Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: ZV/R8nVApBgHRn6Rlmo5kx8xLea8Kf5j59NbMVIGHvw=
Subject key identifier: E6:08:FC:E8:B5:04:4F:58:D3:40:AB:41:5E:E0:68:CC:24:2C:FE:3F
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 01A1822B8AAC8C3B065BF820A7F50DACC917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 11:00:53 +0000
Manifest this update: Wed 28 Oct 2026 11:00:53 +0000
Manifest next update: Thu 29 Oct 2026 11:00:53 +0000
Files and hashes: 1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: xGqHLXZF6WtpPv8wl6lVBJ1BBFCWpQL+euwQwQDJrkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:8a:ac:8c:3b:06:5b:f8:20:a7:f5:0d:ac:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Oct 28 11:00:53 2026 GMT
Not After : Oct 29 11:00:53 2026 GMT
Subject: CN=e608fce8b5044f58d340ab415ee068cc242cfe3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:a5:38:3a:37:e0:6b:c7:54:b6:d3:39:a2:
7a:78:27:6e:ef:bb:89:1a:42:70:c1:41:aa:16:0d:
26:79:2a:61:48:80:00:bb:cd:b3:69:ca:1c:00:88:
34:b3:f2:b3:2e:bf:6e:c8:12:32:10:42:c2:08:10:
d5:07:35:e1:6f:d0:e1:b6:7b:80:89:4d:5c:78:6b:
93:41:ff:e0:6b:37:3b:4f:79:51:cf:c0:99:a7:e6:
7b:8d:2a:41:b0:bd:8d:24:66:a7:c9:4e:d3:a8:c9:
fb:21:72:12:a9:5d:41:84:ac:aa:61:b0:9d:21:5e:
3b:59:93:2e:4f:86:24:87:c8:ad:be:7d:9e:f0:39:
4a:c1:ec:03:fc:0c:83:f0:65:11:dd:b5:7e:cf:30:
9b:3b:1c:11:39:f9:21:a0:f7:4b:a5:3c:9e:03:de:
b4:41:d4:3e:19:d4:5a:67:30:57:95:db:69:33:ce:
49:56:fe:5f:89:8e:2d:55:05:2e:5d:cc:50:46:04:
7a:c0:22:92:0c:e2:df:c5:3f:2b:1e:4d:ff:4f:06:
b7:2c:dd:ba:ff:e2:e7:b8:b5:e7:8e:49:06:9f:06:
37:a3:3c:79:78:ed:da:ac:8f:e2:e4:71:ec:0c:b3:
2f:17:fe:e3:66:ea:99:ed:a4:43:cd:52:a7:dd:0a:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:FC:E8:B5:04:4F:58:D3:40:AB:41:5E:E0:68:CC:24:2C:FE:3F
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d2:64:21:e9:a6:c2:4f:6d:de:d4:78:59:11:e0:9a:65:f1:
6b:2d:d0:86:32:07:d0:32:62:7a:95:d2:81:ef:a0:4a:a5:f4:
fb:9e:06:0a:b3:db:92:78:84:30:d4:21:c4:66:2e:96:67:a1:
4f:c3:57:60:01:6d:07:fc:13:c4:69:13:6d:fd:9f:1b:69:8b:
e5:65:04:8b:05:94:93:fb:3b:f3:4d:1d:1d:9e:ed:52:e9:f6:
d1:6e:2d:e5:a9:6c:fd:86:65:6e:79:66:5b:2c:bb:d2:ba:c0:
55:84:19:67:a2:5b:9a:c7:27:6d:f8:43:10:c1:43:f2:59:99:
ca:0d:b5:b2:f8:90:33:9c:83:64:f9:19:67:b9:65:5c:ce:25:
ec:d5:65:47:f0:89:91:93:2d:cf:2b:be:20:d2:4b:95:b8:db:
8b:79:ba:73:12:2d:37:63:13:af:d3:f1:bf:fe:5e:f3:6c:56:
54:63:ce:9c:c4:15:ba:02:52:58:af:9e:0c:e1:b7:b1:ec:81:
7d:40:f7:7c:5c:96:1d:1c:71:1b:8f:af:b3:f5:3b:ef:d5:93:
e7:1e:5e:e7:2a:2a:10:02:92:c0:23:0a:d1:ba:86:55:60:7c:
99:a7:84:59:1a:f3:7c:5d:f2:9e:2a:4e:ab:47:3d:6e:63:5e:
fe:03:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:46:02 2026 by rpki-client