Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: KTTdSaCyWrak5Qx36cfjf6dixI2mXWdNpHM6MRh2RQk=
Subject key identifier: E2:9B:DE:BD:DA:5A:BB:29:9D:93:DA:9C:A5:9E:31:87:39:9C:25:7A
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01A14EABE244AF428B53D1E982E141F8AF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1AB4
Signing time: Sun 18 Oct 2026 11:00:49 +0000
Manifest this update: Sun 18 Oct 2026 11:00:49 +0000
Manifest next update: Mon 19 Oct 2026 11:00:49 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: qrkzaBpmTaX/FKZVs9dtJevM9Tt59t2AlrLI6RXy4Ro=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ab:e2:44:af:42:8b:53:d1:e9:82:e1:41:f8:af:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Oct 18 11:00:49 2026 GMT
Not After : Oct 19 11:00:49 2026 GMT
Subject: CN=e29bdebdda5abb299d93da9ca59e3187399c257a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:f7:f5:8e:3c:d9:53:22:48:e4:d6:d4:1b:
b6:0f:4f:0d:3b:4b:ea:2c:e9:53:d6:4e:62:52:35:
3f:cd:73:7a:df:4a:7e:d1:0b:11:94:37:21:b9:fc:
f6:d3:10:8a:72:a4:6b:6f:17:5e:77:95:94:a7:79:
0e:d1:a1:50:03:75:b8:15:98:23:32:66:ad:a6:c7:
cd:5d:16:59:b5:a3:1a:c4:16:1f:b8:70:7d:c4:97:
39:06:e1:3d:60:a5:61:12:b8:0d:84:c6:d8:8a:5f:
5b:15:c7:2b:75:6a:ee:4b:af:11:91:50:b5:f0:ee:
b4:c0:24:2b:62:1d:2d:43:76:f3:30:b4:4e:1d:f7:
9c:02:b4:85:35:b7:f9:76:9e:37:4b:be:aa:70:9d:
55:d0:6b:84:f3:d1:43:67:64:77:35:4e:58:f9:a3:
17:08:b5:e6:ee:ff:0f:46:b9:92:f0:44:91:47:1b:
b4:40:97:22:e6:f1:eb:29:ca:42:f2:0c:3e:98:eb:
6e:3a:b4:6f:b7:ee:bb:3b:1b:cf:b2:4e:54:cd:44:
20:84:0e:2a:e8:8f:28:16:af:f5:0f:52:97:12:d7:
be:6f:7f:e1:c3:c8:fa:a4:52:59:b0:02:fd:cf:d1:
6c:e8:e4:cb:c6:40:b4:6c:54:25:7a:e0:68:e7:00:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:DE:BD:DA:5A:BB:29:9D:93:DA:9C:A5:9E:31:87:39:9C:25:7A
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:b1:0d:cd:cf:9c:50:14:32:95:ee:d2:0b:a8:26:ca:b6:
f2:cd:6b:ae:52:0a:22:30:21:1c:0d:94:88:b3:a8:4e:b0:a2:
11:04:1d:c8:05:a6:00:b4:14:3b:75:7a:6b:5d:57:41:52:01:
da:af:8d:d5:a1:da:1c:a4:45:f9:3f:3d:8d:dd:60:19:e5:c7:
4a:79:a5:d7:a9:49:ce:4d:04:12:96:94:5c:5c:78:3c:29:e2:
11:e1:f6:f0:ed:ee:0d:a0:5a:70:0e:6c:24:e8:f1:7b:95:d9:
2a:8a:7b:28:cf:6a:c9:28:1c:e7:95:f9:72:d2:49:e7:3c:21:
67:5f:ff:8c:bc:c6:52:ae:45:16:db:34:05:aa:df:4b:1a:f6:
87:93:d1:54:78:36:90:6d:42:8f:e3:1a:dc:3d:a9:d5:2c:fc:
ac:66:35:e9:95:a4:e3:68:d5:14:cf:f7:9d:b6:41:a9:46:bf:
71:40:49:19:ad:4c:85:8a:0a:3b:b6:6a:ac:4e:f7:6a:43:01:
0b:61:99:7a:70:48:ca:5d:c8:f2:4e:15:e3:5e:f5:ad:9a:ea:
3e:8a:cc:35:13:db:b2:0a:46:52:8c:97:3c:25:e3:58:e8:f6:
df:a2:15:36:0d:7b:07:c8:f6:8f:ba:00:d7:b2:96:38:7d:4d:
5a:ca:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:29:53 2026 by rpki-client