Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: ThAnpQtNagJHkrIzRDLSheibla+TXH1HM+wwW1oksBs=
Subject key identifier: B7:F3:07:C9:29:34:00:6B:1A:1F:4B:25:55:42:50:4E:8D:66:EC:AA
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 01A16B6CA4C21AFC1C1F5AB5970B5258B308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0D85
Signing time: Sat 24 Oct 2026 01:00:44 +0000
Manifest this update: Sat 24 Oct 2026 01:00:44 +0000
Manifest next update: Sun 25 Oct 2026 01:00:44 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: E+YUk7y8RuOk6zKRvmAmeQtWzYR7Ds0IOkjOlnNX1/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:a4:c2:1a:fc:1c:1f:5a:b5:97:0b:52:58:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Oct 24 01:00:44 2026 GMT
Not After : Oct 25 01:00:44 2026 GMT
Subject: CN=b7f307c92934006b1a1f4b255542504e8d66ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:e3:87:7d:8e:64:4a:31:44:02:34:f5:f6:
41:89:ab:d7:05:f7:d3:8a:f4:ef:a3:e6:1b:1c:a4:
a7:ab:c5:e5:cf:5a:7b:7c:31:7c:84:19:23:f1:9f:
ce:a7:10:65:7e:d9:db:50:60:72:4d:7b:9b:50:48:
45:0d:b3:10:f6:73:9e:63:0f:7b:64:5c:c1:5d:be:
fd:4f:73:65:25:de:ee:92:d6:c4:82:48:06:25:1d:
fa:90:60:5a:28:a2:d4:07:42:60:83:28:af:b4:4d:
23:0e:78:6d:66:95:d1:c2:40:e1:7f:a7:b5:48:88:
c9:92:18:7d:49:e2:69:2a:33:86:aa:db:4c:d6:50:
bd:7e:d7:d4:4f:05:37:5c:3c:4f:52:8b:2c:4e:d5:
e6:7f:ac:10:21:95:c4:9f:42:e6:31:76:d2:18:d3:
59:07:ae:79:a3:3f:18:60:4d:54:b9:7c:74:0c:e2:
4a:54:92:31:71:80:6c:7c:c4:9d:90:09:8f:68:01:
db:d9:f0:c9:7a:a3:c5:f4:2d:d3:85:c5:db:54:00:
b4:3e:0d:aa:f6:d5:94:5d:56:77:7a:77:6a:ad:07:
11:90:af:de:66:13:68:67:65:d3:ce:97:b2:22:60:
14:ad:7d:30:ad:cf:d6:48:0f:d9:e9:6c:40:8c:93:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:07:C9:29:34:00:6B:1A:1F:4B:25:55:42:50:4E:8D:66:EC:AA
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:89:fa:89:b9:21:d5:93:cf:73:27:13:f7:cc:96:ca:d2:
d1:d2:58:16:a3:20:6c:6a:27:0f:8f:da:9c:d4:a3:e3:01:43:
a8:f8:a1:2c:ef:90:6c:57:4f:11:3d:4e:a3:76:a5:12:d6:69:
2e:00:df:64:48:3e:82:a3:ef:59:7a:2e:fc:70:24:6a:1c:44:
f9:d9:9d:71:1c:a3:1b:1b:e4:93:c7:23:d2:e9:58:c3:d2:59:
23:82:b0:87:aa:c6:f8:d5:40:b2:11:22:57:aa:7e:78:59:f9:
38:64:05:38:de:da:51:78:4c:63:79:e7:90:f8:fb:b8:ec:2d:
4c:79:31:1f:79:12:46:21:c5:ec:75:32:a3:0b:f3:a6:55:e1:
d2:cf:56:54:a1:32:4e:9e:11:cd:bc:bf:60:0b:35:02:6a:28:
ca:a8:81:f5:3e:b8:d4:40:53:bc:4e:d4:40:09:d7:b0:01:6a:
0a:26:7c:af:5d:37:f8:3b:6f:d7:d9:0f:3d:ef:5c:a2:1a:5a:
f5:d2:8e:aa:d5:6c:11:93:5a:8d:65:b9:ac:36:3c:7b:63:a8:
c9:01:b4:82:f5:8c:e6:f8:6c:77:29:f0:1f:82:b3:b7:5a:84:
e7:62:8e:e7:3d:13:bd:2d:5a:02:61:63:47:81:bd:af:8e:d8:
fd:fe:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:30 2026 by rpki-client