Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: VoaeEJTVFjgD81pdogZbQ/EdcHo1c06G+pey88BYCGk=
Subject key identifier: 95:7F:4E:C7:59:4E:01:5A:85:89:52:8B:FF:0B:F0:2D:97:D8:27:D9
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01A1483C1D7B693AE06CF8CD87805B9C8B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1904
Signing time: Sat 17 Oct 2026 05:01:01 +0000
Manifest this update: Sat 17 Oct 2026 05:01:01 +0000
Manifest next update: Sun 18 Oct 2026 05:01:01 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: BJW7Ct4XIEtDkJ55Z89hG4PB2IdHKPXoUCDlKBpI/lg=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:3c:1d:7b:69:3a:e0:6c:f8:cd:87:80:5b:9c:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Oct 17 05:01:01 2026 GMT
Not After : Oct 18 05:01:01 2026 GMT
Subject: CN=957f4ec7594e015a8589528bff0bf02d97d827d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:65:92:5e:ba:3e:ea:bc:c0:47:39:2f:ba:
e0:58:6b:80:fd:5b:b7:7c:44:25:72:04:55:7b:d5:
dd:07:5b:50:27:c5:45:fc:81:dc:7e:45:0e:89:99:
c9:37:f3:72:94:2c:87:3c:95:54:c1:68:82:a2:12:
f9:d9:09:f4:01:1d:7c:7b:00:f8:ab:d2:53:89:1a:
38:bf:b7:8e:c4:bd:2d:8d:9c:57:a4:29:99:d5:86:
b3:f7:56:c7:9f:55:a6:96:0c:6a:8f:3a:dd:34:71:
6e:b2:74:db:4d:c8:85:e5:df:0d:b7:be:4a:e2:8b:
0c:dc:5e:a8:c7:64:8a:06:a4:e0:9b:06:35:a2:aa:
66:f2:df:ac:44:ff:d4:bc:9d:ff:46:86:99:61:b3:
38:15:6f:fa:ff:c5:b2:e3:49:14:d5:e7:d8:e3:8f:
15:c9:4e:88:c0:19:20:7b:50:d4:a5:17:7e:8f:e9:
00:43:f8:e9:ce:56:f2:cb:e5:9c:8c:6d:10:b7:6b:
dd:66:62:7b:74:56:86:39:ad:f5:55:c1:74:68:99:
9f:1b:7f:ea:39:ab:72:c5:5e:64:9f:5b:c0:98:6d:
38:82:0e:39:c1:80:62:23:48:f7:b1:2a:91:a5:30:
6a:23:bb:27:2c:e6:0c:1f:5e:7c:3c:ab:1c:1a:32:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:4E:C7:59:4E:01:5A:85:89:52:8B:FF:0B:F0:2D:97:D8:27:D9
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:cc:05:1a:f8:4b:95:71:72:27:d7:5f:36:89:fe:83:9c:
22:05:0d:f0:a4:4f:4e:aa:38:9b:63:09:bb:5b:87:da:63:4a:
95:26:63:85:dc:0b:d5:d4:a8:67:ec:9f:de:4f:10:df:f3:0f:
d3:f2:bc:94:8a:a3:20:79:dc:f8:67:de:d0:5a:cd:c1:75:d6:
41:3d:88:f5:35:7f:16:06:29:d5:95:9d:ca:70:ae:aa:fd:a6:
85:52:e3:5e:f0:0c:8c:7c:7d:c2:0a:54:2e:ce:79:3f:d9:0a:
1a:33:e2:6e:5d:74:2e:70:48:3c:1f:47:f0:82:aa:d8:01:87:
26:e4:0e:2c:4d:f4:09:f3:1e:4f:17:52:1f:d9:f8:3c:67:64:
f5:53:66:04:e3:27:3d:56:f3:e6:4a:c8:45:99:66:a9:d1:fe:
5d:52:d4:50:76:b6:25:78:3d:19:70:da:f5:fb:93:59:a0:f2:
cd:86:4b:1d:25:c6:d4:03:c4:f0:38:96:ff:c9:a5:33:c7:f1:
72:6e:2c:c4:b0:b0:7a:2a:7b:99:03:8b:9b:49:9c:e6:19:b5:
a8:be:58:c3:de:cc:f1:9c:35:a4:a3:ca:ea:29:7a:49:c7:39:
45:6e:43:10:62:49:de:fe:68:f6:7c:ac:97:6b:31:34:bc:f4:
f1:c0:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:05:54 2026 by rpki-client