Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: 5gEjKVEOik8kiQRlqWX8la96G89Qj7ujztRW9QoJwOI=
Subject key identifier: C3:D4:51:74:C7:16:27:08:B5:60:E1:EA:6B:82:F3:0D:50:66:38:2B
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 01A06E39B2F961E102153110D54394F382E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 21:01:10 +0000
Manifest this update: Fri 04 Sep 2026 21:01:10 +0000
Manifest next update: Sat 05 Sep 2026 21:01:10 +0000
Files and hashes: 1: GkzZaU9MgVD-nMdbajbpL-Lxeic.asa (hash: a29ZY6jDI+dNv380NXhhKvjL2Q9sgN1KzPSWh3x0GTw=)
2: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
3: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: LhXqVNhm5i+5M8dPcuOFNAgw4TuxEcfRsLlSBdspXNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:b2:f9:61:e1:02:15:31:10:d5:43:94:f3:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Sep 4 21:01:10 2026 GMT
Not After : Sep 5 21:01:10 2026 GMT
Subject: CN=c3d45174c7162708b560e1ea6b82f30d5066382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:09:21:47:e5:c7:53:ca:92:47:13:79:15:
10:49:1a:ab:f2:bb:08:97:5d:f1:b0:19:f1:5f:9e:
9a:7b:7f:8a:7b:26:c7:d8:4c:af:24:f4:6f:2b:62:
a5:e3:b0:e6:f6:e8:0e:03:f2:8e:12:20:61:d2:15:
e3:21:1b:00:74:44:72:f9:f0:ec:6b:0b:34:ae:ed:
b7:8f:87:eb:a8:90:96:00:00:b7:65:e4:c8:f3:53:
51:1b:1a:34:c8:32:77:eb:ea:57:65:65:fb:59:59:
85:28:5d:ce:be:44:40:be:3e:3e:d7:70:30:4a:ed:
f9:2e:cb:a6:dc:33:89:9f:a6:7a:ea:be:db:06:f9:
19:3d:fa:73:b7:b7:be:70:32:cf:89:bd:12:9f:c7:
f6:cb:dd:75:62:cc:92:ad:3d:0d:3f:a3:d0:4f:fc:
85:fc:1f:69:89:de:42:d2:5a:b0:a9:07:23:b0:a8:
ab:b3:65:cf:a9:05:52:a4:4b:4e:a1:f5:a1:84:2d:
a9:63:e9:27:a9:dc:a7:03:e4:87:2f:39:2d:54:0f:
be:da:f3:d3:38:a4:21:db:3b:17:6b:82:a5:54:e0:
ba:96:89:4a:40:31:60:ca:fa:67:9a:8d:6f:e1:8e:
f1:b3:22:0c:f3:c7:c8:da:4b:56:b6:42:d0:7f:89:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:51:74:C7:16:27:08:B5:60:E1:EA:6B:82:F3:0D:50:66:38:2B
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:db:5a:ae:85:5c:35:15:3b:60:45:2e:a9:ac:19:c4:18:d0:
64:17:de:4a:2e:1f:20:af:95:bd:a0:db:b1:c8:df:80:57:82:
69:89:bf:e8:9b:26:b0:c0:ae:b0:7a:19:ad:ce:f6:4a:ca:75:
6c:36:19:3f:5c:9f:dc:35:e4:db:fa:23:5f:b0:6e:67:9f:98:
7d:a9:ae:08:a8:76:09:d8:77:3a:99:c4:4a:18:61:72:74:a3:
c7:74:d3:ab:2e:9d:7d:a7:01:fc:a5:75:88:5d:fb:fe:9b:09:
36:d8:47:df:f6:4d:b2:67:eb:47:b9:96:b2:23:3e:5a:9c:1a:
86:86:3b:f5:d5:2c:82:3f:ad:01:ae:a7:f3:9c:54:28:0f:f0:
b9:1b:77:3d:69:a9:26:c2:39:77:a4:51:f0:3b:44:d1:41:5a:
e2:9b:1f:3a:83:7f:f8:6e:1a:a8:21:fb:96:ff:27:8d:06:79:
1c:34:79:b3:af:48:fd:41:62:f9:8d:08:bb:20:00:40:40:46:
57:24:50:45:ba:21:de:c7:2b:87:cc:32:d8:f8:c5:e8:3a:4d:
9b:db:52:01:e1:12:ba:26:0e:17:e8:8a:be:64:2d:5e:b0:3b:
bb:f0:59:2c:f5:a1:42:16:fd:ad:a5:c1:58:70:50:c4:db:2b:
05:ae:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:50:26 2026 by rpki-client