Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: YCZRoCa4JUDKxA87fZjFTQP031qzcPugmUsPnzN0+Xs=
Subject key identifier: 38:83:74:C2:BD:98:3A:BE:EC:89:D4:92:60:E9:11:C5:73:90:3F:2E
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01A11A8758F78BC151AABFBC85FD0A2B9A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1993
Signing time: Thu 08 Oct 2026 08:00:39 +0000
Manifest this update: Thu 08 Oct 2026 08:00:39 +0000
Manifest next update: Fri 09 Oct 2026 08:00:39 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: CiJvbVlB0B1kW/pe+vF0dzcAwW2oJTjU/MerrUUBYIY=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:58:f7:8b:c1:51:aa:bf:bc:85:fd:0a:2b:9a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Oct 8 08:00:39 2026 GMT
Not After : Oct 9 08:00:39 2026 GMT
Subject: CN=388374c2bd983abeec89d49260e911c573903f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:b2:4a:89:1a:9b:2b:d4:95:2d:fd:15:4a:
aa:e4:95:e1:b7:0b:87:e4:dc:23:80:d8:65:e5:07:
4a:70:1e:b2:09:8d:fa:b6:40:fb:f5:d3:b7:53:58:
d1:36:a3:aa:fa:06:15:d9:52:59:64:27:6b:56:c8:
27:97:a9:df:e0:5f:8f:0d:26:7c:12:04:69:9e:e1:
a0:71:c7:31:2b:56:2f:04:02:d9:af:5f:52:fd:2d:
6f:36:38:77:67:88:45:e7:e0:a4:fc:5c:37:73:88:
dc:7f:65:03:8f:35:70:b5:8f:a0:44:e0:f1:c2:ce:
27:e9:e6:c6:d5:b9:0f:b1:e2:fa:e5:0b:31:27:3a:
37:50:4f:6b:f8:07:1b:c6:96:44:28:1b:03:03:35:
4a:bc:29:13:85:3f:d1:14:be:e4:d6:ed:47:a6:1c:
de:84:b0:3d:4b:ba:a2:a9:58:c2:57:64:39:c1:28:
e8:0a:d3:9c:48:0a:e5:8b:82:8d:23:22:ff:cf:c5:
c0:23:46:b7:66:41:f9:f5:04:0e:ce:b5:05:37:d7:
97:2f:0c:b7:54:fb:ce:60:0a:a9:61:46:f7:56:b4:
0e:53:f0:4b:56:89:36:e5:60:0a:31:fa:9f:65:6d:
da:da:bb:0b:b1:04:60:97:a9:1a:0d:d1:88:17:52:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:74:C2:BD:98:3A:BE:EC:89:D4:92:60:E9:11:C5:73:90:3F:2E
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6a:d9:7a:83:ce:c6:72:10:98:58:b0:dd:b2:ad:9f:31:2e:
13:a7:dc:0d:76:36:3c:16:d2:7c:f9:e7:ac:2f:52:a2:2d:92:
63:21:fe:ca:ca:ce:b9:7e:b8:b2:84:85:56:40:d9:87:6d:60:
99:72:ab:c1:ad:bb:0d:48:19:91:07:a3:be:42:5f:9b:c7:33:
21:0c:8e:2b:c6:d2:fc:26:4c:b5:73:e8:86:9d:1a:c9:98:65:
6a:15:d1:ac:81:f2:f6:32:68:39:ca:f0:af:02:b7:21:45:ea:
52:8f:d4:75:ce:cc:17:7d:cb:db:c2:db:74:bc:eb:e4:df:fb:
98:76:ab:04:27:2e:f3:08:b7:58:7d:d9:0e:f3:ec:6b:b2:1d:
c1:2f:57:29:e2:d7:ef:9d:0a:36:0f:c9:aa:ed:81:d4:63:f3:
fb:b4:f2:c1:e4:91:8e:3c:fb:44:ef:ff:24:e2:ea:f3:a9:e6:
ef:63:d2:4a:92:dc:ba:70:d1:62:fa:87:2f:c4:ba:e4:e7:4d:
83:94:80:90:d3:c5:86:c0:a1:9a:89:8f:fe:dd:70:15:1b:76:
28:55:a7:6e:e7:f2:d7:87:79:07:76:79:b5:c2:87:31:1b:29:
11:f9:fc:f1:d4:58:50:8b:93:aa:0f:1c:ef:f8:05:df:ea:50:
fb:94:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:23:44 2026 by rpki-client