Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: be0jJ1Yd9okFUOiLHq+D08lDDlRiKLVRXHeb8tr2Irw=
Subject key identifier: 14:DA:51:07:06:0C:19:34:70:7F:FE:C6:9D:7A:AB:98:8E:B5:53:78
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 01A11E9A9D606C027C75213471B052FD2A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1A27
Signing time: Fri 09 Oct 2026 03:00:11 +0000
Manifest this update: Fri 09 Oct 2026 03:00:11 +0000
Manifest next update: Sat 10 Oct 2026 03:00:11 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: uLfs/yxtWriVbRFYJO5Od9DQG39XmFoADOZ9H6VUKmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9a:9d:60:6c:02:7c:75:21:34:71:b0:52:fd:2a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Oct 9 03:00:11 2026 GMT
Not After : Oct 10 03:00:11 2026 GMT
Subject: CN=14da5107060c1934707ffec69d7aab988eb55378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:ea:7a:25:30:56:c2:c2:e1:93:09:5a:ee:
90:c0:a5:97:d7:3d:10:31:0f:c2:cd:a6:b5:3f:48:
08:72:20:98:97:98:6d:78:3d:c0:ab:11:83:96:74:
08:de:a7:e2:77:8e:38:6e:ad:01:d2:04:60:a0:6c:
8d:69:ec:11:b4:4c:69:ea:69:12:2a:93:ae:ab:0b:
fc:c7:df:f2:e1:38:d2:73:aa:cd:95:68:8a:da:ec:
7e:5c:56:f6:6d:5c:f7:0b:5c:18:31:7f:f9:ec:64:
b1:f2:c4:88:5d:17:10:7c:99:94:7b:a7:17:98:fa:
2d:a8:33:5b:db:e1:5b:09:40:df:53:64:fb:61:55:
93:3c:10:4c:26:79:58:54:4c:0d:74:0b:c8:cd:78:
75:81:12:8e:6c:2e:b7:c6:e7:7b:ad:f8:a1:c4:f7:
d7:55:ec:71:22:a2:a8:40:ad:a3:6b:a6:8f:0a:79:
5f:f9:98:52:95:4e:a8:5b:f7:9f:55:b6:72:3a:60:
59:7f:e9:e9:79:2b:f1:ac:ff:c2:f5:d2:d2:ed:ea:
d4:26:fc:ee:44:60:7a:a3:cc:b8:79:0a:59:40:2a:
98:ce:91:35:6b:34:bf:2d:7a:22:90:2e:3c:ed:e6:
ec:3f:48:48:cb:b2:3d:2b:00:f3:a0:c7:ee:33:bc:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:51:07:06:0C:19:34:70:7F:FE:C6:9D:7A:AB:98:8E:B5:53:78
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2e:1e:2d:d2:1a:0c:bc:51:55:34:30:c1:47:8d:84:10:47:
94:5d:c9:f0:1f:6d:b9:33:11:29:c3:34:80:b5:1f:c7:b6:76:
96:cf:48:1d:2e:3e:1d:13:b8:65:a3:a9:82:62:40:a3:e3:95:
c2:53:fd:9e:f0:c1:1c:ae:8b:14:63:3c:e9:0f:b5:66:5c:4b:
1a:9f:aa:43:46:79:b3:2a:a7:07:74:fe:2f:18:9e:62:5a:c5:
29:12:91:7f:10:fa:ee:9d:33:c7:2d:c1:f5:e4:44:87:9c:64:
03:45:02:91:4d:5d:33:48:e6:a7:fb:82:25:a5:1f:65:91:bc:
6c:c8:8a:c9:75:e1:16:ce:4a:12:1f:23:13:d7:7a:eb:fe:e0:
36:6d:a9:b5:86:87:41:40:31:a7:f4:47:68:95:a4:d6:1d:c1:
b3:5b:3d:9c:7e:e5:f7:fd:af:ab:29:fe:c1:9a:89:59:17:b8:
bb:07:03:18:1f:81:49:00:ba:16:0d:bf:a4:78:b9:57:e8:d3:
b6:ae:2f:cd:16:bd:05:45:a3:3b:bb:de:a5:5f:80:a3:05:91:
87:fe:83:f2:3a:f0:94:e7:3e:26:9f:fa:cb:15:95:68:7f:96:
a8:3a:45:01:21:68:d5:bf:be:1f:e9:1e:34:26:5b:52:e7:e2:
8e:eb:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:07:11 2026 by rpki-client