Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 6QfYa1nnArngyV/yUiTwPsv7QP1RSqFnqOpnC4fKP6g=
Subject key identifier: 21:2F:56:9D:AA:07:DA:DA:3F:A7:EC:73:65:D9:FC:FF:35:49:8E:1F
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01A13B24F54539E441A231F393B56A2C226A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 16:00:40 +0000
Manifest this update: Wed 14 Oct 2026 16:00:40 +0000
Manifest next update: Thu 15 Oct 2026 16:00:40 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: j1ZUnlTzbBvEwlfETBABJSW8ovUyrixN5lgTXOSUVT4=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:f5:45:39:e4:41:a2:31:f3:93:b5:6a:2c:22:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Oct 14 16:00:40 2026 GMT
Not After : Oct 15 16:00:40 2026 GMT
Subject: CN=212f569daa07dada3fa7ec7365d9fcff35498e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:04:2d:cd:e1:44:3a:62:62:31:ae:5e:6e:
e9:b7:2e:e9:ea:6f:72:dc:c1:23:a7:6f:5c:5d:a2:
47:8c:b1:65:db:b7:94:54:58:db:37:c3:2a:fc:32:
85:f2:2f:1a:8b:37:3f:d8:24:32:dd:2f:e5:19:4f:
7f:98:2d:b8:5f:22:16:c7:d5:da:38:54:d5:2f:e0:
63:b6:66:27:bd:27:18:b4:bc:5b:69:f3:af:1a:d8:
6f:f6:df:a0:19:ff:6a:24:46:e8:8e:37:a3:51:fa:
cc:c3:3f:17:13:23:8e:30:9c:e5:5c:eb:17:5f:e3:
62:17:84:8c:1e:7f:d2:eb:c6:c9:66:cc:cc:c3:d3:
07:c7:bc:95:15:12:95:39:68:74:09:20:88:6d:ad:
7c:fc:3d:00:0e:a5:99:22:f3:95:9c:6d:35:9c:9d:
e1:7e:1c:06:cc:e6:55:d7:7a:88:47:fc:1b:86:9b:
61:c1:88:b1:08:86:77:2d:56:a3:61:dd:7f:4c:d4:
e1:9a:38:14:2c:25:24:02:da:24:18:d0:2b:28:73:
1c:39:7a:af:9d:fe:77:9a:8d:46:9e:59:93:33:06:
3f:28:11:5b:d7:1e:1c:6c:2f:90:d6:d7:33:7e:26:
dc:d3:05:75:03:8b:6c:09:0e:79:1e:88:12:fb:42:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:56:9D:AA:07:DA:DA:3F:A7:EC:73:65:D9:FC:FF:35:49:8E:1F
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:13:b1:4c:d1:3a:a6:63:34:2c:a8:9e:8a:11:df:3e:f0:
98:74:85:c9:63:1b:82:4e:77:5b:ec:e1:e2:65:89:a6:1b:18:
75:fd:ae:d5:2a:14:dc:cb:ee:c4:a3:c1:f3:57:f9:01:fa:60:
ed:36:a8:c6:6f:d3:1d:91:35:1a:2e:50:56:24:3b:d7:50:ee:
8f:a9:7f:7c:e9:b0:a9:a8:f7:d4:9d:16:02:6b:4d:4c:de:4f:
e7:6b:4b:6a:e9:a3:32:6c:0f:74:5f:a9:49:26:bc:b5:c0:5b:
1a:7a:4a:42:2b:3a:6f:f8:db:56:b7:3b:62:e9:3f:bb:7a:75:
24:2c:68:71:9a:d2:02:71:fb:06:83:73:cf:c2:7f:88:75:3c:
a2:f4:fe:0d:ce:2b:e9:8c:06:d8:07:b7:d5:17:26:57:d1:fe:
0c:6f:2b:bb:47:65:e0:77:0f:d9:d9:ad:46:74:1f:e9:0b:e2:
f7:53:8d:8a:b3:17:a6:63:88:3f:12:9c:ee:cc:00:9b:11:75:
3b:ea:c0:22:ca:e1:06:74:70:d0:0e:6f:df:c7:3b:34:3a:9e:
e8:ff:ad:27:88:a2:8f:86:38:7b:b4:49:97:de:47:64:e2:66:
08:54:09:fc:e7:79:7f:6b:f7:59:53:eb:9b:9d:4a:6a:1d:c4:
0c:4d:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:13:04 2026 by rpki-client