Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: kxUQA2kw3fJzETTDhbl3CItj+em1ycF5fXnDx7DTEPc=
Subject key identifier: BA:F4:CC:3D:F0:49:A9:A9:0E:33:21:15:71:3D:19:F7:F7:BE:7C:68
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01A0024B3FE4E566F733A01EE565414EE32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1310
Signing time: Fri 14 Aug 2026 22:01:20 +0000
Manifest this update: Fri 14 Aug 2026 22:01:20 +0000
Manifest next update: Sat 15 Aug 2026 22:01:20 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: pRm5KwNwS+H25PXUE6+I5T6Lmxbm/9lYVAlNfaBntJk=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:3f:e4:e5:66:f7:33:a0:1e:e5:65:41:4e:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Aug 14 22:01:20 2026 GMT
Not After : Aug 15 22:01:20 2026 GMT
Subject: CN=baf4cc3df049a9a90e332115713d19f7f7be7c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:e1:2e:9b:04:af:58:44:d9:92:cd:f7:94:
53:95:ee:b7:8a:6c:e4:c7:6c:83:0b:9f:5f:69:16:
58:22:fc:86:74:e6:66:6e:d1:7e:b9:76:05:8a:fe:
1d:70:36:f8:65:9b:68:77:0e:f8:2c:4a:b4:25:82:
00:b6:20:af:26:46:17:fe:27:e1:bd:72:b7:f9:af:
23:64:40:62:6a:9d:33:62:a1:a5:a9:25:a8:3f:62:
47:b8:b0:94:88:76:69:69:91:1a:88:e9:fc:f2:48:
0e:4a:40:86:70:de:30:3b:e3:cb:21:2d:e0:f9:2c:
99:c1:ff:93:22:40:e9:f7:85:34:71:07:c7:61:6c:
4f:6a:e3:6d:85:c3:ea:fd:b6:38:c2:0e:e7:e6:86:
6d:ef:84:60:9f:9d:6b:b3:2e:40:2f:63:46:c8:9c:
2c:6d:13:37:d4:95:0e:fe:d3:fd:15:ac:a0:b5:14:
ce:68:41:11:0f:7b:ec:db:4e:99:88:cf:11:63:09:
76:2b:aa:ca:a3:a6:87:5c:a1:bf:5d:06:73:56:17:
a9:f5:e7:d3:60:b5:4c:e4:ad:8a:40:d0:2c:b2:a0:
00:8a:35:d4:1d:4c:d7:10:c2:54:f8:d2:8a:e5:45:
8a:3e:18:3e:c9:0e:47:83:c9:28:43:19:b2:2b:ce:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:CC:3D:F0:49:A9:A9:0E:33:21:15:71:3D:19:F7:F7:BE:7C:68
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:ad:e8:18:45:e2:24:d1:db:44:d6:28:b6:70:3e:92:7c:
73:ac:f4:37:15:bf:e0:1e:b7:71:46:92:ad:fc:f0:23:4a:11:
e8:a8:7e:af:9a:3d:36:23:ac:93:14:18:cb:d3:c4:09:68:64:
42:29:17:fc:4b:2a:4a:7a:20:34:7e:ba:ad:a5:31:16:ce:88:
b1:8a:e6:9d:d3:1a:a9:a8:1f:ec:9f:88:6b:0b:48:4c:f4:e8:
e2:34:54:6e:ad:c3:21:96:69:e2:95:54:dc:f3:c6:a7:68:56:
2b:a1:2c:00:29:6e:46:f8:e3:7e:76:83:d3:98:c2:5e:ad:e4:
18:fd:c6:8e:17:10:cb:e5:c1:97:42:2a:fd:53:9c:43:31:30:
73:a8:68:5b:d1:61:70:f2:0f:23:be:ae:fe:1f:5c:7c:4d:67:
a4:a3:a9:55:ce:45:fd:27:24:bf:27:85:83:62:f3:4b:7a:5b:
42:db:40:4c:c1:d4:7a:ad:89:07:0c:aa:da:6e:f6:85:06:a2:
72:07:e9:f4:11:24:51:2d:d5:5d:84:d3:1a:6a:39:df:10:94:
a0:40:e7:88:38:f6:de:85:e7:d2:cd:cf:bc:1b:d5:60:21:31:
5a:f3:3a:0a:ba:52:ce:8c:3d:26:e7:a4:b5:36:0b:01:cb:34:
f4:8f:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:58 2026 by rpki-client