Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: zLoGnKqF6SrqliU7aX2RN8j5N+Yl4c/e+Aw2W7xED2M=
Subject key identifier: 6B:93:41:BB:07:A7:75:AC:AC:6B:61:7B:39:E8:67:31:11:76:2A:F9
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 01A10FCD043E5A628542C8300C96EF145C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:56 +0000
Manifest this update: Tue 06 Oct 2026 06:00:56 +0000
Manifest next update: Wed 07 Oct 2026 06:00:56 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: uOJlrubiv6MWuiKmv0/Z2NQ7j+eyBu3tESo18Sip8UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cd:04:3e:5a:62:85:42:c8:30:0c:96:ef:14:5c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Oct 6 06:00:56 2026 GMT
Not After : Oct 7 06:00:56 2026 GMT
Subject: CN=6b9341bb07a775acac6b617b39e8673111762af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:ca:3e:88:5c:a4:70:e8:a2:a2:22:d3:21:
5d:a4:b1:cb:6c:27:09:86:e8:11:b5:e5:94:3b:ac:
81:9c:60:b0:71:3f:81:e5:d6:e3:47:20:c4:e1:48:
de:9f:9d:6f:9a:c4:d0:0d:c0:47:53:ae:b6:0f:2c:
88:4f:c2:03:78:ca:44:13:1e:60:f8:32:aa:1e:b2:
cb:c6:c3:49:12:75:c5:4f:ea:f9:d7:7a:3c:fe:c5:
96:e3:0c:00:07:74:cb:2a:f4:3d:15:38:46:92:64:
74:4f:e0:08:47:13:62:fd:e8:98:ec:28:43:d8:18:
be:5f:ab:a7:7b:ad:ff:a2:b1:8f:c7:68:12:7c:6f:
47:29:a1:02:2e:2e:78:79:93:7f:40:a7:e5:9a:8a:
ae:03:e1:7f:00:ab:bf:a7:3b:bf:05:7d:e9:08:3d:
65:b3:d9:a0:5d:14:50:51:cf:89:39:19:2d:d4:ae:
99:22:78:2e:aa:33:22:81:08:55:4c:bc:ac:85:25:
df:10:17:4f:09:99:8c:c3:0e:0c:18:7b:f2:56:62:
7a:7b:a2:b6:a4:fa:29:d8:f2:97:91:f4:80:e8:f2:
cb:ba:01:91:5c:17:46:1c:da:87:72:64:ce:8c:bb:
44:02:95:36:c8:9f:ed:0c:d5:b7:20:9f:31:f1:48:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:41:BB:07:A7:75:AC:AC:6B:61:7B:39:E8:67:31:11:76:2A:F9
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:23:23:84:17:2b:6e:41:38:ee:74:9c:4a:18:d9:1a:9e:
9a:92:d5:89:10:1b:01:2e:25:5d:84:ea:90:dd:08:7f:43:32:
56:db:18:15:ee:8e:67:d9:6d:c3:51:5c:ed:57:02:e8:12:98:
38:c7:dc:1b:1a:c2:6d:cf:00:06:b3:8a:f3:e1:4a:bf:9d:65:
00:d1:e2:ad:76:e7:51:1c:88:d1:29:bd:c3:13:67:1b:a4:a9:
66:18:46:56:36:ee:94:00:f2:5a:ec:83:27:e1:d5:3f:f2:e4:
c7:fa:be:9b:d6:ff:52:ce:34:c4:37:87:fc:13:4a:eb:e3:c9:
f3:81:5e:b8:9e:d0:b2:3d:cf:7a:f4:42:e8:d4:b8:9f:b0:9e:
6c:24:fc:ec:16:b9:91:bd:6d:91:4d:7b:b9:09:12:15:27:3d:
93:c4:11:7d:f0:b8:ae:ce:96:37:fd:e5:76:ee:66:29:a9:eb:
a0:72:3b:36:ff:b7:d6:d3:e1:bd:0e:5a:f1:88:d5:a2:0d:ef:
ed:8b:9f:58:ec:2d:70:93:2b:4f:26:67:99:8b:a9:f4:75:7f:
98:63:21:6a:9b:bd:df:d1:a2:3d:88:a9:47:6d:1b:8f:b7:d2:
22:c6:44:ea:00:8b:d5:8d:a6:25:bc:a4:29:30:23:e6:a3:f8:
f5:15:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:41:50 2026 by rpki-client