Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: Itfjl9ChyyMgEStL7ZkOGTod8bLCgmoXUVzU+0ptA+A=
Subject key identifier: FB:25:F2:8A:6A:6B:8D:1F:75:33:CC:2C:86:35:EA:EE:A4:6E:E2:3B
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 01A0E709F0E6CC725427C45D068DF332D4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 1A7D
Signing time: Mon 28 Sep 2026 08:03:03 +0000
Manifest this update: Mon 28 Sep 2026 08:03:03 +0000
Manifest next update: Tue 29 Sep 2026 08:03:03 +0000
Files and hashes: 1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: g8W+XevhdXUpQuEZoF0p7czrxUB1ji8f/4F+7EeI5tQ=)
4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:f0:e6:cc:72:54:27:c4:5d:06:8d:f3:32:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Sep 28 08:03:03 2026 GMT
Not After : Sep 29 08:03:03 2026 GMT
Subject: CN=fb25f28a6a6b8d1f7533cc2c8635eaeea46ee23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:b3:a2:07:1a:8f:09:8f:0e:22:41:c7:7d:
a0:6e:a6:03:e9:ef:53:01:d1:89:ee:ca:2c:27:98:
ca:8b:7e:53:8e:79:f4:02:62:12:d3:6c:6f:aa:01:
ad:95:b2:d6:ef:d7:46:38:9a:80:91:e2:b2:35:16:
b0:21:06:1c:7f:4f:62:7d:72:14:63:9f:dc:aa:11:
d9:7f:6a:ee:fe:93:97:28:93:16:05:ad:d5:1c:a3:
f6:32:3e:a6:75:97:99:37:7c:fa:88:4b:d3:b5:0d:
e2:1b:53:4f:ae:9e:3d:ec:41:21:9b:f0:20:ce:46:
84:a1:67:8d:01:e8:d4:ab:d3:3e:dd:16:8a:e2:f6:
52:82:c7:e1:5b:d6:9b:b3:c3:0b:b6:04:60:b0:a6:
56:a1:07:b2:57:dd:26:83:2e:0c:0f:9a:eb:7c:f3:
c9:8b:ee:48:91:c0:b8:52:20:fa:e5:7e:7c:42:52:
fb:a2:88:69:3e:32:ca:4a:d8:59:4f:37:93:7d:56:
d9:90:09:d5:06:66:53:ea:7e:89:f8:6a:96:b4:30:
d0:fb:64:2d:84:2c:7e:84:35:c6:9a:2e:91:1b:f3:
26:6d:8c:e1:a5:f0:a0:6d:9d:bd:09:68:5f:59:20:
c6:c6:13:8c:48:16:c6:77:e6:9b:94:78:b5:3d:bd:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:F2:8A:6A:6B:8D:1F:75:33:CC:2C:86:35:EA:EE:A4:6E:E2:3B
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:64:0e:e5:8c:e7:68:5e:06:0e:b5:77:5d:32:e7:ff:77:
e3:a9:a6:83:15:b2:fa:c2:63:21:c9:56:2e:ad:28:c8:11:47:
20:09:d0:08:f7:1c:40:97:b9:b5:6c:c2:ce:54:e9:be:0d:be:
27:0e:1b:4c:7e:88:57:c1:50:74:54:e0:1f:75:b9:ed:71:2d:
e0:54:ce:8d:71:14:6e:42:86:08:8c:53:17:d1:a5:1a:0d:b0:
8d:45:20:7a:9c:2d:04:47:d9:a8:d2:e4:22:99:91:25:3e:c2:
a4:4d:f9:ef:c8:bd:f9:74:da:00:a6:fd:30:f0:4c:76:e3:8c:
9e:2e:d3:95:50:9d:56:17:ae:d4:3c:a3:58:3c:4e:1b:19:74:
6d:36:40:0e:82:b1:23:20:e9:70:43:92:11:e0:6a:95:95:27:
f4:d2:a8:8f:2c:bd:f6:b0:0a:53:03:06:b9:e8:63:5b:61:03:
38:62:76:5b:71:48:b6:a1:07:b6:01:f7:11:2f:a5:f9:d4:29:
d0:a4:76:6b:dd:4b:9f:4e:b8:eb:bd:2a:8d:47:a5:a9:6f:7c:
92:00:66:3c:bf:d3:ec:df:4f:0d:51:f6:a2:31:f9:96:c5:7d:
2e:63:bb:67:62:4a:55:4f:62:7b:81:ba:4e:a9:2d:30:b2:03:
72:42:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:30:03 2026 by rpki-client