Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: m17f4IofrJPGrwgsJM0zutmRptaJhED+lJXxTnVpv1E=
Subject key identifier: DE:97:2A:6D:13:09:96:47:2D:29:73:24:05:48:E3:0F:61:82:D1:45
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 01A10B4AEB4618616864C5CC75D02F4C58D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 071D
Signing time: Mon 05 Oct 2026 09:00:21 +0000
Manifest this update: Mon 05 Oct 2026 09:00:21 +0000
Manifest next update: Tue 06 Oct 2026 09:00:21 +0000
Files and hashes: 1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: BllAwJVeoJ8MdO6Z0xarIJ+2ZiIW9ZxIpBAYpAeFUIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4a:eb:46:18:61:68:64:c5:cc:75:d0:2f:4c:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Oct 5 09:00:21 2026 GMT
Not After : Oct 6 09:00:21 2026 GMT
Subject: CN=de972a6d130996472d2973240548e30f6182d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:27:b1:97:83:23:de:69:52:09:82:95:c5:
81:f4:ed:41:c7:46:f4:81:60:a3:a5:b6:33:d5:ea:
e1:f8:23:43:57:d3:1e:da:19:62:0a:e7:bd:a6:9b:
c6:a3:e2:b0:f5:ad:15:71:8a:c8:ec:e3:16:4d:5b:
22:ec:25:79:46:48:4c:8a:c2:e9:88:f9:0a:e8:6f:
d8:cb:e9:43:60:e6:7c:da:0a:0f:3d:9f:8e:99:e1:
64:c7:21:65:5a:e0:68:a0:1d:a6:6b:ac:04:4a:d7:
57:85:ff:f3:f6:49:0f:ea:fd:8d:08:c3:01:aa:76:
6e:a2:e7:5a:18:c7:ad:4a:03:f2:a8:e3:0b:81:37:
e3:07:ca:84:bc:b4:38:51:b6:69:13:59:16:a5:ef:
41:14:84:c7:85:0f:6a:7f:62:f3:97:56:bc:1c:10:
e8:b1:d1:4a:2a:e9:f7:01:be:85:08:e0:a4:59:0c:
f3:6f:eb:96:43:8e:1e:a0:99:f3:d8:5a:13:2e:14:
f8:82:f6:39:25:2e:5e:00:45:74:8f:11:a6:b1:1f:
8b:c0:25:7b:e6:3f:4c:f6:ad:34:1d:1f:2c:93:29:
1d:f2:8d:84:d0:68:23:71:b5:fc:e5:fa:54:84:23:
2a:de:4d:c0:e6:c5:f6:e9:6e:5f:2f:4c:36:a7:ca:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:97:2A:6D:13:09:96:47:2D:29:73:24:05:48:E3:0F:61:82:D1:45
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:00:ee:bd:8b:59:ca:f9:d3:21:db:b4:b4:60:e9:f9:31:
2a:e5:b9:93:d9:9d:59:3c:44:d3:81:65:6e:8b:57:68:17:8b:
16:2a:4f:03:bd:23:d6:f5:6e:5f:0c:9b:1e:e0:ad:db:78:bf:
b0:8c:ad:22:b4:63:96:3b:2f:84:e3:53:ca:df:c3:72:46:7f:
68:ff:77:c5:75:8a:90:dd:d3:b9:fa:b9:62:fb:b6:70:ed:8c:
3c:2f:a0:90:32:2f:57:5c:ed:08:5c:f4:ef:59:42:49:26:b8:
f8:92:dd:fa:8d:36:6e:bd:39:d0:b0:0f:9d:e7:3d:3e:22:8c:
d6:fc:a6:00:37:13:bd:4d:a3:fd:44:a1:3a:4a:1a:fd:6b:e0:
36:ac:37:af:af:68:d1:3b:52:ca:b5:9f:5e:83:e7:18:d8:7f:
85:1b:69:4f:3c:d8:e4:08:59:e6:9a:4c:83:60:48:94:1f:60:
1c:2b:b3:27:58:78:ef:1c:13:40:21:14:c4:8f:bd:62:21:21:
90:b3:fa:b7:02:ff:74:4a:0d:a2:3b:4c:06:6c:a3:74:67:10:
eb:0a:92:19:43:26:60:eb:e9:8b:78:2d:6a:29:69:c4:23:83:
a9:c7:fd:18:13:dd:41:b4:d8:d6:b7:be:68:5f:1e:d4:0c:e9:
41:c5:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:30:24 2026 by rpki-client