Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: SUwOR2CSLAhAm/5h7ynrRG2/Y26UH32xRKDwQ6n9pk8=
Subject key identifier: 2A:44:34:75:A8:18:CA:1A:6A:FD:2B:A9:7F:88:5E:0C:2D:10:1B:AB
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 01A18BD318EF9E33D34DFB6C38781C0F28AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1AD6
Signing time: Fri 30 Oct 2026 08:00:29 +0000
Manifest this update: Fri 30 Oct 2026 08:00:29 +0000
Manifest next update: Sat 31 Oct 2026 08:00:29 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: RyOQuNyPbkkMMWn8uowKUiT6WdBkqikTyXHf2Uy5zWk=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d3:18:ef:9e:33:d3:4d:fb:6c:38:78:1c:0f:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Oct 30 08:00:29 2026 GMT
Not After : Oct 31 08:00:29 2026 GMT
Subject: CN=2a443475a818ca1a6afd2ba97f885e0c2d101bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:10:b7:6a:3e:0a:5d:c2:83:aa:b0:a9:43:
19:b3:99:19:ad:7b:e3:51:aa:17:80:2d:ae:cb:ff:
50:eb:ac:36:67:79:2e:46:02:84:48:c4:91:ab:14:
87:8c:4d:d5:f5:7f:19:e4:30:6e:d7:9e:e6:5a:c2:
32:97:bd:dd:8a:16:88:ad:3c:e9:96:1c:cd:b8:19:
15:1f:14:1a:94:7a:ac:17:65:43:f7:cf:d4:48:be:
c7:07:75:d9:3e:33:b7:2c:69:06:92:6d:92:ae:04:
d9:8d:54:2a:66:90:64:90:da:5a:ba:ef:7d:98:4b:
ce:4d:24:3d:17:83:53:c5:6f:5e:0f:29:fa:44:42:
9d:22:8e:03:a2:a9:4a:9a:ae:59:c7:48:2a:ac:de:
01:2b:30:cc:ca:a6:9a:46:26:a4:e7:80:fa:9b:c9:
32:d3:e2:91:d8:5d:32:7e:1a:03:32:89:31:e9:02:
be:96:7e:00:77:e4:03:05:e0:af:83:fd:f6:2b:41:
4a:8e:57:77:b3:b1:88:64:4b:61:7f:6d:02:7c:df:
80:11:66:44:44:12:ab:53:7a:d1:c6:b6:e0:0e:2f:
45:a1:dc:c4:dd:4a:bf:bc:a7:a9:82:1b:55:d9:56:
2f:bd:eb:21:0c:c7:54:4e:f0:fc:45:9f:38:a0:cc:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:34:75:A8:18:CA:1A:6A:FD:2B:A9:7F:88:5E:0C:2D:10:1B:AB
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c0:b8:8e:8f:bf:9f:ad:06:d9:26:87:2a:33:16:5b:71:2f:
49:ce:3e:c6:1a:b7:89:d3:63:b5:45:d3:3b:51:a4:ac:f4:93:
7c:05:88:ad:21:7c:5a:b6:e8:40:2a:e7:25:09:d6:66:fa:f9:
56:22:65:dc:46:48:dc:44:ae:9e:fe:a3:c0:6e:2d:48:90:5a:
45:5c:b5:e0:ab:63:82:bd:39:d3:b8:e3:6f:ba:a4:8b:3d:7a:
f0:8c:5a:9f:38:4d:ea:dc:d0:5c:1a:15:95:70:33:1c:2a:08:
7a:4e:58:36:01:9b:81:24:55:aa:5e:8f:4b:c8:71:d7:aa:d2:
ab:a1:11:d4:87:f2:25:85:2a:f5:26:a9:75:94:9c:20:de:90:
ed:9e:95:12:54:ee:b6:2d:05:00:91:f4:fa:e1:fb:0b:e4:0d:
39:37:0b:72:cd:76:07:48:02:17:7d:1c:fb:c9:89:1f:3d:f0:
29:08:3f:49:40:e1:12:8f:b8:bf:f5:f4:25:7f:c2:94:68:32:
8b:6a:5f:4f:89:20:b7:de:7e:e3:8c:53:46:d9:65:33:de:a6:
f1:4f:47:f3:08:f9:5b:4b:51:a2:ae:13:c3:cf:90:07:20:9f:
b5:b2:6f:be:27:12:80:37:c6:43:2b:d3:fb:ba:5c:7f:97:f5:
af:d3:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:12 2026 by rpki-client