Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: mA150Y5pGFAShLvhgFtY/gIGlpQHdMthWwi/s2bSDkc=
Subject key identifier: FA:AA:A3:E4:08:F3:06:DF:01:39:83:56:39:18:69:3E:CF:72:E3:27
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01A08AFADDEC31C6D3D2C28CB44DDCFF2C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 11:01:31 +0000
Manifest this update: Thu 10 Sep 2026 11:01:31 +0000
Manifest next update: Fri 11 Sep 2026 11:01:31 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: 7b7MWrmyszKxycavSZVWXheRc6Cx5H2RYaTcDOEw1v0=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:dd:ec:31:c6:d3:d2:c2:8c:b4:4d:dc:ff:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Sep 10 11:01:31 2026 GMT
Not After : Sep 11 11:01:31 2026 GMT
Subject: CN=faaaa3e408f306df013983563918693ecf72e327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:1a:4c:10:ea:08:ed:19:e8:65:24:01:79:
df:d5:a8:5d:f4:7b:45:ac:c2:f7:86:f4:2e:8e:19:
43:29:54:da:d2:b9:69:9c:65:32:50:3e:fa:0f:55:
b0:b6:08:f1:1b:ed:be:08:95:4e:f7:9d:e7:49:b2:
56:6e:47:78:96:e0:4e:a5:5d:14:cb:6a:bd:e6:ab:
b1:6c:8f:f6:d0:88:77:4a:67:4f:07:ab:cd:95:c2:
b1:0c:03:27:ef:91:7c:86:75:ed:70:b3:2c:73:d3:
08:14:08:73:2b:ef:77:0c:dd:74:8f:46:62:19:3c:
63:8d:f9:64:c6:86:9f:82:fd:9e:0d:7f:ee:dc:69:
9c:2f:48:51:ca:11:0a:42:9d:8f:69:ec:e7:bd:40:
ab:31:b5:2d:42:3d:55:9f:a1:89:8b:84:32:cc:7b:
b6:36:4e:7a:b1:51:5a:95:25:93:22:27:1d:79:20:
91:43:53:5f:b0:ed:de:94:65:e5:8c:0a:47:55:8c:
2c:31:b3:67:18:02:7b:c7:53:68:cb:43:24:51:0e:
93:2e:d3:f1:66:63:1d:ea:13:9d:54:a9:07:e7:4c:
40:fb:4d:1b:cb:37:f5:44:aa:70:ce:ee:4b:12:12:
68:af:69:3e:79:42:0d:1f:ab:c9:7e:8f:8a:27:00:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:A3:E4:08:F3:06:DF:01:39:83:56:39:18:69:3E:CF:72:E3:27
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:a2:4d:07:a4:82:4d:6d:ac:d5:f8:3f:bc:b8:49:3c:a9:
60:07:10:e1:de:4c:19:bd:dd:11:bc:87:bc:8d:da:59:12:6c:
26:82:44:c5:05:52:b8:1b:94:7e:5c:fd:d0:0c:a9:c7:e3:e2:
2a:05:74:30:9f:61:00:91:d0:ca:50:6e:cd:86:33:7f:d5:50:
d9:cb:e0:b5:4d:dc:47:0e:d5:4d:58:f8:ae:f0:6d:1d:7b:b7:
48:5c:4d:7e:3e:67:af:9b:9f:f8:1a:2d:2d:3f:ce:f3:cc:b7:
d5:b9:ed:94:0a:92:76:4c:5b:e6:fa:39:b9:da:34:36:58:d2:
45:29:95:2d:7f:83:f2:33:af:4e:3e:e6:e0:fb:22:9e:e6:50:
e3:25:c1:7b:fe:42:48:a6:da:50:37:1c:a6:c4:eb:ae:9d:0f:
ac:32:3c:0f:95:8c:c7:5b:d4:09:e6:6b:78:08:b9:b5:66:ad:
ad:15:48:34:08:20:9d:36:27:bd:39:0a:2e:f0:46:d5:9e:56:
22:1d:86:c7:c1:88:10:5a:c4:86:8d:78:43:a0:da:ec:26:82:
81:a0:7b:0b:21:0a:6a:d2:da:30:bb:32:01:a5:88:02:ba:48:
ae:eb:a6:d9:33:bd:80:6d:ba:96:06:be:aa:f4:63:e4:9e:cc:
75:ff:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:43:38 2026 by rpki-client