Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File: jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier: TDxYr7RN982m5cWmLrbH6ZgqHE+Y/NyHonbSa7nyQyg=
Subject key identifier: 81:4C:5A:E9:01:77:70:0F:51:85:A4:5B:BD:1A:0F:00:46:FA:32:89
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 01A1859AC5B34E984AC4CBC9A177D4402974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number: 03AA
Signing time: Thu 29 Oct 2026 03:01:15 +0000
Manifest this update: Thu 29 Oct 2026 03:01:15 +0000
Manifest next update: Fri 30 Oct 2026 03:01:15 +0000
Files and hashes: 1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: qSWFsM3kwryp2b+ucC7Y4ic/GyzfdUNCi2+JIuCRmuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:c5:b3:4e:98:4a:c4:cb:c9:a1:77:d4:40:29:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Oct 29 03:01:15 2026 GMT
Not After : Oct 30 03:01:15 2026 GMT
Subject: CN=814c5ae90177700f5185a45bbd1a0f0046fa3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:9a:4c:48:49:b7:f0:9d:07:b0:c5:f2:df:
42:51:b0:57:7d:fe:10:40:07:bb:7d:d2:c4:f8:07:
5c:63:53:09:c6:59:15:70:c7:2f:6a:01:f1:04:51:
55:97:f5:40:cc:84:0d:6f:17:ff:c0:26:d5:b8:ec:
d2:b9:ae:a0:61:df:66:8b:e9:5d:c5:6a:c8:cf:97:
d5:1f:5f:c0:b0:b8:4a:9d:86:f9:29:e5:54:5f:b7:
f5:28:77:2c:f4:f3:bb:2b:c3:af:41:8a:10:aa:48:
43:66:f4:4e:02:6c:88:a8:6c:aa:53:f5:63:61:50:
1e:56:96:be:d7:f1:d3:95:b3:80:fc:74:9c:b8:49:
5a:9b:97:24:0d:9e:7a:72:60:b9:64:d8:5c:ae:cb:
ed:43:de:cd:c8:82:04:e4:07:00:50:5a:25:3a:3c:
06:ba:d9:62:ff:f1:f8:10:41:ff:5f:76:74:50:56:
1a:0c:3d:28:f5:28:36:b6:16:fa:d4:94:a5:95:39:
16:cb:59:93:6d:e4:f5:31:68:a1:80:8d:6f:31:89:
57:d2:83:c3:78:14:4e:b1:13:18:b1:94:64:e5:56:
4a:6d:30:5c:bd:76:fa:5d:e3:a5:9a:ff:33:a3:fc:
65:62:28:09:3a:59:85:82:fc:1c:ae:f1:33:3c:6a:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:5A:E9:01:77:70:0F:51:85:A4:5B:BD:1A:0F:00:46:FA:32:89
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:34:03:78:be:ea:7a:f9:19:9c:79:9d:91:23:bb:d8:c7:27:
bf:72:97:90:25:bc:a1:cd:9b:c6:94:10:b4:e9:70:3f:04:74:
6a:60:36:0c:46:43:4a:b2:0a:06:25:0b:7d:b1:97:f2:72:bf:
33:54:e6:84:94:67:bd:11:42:12:07:4e:81:b0:39:2a:c3:ef:
15:6b:de:d8:44:24:a5:a0:fa:4a:a5:b2:c2:c5:7a:5c:50:1a:
53:eb:e3:e4:1a:c7:c0:30:a3:7b:e2:e9:26:5b:f4:e3:a0:5b:
9a:29:6c:2d:96:27:37:0b:18:cc:75:41:ef:7f:72:28:39:72:
a9:f8:2a:08:9b:fe:cc:3e:8f:60:68:68:cb:8d:eb:cd:23:86:
90:43:80:57:67:9f:c9:4c:14:ec:3a:cd:e5:ec:4b:83:17:c9:
2c:5b:37:4f:d4:26:0f:c2:97:3d:eb:6c:2b:b2:c5:c8:c3:de:
ee:79:1c:ce:e0:80:d1:2a:a5:85:f7:14:dd:d0:24:b2:8b:95:
6e:2d:b8:a2:b5:5a:29:85:b5:57:bb:26:9e:be:e7:02:8c:7a:
2d:25:74:a7:c6:39:a3:60:b9:d2:0c:e6:44:93:2a:d9:5f:6c:
ef:66:75:27:3b:59:01:4d:8a:fd:eb:a7:f0:e4:5e:ad:2d:1b:
dd:f4:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:31:26 2026 by rpki-client