Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: ZpSRB1317imi3TwqharJ0AtkcyL5yMoVvjky6ZxZDb0=
Subject key identifier: 38:D1:9B:47:FC:2F:41:86:00:ED:09:12:38:19:F2:32:45:A2:E7:B0
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01A08FE9B01535CC9E4AB9F83E76F219F983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 151A
Signing time: Fri 11 Sep 2026 10:00:51 +0000
Manifest this update: Fri 11 Sep 2026 10:00:51 +0000
Manifest next update: Sat 12 Sep 2026 10:00:51 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 9BxqUIu265LTaD48FUXmDLfJsmFr90NUAxQ0QW4qDEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e9:b0:15:35:cc:9e:4a:b9:f8:3e:76:f2:19:f9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Sep 11 10:00:51 2026 GMT
Not After : Sep 12 10:00:51 2026 GMT
Subject: CN=38d19b47fc2f418600ed09123819f23245a2e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:26:e2:82:37:e2:b1:46:81:22:8f:4c:93:
f5:7b:09:bd:ed:d8:03:32:73:e6:ae:7f:1d:38:2d:
9b:31:cc:56:76:44:5f:7c:c1:a6:8e:8d:47:1f:95:
9c:56:f6:8a:99:2e:41:d7:20:32:83:12:b9:76:8d:
30:04:f3:a2:ca:c4:0b:6f:4e:9e:41:a3:57:f4:b7:
b2:0b:81:2d:8e:35:bf:d3:32:d5:c1:32:e2:2c:4d:
1c:6b:ab:f3:e4:db:46:82:e8:06:14:97:18:b6:7b:
ed:f2:41:c2:4e:f5:e1:39:7c:e4:20:b3:ae:26:dd:
7e:5d:ce:41:de:d5:fc:9b:d1:07:54:16:7f:30:6a:
8d:7a:4d:5a:37:10:c5:ee:27:ce:de:35:b7:0b:45:
7b:fc:39:15:49:8f:fe:9c:5d:df:a1:75:aa:d9:dd:
97:a0:be:f9:7d:89:a3:a4:82:72:8c:06:72:51:c6:
a9:0e:bc:3d:88:78:89:98:41:e2:dc:83:40:4c:9c:
09:1b:f8:e5:5f:94:28:96:b9:9f:be:12:ae:9b:fb:
6b:d2:cb:07:ae:6c:62:ad:59:46:5e:19:47:17:fe:
7e:cd:81:7c:d4:3b:2a:81:00:e8:b8:8f:3f:2a:84:
5c:02:a3:26:5b:8f:32:e3:13:12:fe:88:47:89:7e:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:9B:47:FC:2F:41:86:00:ED:09:12:38:19:F2:32:45:A2:E7:B0
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:34:e6:71:3a:71:6d:54:2d:af:b8:ca:2d:57:61:81:ae:
73:30:cd:16:07:2e:84:e2:0c:cc:71:80:44:a2:22:f7:c7:f3:
a6:0e:e0:d4:d9:e5:0a:c6:a1:01:cc:f7:d6:73:90:69:e4:60:
e0:be:34:14:5c:a6:12:15:9e:91:57:aa:e5:2d:b9:75:f1:0d:
2d:84:c8:d0:ee:e4:22:61:ef:b0:33:8f:df:e6:89:3f:5b:60:
3e:31:72:20:e8:78:00:07:4d:ab:9d:51:c4:ee:64:fd:18:20:
b7:03:02:0a:5d:a4:99:f8:1a:be:dc:83:a1:66:d9:9c:c3:fd:
f0:4c:07:9d:2b:32:12:b9:89:b9:b5:c6:58:72:13:11:3b:68:
8a:1d:00:cd:5e:63:8f:7d:5c:ab:2a:2c:ac:5c:5f:ea:b3:35:
a7:6e:5f:27:86:e5:d8:25:71:fb:ac:5b:d5:76:ed:f4:10:02:
81:92:f1:bd:b4:e5:fc:f8:08:81:a2:76:2e:38:f3:d2:da:c5:
5b:3b:ad:60:89:7b:78:44:8f:f8:76:f5:6c:ce:42:de:bc:d3:
6d:0f:69:85:69:4b:ca:3d:c1:55:83:4f:38:83:ba:58:80:27:
f8:17:80:23:f3:ce:0a:a5:33:ef:af:9b:b2:3a:02:f4:9a:cc:
39:23:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:33:59 2026 by rpki-client