Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: 9ZqwyLUuxO3nZvi/o3cd5NC+G5RbTbERtjcO/wzA3Dk=
Subject key identifier: 93:C2:96:85:63:E7:62:C1:51:AD:70:29:FA:83:35:78:AF:96:41:DD
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 01A0D493FCD856401713AF7660942EA50AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 18:01:03 +0000
Manifest this update: Thu 24 Sep 2026 18:01:03 +0000
Manifest next update: Fri 25 Sep 2026 18:01:03 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: MEAoMZNlpYEBLE/jB1zySg6WkNSgrGv3zddxpA/gmxE=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:fc:d8:56:40:17:13:af:76:60:94:2e:a5:0a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Sep 24 18:01:03 2026 GMT
Not After : Sep 25 18:01:03 2026 GMT
Subject: CN=93c2968563e762c151ad7029fa833578af9641dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:bb:e1:1f:7b:1d:32:72:36:41:84:63:14:
cf:dc:e7:f2:25:ab:e8:9b:f2:76:5f:10:07:df:b3:
32:90:79:5c:e0:d7:16:89:f7:5f:7b:4c:3e:96:1c:
ca:06:b5:40:13:fb:29:80:7b:4a:f5:51:68:51:05:
83:35:87:31:ed:34:47:f0:d4:7e:d8:78:be:5c:11:
48:4a:d3:38:da:b6:11:02:d6:73:97:96:39:ec:97:
cb:49:cf:6b:3e:16:74:6a:26:5f:4a:94:1a:37:a7:
92:8d:96:ff:eb:1f:d0:2e:9f:7e:9a:64:ed:d4:bb:
d4:07:de:ee:e2:dc:84:04:95:9c:37:83:cc:35:22:
a1:5d:e4:79:28:0f:df:2a:05:d2:99:09:9d:aa:b0:
cd:e8:65:b9:f5:35:e1:7b:8e:b5:9a:f7:b6:6e:81:
6d:0c:d5:b0:42:36:2c:fd:ed:5f:b8:34:18:3c:bf:
9d:b1:f0:f7:f5:c3:ae:d8:d7:a8:47:7f:ef:0f:95:
bd:c9:50:94:ba:e0:43:4c:02:cb:2f:26:41:b1:dd:
ff:c8:df:13:f2:87:9d:ec:f6:9f:5c:62:ba:8a:6c:
df:95:f3:3f:83:4d:7c:42:c9:23:58:a8:1c:49:58:
2f:00:74:b9:6f:c2:ad:65:d7:04:52:02:46:7e:8c:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:96:85:63:E7:62:C1:51:AD:70:29:FA:83:35:78:AF:96:41:DD
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c8:11:c9:d4:d2:dc:2c:37:19:dc:e9:04:0f:6a:a9:92:2e:
05:49:9e:a0:42:d1:4c:cb:9c:25:e4:4b:4a:bb:19:7d:3f:61:
9b:37:6a:b2:af:c7:b1:b7:de:60:47:8c:c0:94:18:92:2b:9f:
35:8d:8c:73:f4:23:43:2d:68:9f:79:93:2a:44:97:b5:79:37:
9a:41:d9:28:f3:ce:4c:ec:c7:f9:f0:6b:94:c9:cc:9a:c1:3f:
f0:8d:93:f1:69:3e:a4:a6:37:8d:2f:29:af:ad:9c:92:a0:19:
2e:f8:6b:ab:cb:97:73:08:6b:b5:88:2d:5a:20:a1:43:aa:19:
b8:67:5e:16:14:2e:37:b2:8e:2a:5d:2f:1d:fe:5b:a7:9c:6b:
22:5b:cc:54:62:8a:55:4b:95:fb:df:dd:8e:62:2e:3f:12:81:
ca:4d:4c:16:36:37:7b:31:78:51:d2:b1:79:d8:3b:9b:37:30:
ec:7f:26:26:43:c9:f5:f6:77:75:34:a0:fe:28:5d:bb:d5:97:
5b:79:93:f5:68:cc:da:c2:1a:79:d0:89:36:a1:74:24:c1:ed:
bf:4a:2c:7b:f7:bc:f0:d5:b1:7e:5c:59:44:97:4e:1d:36:16:
9d:7a:ad:f7:fb:3d:1c:90:52:bc:3b:c7:98:6d:ee:1f:18:4c:
3f:8d:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:29:11 2026 by rpki-client