Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: QGi2FdOq0n0A+tnXaR1kSHG45wqBhXUYd7Op2xSoPYQ=
Subject key identifier: BA:6B:D1:4A:BE:F1:40:02:5A:F1:A4:71:55:86:4B:93:A1:26:88:EF
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01A18FAFE4020BF3518E34DB1261B8CCDF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1AD8
Signing time: Sat 31 Oct 2026 02:00:31 +0000
Manifest this update: Sat 31 Oct 2026 02:00:31 +0000
Manifest next update: Sun 01 Nov 2026 02:00:31 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: 1kcUO3J8Tv/EjY2A3xAEN+Y1mVbootyfEDEQiu/9egY=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:af:e4:02:0b:f3:51:8e:34:db:12:61:b8:cc:df:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Oct 31 02:00:31 2026 GMT
Not After : Nov 1 02:00:31 2026 GMT
Subject: CN=ba6bd14abef140025af1a47155864b93a12688ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:54:e8:14:68:69:1f:8c:5b:9b:64:45:7b:
db:69:7c:f0:2e:6f:4d:83:6a:33:51:48:ad:cc:27:
2e:27:fe:e4:95:2b:bb:60:da:31:93:b2:93:0f:40:
4b:6e:d9:eb:c0:76:43:3e:8c:4b:67:9e:a2:6f:44:
b7:01:a4:7b:be:de:a1:5c:06:56:f2:54:c1:95:d4:
b3:de:27:6b:de:a0:15:8f:41:ef:95:26:2f:4a:c4:
07:d4:78:47:e8:b5:8a:21:d0:de:08:bd:81:f3:24:
84:64:14:e7:e8:68:17:b2:53:10:0a:6a:c0:05:b6:
68:e9:f6:2e:ea:5e:df:91:e5:6c:44:e1:3f:71:e9:
f6:d6:e8:b1:d6:76:d1:2f:79:bf:d6:b1:2b:98:1c:
94:34:ab:1d:7b:9d:68:91:1e:c3:d6:49:03:38:84:
4c:d0:d1:9b:d6:09:55:95:e0:8b:48:68:22:82:90:
f4:0b:c0:4b:81:c7:7d:ad:8b:fe:54:c9:d0:51:76:
c4:48:86:8a:a4:04:22:a0:fa:c8:8a:f4:29:e3:b4:
f2:72:67:28:39:bc:4a:66:f7:6a:79:f4:eb:5e:9d:
90:ea:ad:0e:8c:83:83:12:8d:76:92:d8:8e:c1:a0:
9d:88:0f:99:d7:a3:c5:88:22:6f:d4:f5:72:14:da:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:D1:4A:BE:F1:40:02:5A:F1:A4:71:55:86:4B:93:A1:26:88:EF
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:76:5f:d3:df:a8:dc:40:50:3a:45:80:45:4c:32:55:4a:
82:83:ae:d6:96:f9:dd:ad:cc:b8:a5:8c:22:ee:25:39:a4:bb:
2d:16:53:66:87:80:2a:1c:5e:40:00:1f:5b:62:0c:62:1f:ff:
a5:20:2e:5b:21:55:e4:d1:16:26:04:a3:68:36:db:47:f8:83:
bd:b4:d0:35:3f:68:87:9d:77:54:3d:d2:f0:af:e5:43:7b:3f:
c2:be:ab:7f:e1:a5:e8:74:c8:59:1d:76:fa:42:6a:39:ad:8e:
9a:17:25:1e:af:c5:65:dc:ac:e6:81:94:70:1d:7b:b5:18:11:
47:31:3c:b7:66:3e:27:fc:96:6b:5a:7f:0d:9e:e6:e1:5a:9d:
c8:bc:2f:f9:74:cd:3f:41:0e:c1:b4:bf:20:d7:14:f8:b1:4c:
a0:cf:47:42:a2:7e:6b:77:46:f2:a9:d0:d1:a2:41:ef:2c:e2:
bc:41:52:38:a1:3d:2c:df:fa:63:f9:8c:06:1a:87:56:a5:db:
0b:28:c7:21:75:d4:d6:8d:94:b6:a6:34:b8:5f:42:50:e6:83:
3e:58:fa:8e:c3:f0:ea:ca:ed:ed:d4:07:dc:87:08:b8:25:a2:
37:aa:e2:9d:d8:53:f8:8a:48:a3:17:cf:a1:ee:5c:24:0f:ee:
90:35:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:39:29 2026 by rpki-client