Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: Fll6MEZLdythQZEAgMgygXLC9QYaZivtRrTmVUGD6e8=
Subject key identifier: D4:92:95:D4:F7:FD:96:25:41:00:DE:52:12:4F:D3:9A:AD:A3:00:D1
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 01A08CE92589F311CDEFF6C30327ECD59E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 20:01:24 +0000
Manifest this update: Thu 10 Sep 2026 20:01:24 +0000
Manifest next update: Fri 11 Sep 2026 20:01:24 +0000
Files and hashes: 1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: gnNC/9qTNvE5CwLUoeQZWRugUvXJ987+/Bcsz28uQNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:25:89:f3:11:cd:ef:f6:c3:03:27:ec:d5:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Sep 10 20:01:24 2026 GMT
Not After : Sep 11 20:01:24 2026 GMT
Subject: CN=d49295d4f7fd96254100de52124fd39aada300d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:93:32:f4:14:b9:ce:ec:21:3e:b3:7b:cd:
03:e2:f9:f4:c0:f8:7b:ea:30:b1:ad:12:4e:a8:9b:
07:a6:18:f7:67:01:27:ad:3e:75:2a:f1:f5:a2:81:
cc:1d:49:8a:d5:d9:17:7e:c6:a5:6f:34:1c:94:0d:
e9:c7:22:45:36:dc:ff:98:aa:14:64:01:b0:0f:e7:
aa:42:94:4b:c8:18:51:ae:ad:b8:aa:5f:26:7f:bf:
f8:51:b4:75:61:70:d0:e3:43:75:f9:00:d8:ed:ee:
11:3a:40:8b:4e:7f:e4:81:cd:d3:b5:13:ff:0b:41:
ec:0a:69:15:2d:8c:5f:10:12:55:41:5e:ac:c5:f5:
c0:ff:35:3b:9f:2a:d7:04:79:99:75:55:d1:87:75:
06:cc:fe:8b:14:10:c4:a6:f4:f8:a6:6e:a6:6a:68:
5b:92:b6:14:68:f8:ca:90:7d:44:ae:8c:af:3c:5e:
ef:8a:5f:8b:40:3d:83:55:56:36:6d:79:77:33:0a:
62:12:96:ec:af:5f:93:92:cf:5c:f5:fd:38:9b:16:
30:c3:fa:bd:71:7c:39:c6:c2:8b:53:dc:36:71:7d:
0b:02:9a:c7:9e:d6:32:81:71:c8:80:29:99:7f:96:
c9:cc:e1:aa:6e:b3:cf:4e:fc:05:ab:66:2c:ee:9e:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:95:D4:F7:FD:96:25:41:00:DE:52:12:4F:D3:9A:AD:A3:00:D1
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5a:53:6b:5d:88:b1:88:a0:b4:bc:c5:43:55:6a:48:5c:3a:
b3:c0:4e:13:2f:28:0e:5c:5a:aa:a3:f4:0d:d2:43:0d:80:d9:
c6:d2:be:8f:20:0f:bc:9c:07:07:3b:f0:4b:ce:8b:d5:53:3b:
b7:69:2d:d6:07:de:6a:12:94:fc:2e:88:f0:e3:eb:f4:cd:f1:
5d:8f:02:b7:78:ae:88:3e:ed:ff:25:9a:32:0d:fd:ba:60:68:
08:32:19:1d:89:04:98:83:d7:e8:95:8d:e9:c4:89:3e:5a:5b:
e6:7b:27:e7:14:e5:00:da:1a:59:a2:72:c9:49:25:5f:58:d9:
f6:5a:3d:a6:84:55:6e:96:aa:28:cd:7f:65:6d:05:51:04:80:
88:71:f1:cc:2b:44:50:44:8b:4e:cc:da:d6:2f:7b:96:33:8c:
d4:fc:f3:e6:1b:06:e8:01:5e:0a:6f:76:45:27:d5:4c:52:3a:
1e:d4:49:3b:37:08:0d:a9:63:4a:63:1a:74:ee:61:91:08:23:
a8:22:af:5c:27:78:d4:bb:00:70:1b:d9:7d:7e:a4:4d:12:f1:
71:4f:54:96:f2:e6:95:4a:29:f3:37:72:58:34:d6:78:fb:f1:
25:90:66:91:2c:02:b3:77:46:19:7d:92:df:68:87:22:9f:5c:
60:27:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:09 2026 by rpki-client