Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: BnPPG0RedZCxqWbetWPgx91wXP3W+EIlnI3lSThDz4A=
Subject key identifier: F2:9C:34:C1:80:FD:D1:86:C5:91:B1:CD:B8:59:3D:34:C4:49:2F:1E
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01A1506379C2C2D1DF22F3FF80E4E987605A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 13BD
Signing time: Sun 18 Oct 2026 19:00:58 +0000
Manifest this update: Sun 18 Oct 2026 19:00:58 +0000
Manifest next update: Mon 19 Oct 2026 19:00:58 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: 4VuaLIWfwm8II/FdgJ4U13WWmTA4iWbDhC10atnDtnA=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:63:79:c2:c2:d1:df:22:f3:ff:80:e4:e9:87:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Oct 18 19:00:58 2026 GMT
Not After : Oct 19 19:00:58 2026 GMT
Subject: CN=f29c34c180fdd186c591b1cdb8593d34c4492f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:dc:57:2b:55:f7:b0:27:0a:bc:f0:90:20:
10:64:13:48:8e:74:f8:e3:1c:9f:47:46:05:15:d7:
86:ac:9c:69:03:11:4e:db:26:1d:1a:74:03:60:72:
b2:3b:e3:7e:dd:70:8b:3a:08:40:e9:3c:d2:87:05:
9e:36:f6:f0:c4:d8:c8:74:9c:2a:ad:1c:f7:9a:4d:
dd:b1:fe:9b:21:23:c7:f7:83:cb:30:1a:30:8d:99:
ae:8f:e8:75:be:8a:0f:b2:a3:04:b5:6a:ee:38:d0:
c1:56:18:9a:2a:55:8f:2b:0a:26:04:27:95:5e:27:
d0:4d:4d:5a:aa:9d:67:de:c9:bd:40:4d:ae:af:5b:
e1:9b:97:3f:2d:07:d0:13:9c:40:ec:cf:f8:be:aa:
c7:f6:d3:e1:20:25:0d:f9:88:af:7c:7a:64:36:50:
2a:83:ea:ad:26:22:7b:64:c1:60:b7:05:7c:e1:ce:
2a:da:8c:df:a4:b1:17:a5:54:66:be:8a:0b:ab:95:
27:0d:2d:b7:d6:ca:e7:48:f7:d9:29:d4:86:9a:e9:
5d:78:6e:82:f5:2e:59:30:95:a3:5c:b7:10:05:ac:
1e:81:42:d3:38:fe:66:c1:15:78:d1:83:4b:c3:7b:
49:3e:e7:64:25:5c:84:f0:cd:63:e3:d3:df:e5:c8:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:34:C1:80:FD:D1:86:C5:91:B1:CD:B8:59:3D:34:C4:49:2F:1E
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:e1:19:c8:f1:90:58:e4:e0:16:31:ed:38:8c:13:17:93:fe:
2e:bd:0a:17:5b:10:33:e8:38:08:a4:7f:b8:67:70:31:20:df:
93:be:af:64:93:77:28:62:42:de:a3:21:0c:3e:9b:3b:d3:ef:
16:72:cc:da:e5:42:77:02:a5:ab:90:84:59:53:7c:7f:af:37:
1b:72:b5:8e:5e:31:db:f9:ca:0e:61:85:4c:fc:1b:b2:f4:28:
cc:dd:56:c2:0b:63:75:1a:b1:f9:72:13:23:8a:45:7e:22:e1:
7d:19:1e:e1:91:69:f3:e9:8f:78:8b:2f:d6:38:8c:70:36:ae:
b9:1b:69:0a:01:10:02:55:7c:11:f1:a4:4a:cf:e4:b7:73:8c:
f9:1d:d0:59:bf:ff:2c:aa:a8:71:5d:76:c1:4c:7c:7b:d9:3b:
75:5e:76:28:0a:d1:26:03:9a:86:86:e2:9e:be:f1:29:c8:1b:
ca:af:33:aa:88:6a:a9:cd:1c:f2:45:f8:ea:43:88:d8:94:5f:
cd:df:e7:2c:4d:1b:1b:b6:71:2f:34:72:b0:c9:39:07:96:65:
34:04:e4:79:55:e5:cb:c6:23:c0:c5:41:60:e1:27:80:fd:c9:
0d:48:da:7f:f0:e0:2e:05:9f:11:02:d8:17:68:e2:2a:96:0d:
1a:e1:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:08:52 2026 by rpki-client