:ee:2b:29:e4:1d:a3:28:ad:18:24:b2:
98:53:b1:3d:e5:13:09:a2:d8:e4:ff:e2:d3:7c:96:
af:9f:4a:6a:c5:75:db:ab:97:df:9e:f6:05:f1:51:
d0:5f:4e:9c:ba:d0:e0:29:b8:3c:dc:51:dc:2d:b0:
7b:91:41:a9:f7:7b:7e:09:62:c6:9c:f6:4b:8a:af:
0c:29:bb:f1:c8:c7:29:14:44:65:68:42:c6:42:6e:
97:e5:c9:60:34:9d:06:75:eb:43:95:09:2e:3d:12:
39:b0:e0:91:e6:08:a9:d7:62:8b:80:02:a2:b0:c3:
8b:a8:14:c6:de:7a:e4:93:58:06:66:21:c7:a9:e5:
43:0d:5c:60:e3:e4:a6:e0:6b:9c:fb:94:b8:0f:d4:
fc:9e:27:92:a5:6a:ab:f5:7b:03:a6:28:3c:c2:a8:
98:b9:21:c3:80:b9:60:68:6f:eb:f8:cc:9b:c2:73:
74:40:43:8e:25:ce:92:68:65:fe:91:13:03:a4:29:
33:84:79:e3:ef:03:fb:89:ce:9a:72:fe:b4:cb:13:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:11:29:A4:31:28:7D:87:B9:37:F0:F5:30:A4:D5:5E:19:97:50
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:47:47:35:88:22:53:7b:b9:99:22:1f:14:08:6f:c9:fe:60:
98:fe:00:09:dc:80:a3:c6:67:ff:b0:f4:99:6c:26:27:cc:b4:
ab:d2:dc:ae:05:46:b1:6e:b4:fa:c3:ed:e4:e2:ec:62:7d:a4:
46:8d:da:1e:da:9d:72:e6:35:82:87:87:d2:47:aa:f0:fe:4a:
05:34:b3:36:2c:dd:f2:4f:1c:56:c8:a0:0e:6b:d5:57:79:81:
58:28:45:2e:40:52:b7:3e:53:fc:87:1c:eb:cb:aa:f7:e6:2b:
a9:b5:65:f3:aa:8f:15:64:69:67:53:28:c1:21:6d:83:be:40:
71:b7:fe:36:12:47:7b:91:68:8b:06:11:c8:1b:e3:9e:86:9b:
7c:5d:d0:cb:cb:e9:53:d7:90:f9:2f:44:3e:de:fc:2f:c9:d4:
45:9b:20:fe:07:5a:cc:59:3c:9d:44:e1:26:38:55:9b:8f:9d:
fc:43:de:8d:ec:e7:02:e7:a1:4e:a9:fd:29:d5:72:bf:81:42:
c0:2c:63:91:48:bf:78:51:a0:f5:01:6a:6a:56:09:c1:21:13:
33:b2:ac:38:5d:0f:25:d6:93:f0:d6:98:20:7a:b1:f3:59:23:
39:5d:16:e5:33:66:80:d7:3f:dd:6a:93:b1:42:f9:7f:95:11:
4e:14:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:22:55 2026 by rpki-client