Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: UG5bdtCaZMxaxVyE2GwI/T7emEOndHBlBwV0xuCNtiA=
Subject key identifier: E7:E2:76:4C:40:A8:68:06:FB:6F:52:71:14:45:F1:5F:F9:EC:F9:6E
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 01A08C0D0EF5E9AB75365D78EC4B51F2EBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 17B6
Signing time: Thu 10 Sep 2026 16:01:00 +0000
Manifest this update: Thu 10 Sep 2026 16:01:00 +0000
Manifest next update: Fri 11 Sep 2026 16:01:00 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: pCYI5TEEz1uIEQ709KeGDp/IvsBmsInSXNxy4Z/coJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:0e:f5:e9:ab:75:36:5d:78:ec:4b:51:f2:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Sep 10 16:01:00 2026 GMT
Not After : Sep 11 16:01:00 2026 GMT
Subject: CN=e7e2764c40a86806fb6f52711445f15ff9ecf96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:16:0e:11:12:6e:6c:1d:4a:5d:80:d9:62:
a7:67:50:79:e6:a9:7d:40:9a:24:6f:4d:51:0b:3d:
5d:d5:1d:53:22:98:21:80:41:d0:5e:af:cb:7d:c6:
3f:10:59:d6:dc:a3:1f:d1:f6:07:f6:8c:01:ba:02:
04:e3:af:b8:f8:1c:54:13:c2:21:9d:78:26:03:24:
c4:c8:8a:61:34:c7:3c:16:dc:ed:07:60:a2:10:db:
81:9b:28:62:a0:7f:d1:88:6d:66:31:27:82:c1:e0:
17:d0:12:10:46:3d:cf:cd:18:dc:dd:c0:14:4f:68:
a0:54:76:57:3c:be:17:b9:ca:71:83:bc:ab:f8:62:
98:9c:09:e0:45:fd:b2:4d:28:5c:9c:47:fe:da:63:
7c:00:32:90:58:63:bb:28:0b:e8:8f:c9:7b:94:5d:
59:5c:e2:3f:c1:10:03:d5:7e:ae:f6:3b:9f:cc:c4:
fc:31:43:38:16:50:bb:62:62:4f:c2:69:12:23:7f:
7c:86:d3:76:ef:ce:8f:17:05:8d:4c:9e:6f:f0:f7:
e3:61:e6:58:d4:e3:dd:df:bb:b4:19:39:3a:d8:4d:
1e:a7:f1:6c:0a:bb:a2:2a:99:5b:0f:12:58:81:83:
92:5a:c7:d2:01:72:b9:9a:f7:16:58:13:f7:66:0d:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:76:4C:40:A8:68:06:FB:6F:52:71:14:45:F1:5F:F9:EC:F9:6E
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:42:ae:2b:e2:67:45:f5:f4:74:25:c1:8d:c2:82:08:a3:
87:1c:b5:74:2a:84:04:6c:31:db:2b:7f:b2:d3:ec:b9:e4:ee:
d7:cc:ae:81:c8:04:3c:54:09:37:49:c7:9c:8e:db:af:eb:4c:
11:23:80:99:64:f1:07:0a:22:aa:4c:28:88:c2:fd:df:43:f7:
4b:64:95:33:d7:1c:96:82:18:cc:1b:d0:d1:73:ed:f6:96:4f:
64:4c:ae:f9:91:65:09:d4:c8:1c:1c:36:2b:7f:40:aa:01:e5:
f6:72:89:30:eb:aa:46:c6:e2:b4:2b:2e:9d:23:7c:5a:31:0e:
40:d6:4b:b4:6b:00:4c:e8:6b:3f:c9:5d:fe:b4:9c:37:1d:50:
86:f9:76:13:4b:24:ba:d3:8b:6e:6f:20:3a:e6:cc:3d:8a:0d:
78:08:77:46:c7:d5:ee:a8:61:8f:24:39:0c:f8:b9:26:14:54:
0c:2d:db:d3:a5:6e:c6:a5:5e:7a:65:e6:66:d2:9e:24:cf:d2:
1e:5f:6e:fe:74:ce:b1:da:2c:77:38:87:cc:12:63:ad:88:53:
64:80:e4:92:be:94:c2:b2:a3:fe:e8:ed:c3:fb:e2:be:ce:50:
fc:d3:62:f4:6d:81:5c:9c:3a:5d:21:df:a3:6d:d8:fc:76:2e:
6a:32:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:04 2026 by rpki-client