Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: 3VbCLGhIXvu6APB2v8IJvF4zVkGB6BakpgzOQNrmN9I=
Subject key identifier: 14:1E:4C:E2:D4:89:86:C4:9B:A9:82:01:8C:FB:33:65:96:F3:46:AD
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 01A16D5B27554766A536056A5344674FF391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 0D86
Signing time: Sat 24 Oct 2026 10:00:52 +0000
Manifest this update: Sat 24 Oct 2026 10:00:52 +0000
Manifest next update: Sun 25 Oct 2026 10:00:52 +0000
Files and hashes: 1: cFj2gabjb2A6OS2M4OWiTy7sjlY.roa (hash: c2wHgi8z7Wquh1Yiowi4MCoX8zsu06SPgPbyIoYnmLY=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: 6FtcaFVErc8elFgntZXlz+a9/ClJQTOxp/h9JW653Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:27:55:47:66:a5:36:05:6a:53:44:67:4f:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Oct 24 10:00:52 2026 GMT
Not After : Oct 25 10:00:52 2026 GMT
Subject: CN=141e4ce2d48986c49ba982018cfb336596f346ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:d4:f2:41:5d:38:e1:ac:b5:fd:51:3d:03:
3f:88:f3:38:55:21:a1:28:31:89:40:e7:59:28:53:
ce:f2:7e:8f:af:1c:33:a6:74:2a:c2:72:4f:5d:71:
e7:c5:de:c0:09:09:82:f9:72:19:ca:67:5e:58:ef:
f9:f7:76:c3:98:6f:f5:81:0b:d1:34:ab:20:70:30:
e5:d5:00:aa:3d:62:c9:f0:40:77:d6:b6:4c:91:0c:
0b:ca:31:f4:5f:93:74:57:69:af:7f:5d:5e:c1:30:
e0:b9:2e:f1:c6:7d:f3:8f:85:81:51:54:65:95:bb:
62:77:55:0a:f9:40:be:f2:d6:70:a8:ca:11:11:c6:
53:6e:4c:de:9c:d2:11:84:3b:d4:b6:d4:43:62:e0:
d3:13:7a:03:9b:38:f9:12:0f:8d:12:20:0b:7a:8e:
a1:4c:d1:f8:e2:45:b4:33:5a:e2:40:81:22:c8:20:
24:fb:c9:ed:9c:a6:4a:0d:b1:b0:30:a0:12:67:9f:
d2:c7:16:9a:bc:e1:e6:c7:b1:6e:0d:e7:ec:07:15:
de:e6:c5:fa:10:74:b4:9c:b0:da:c7:b4:80:51:ef:
53:41:9d:a0:2a:b1:ea:96:8b:5f:82:98:8d:00:51:
79:13:b1:22:f6:d7:9a:9a:52:47:0c:3a:65:86:97:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1E:4C:E2:D4:89:86:C4:9B:A9:82:01:8C:FB:33:65:96:F3:46:AD
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f7:38:51:d5:8c:c3:49:87:aa:7e:9b:40:27:f4:44:b8:4b:
fd:4b:28:47:d1:ae:23:3e:01:b5:6a:9c:7d:16:86:fe:92:64:
69:60:93:e0:39:b1:8a:59:72:70:ee:71:cf:fb:2e:c4:38:0d:
0b:29:d0:68:49:f2:30:33:c8:8d:bb:54:9b:6c:bc:22:a5:1e:
97:5f:01:be:57:53:fd:61:9e:05:ae:1b:19:eb:b4:48:35:cc:
25:99:24:b3:9f:32:4c:fc:bc:e0:24:cd:2f:f6:a2:07:32:e3:
5e:b5:ae:3e:9d:c8:1f:a9:31:4c:3a:c7:f6:b4:fa:10:0a:66:
cd:48:a9:12:df:68:81:96:82:d5:d2:3b:a0:7b:5d:7d:58:03:
b6:38:97:46:6a:14:98:e8:19:e8:ad:ae:d6:4d:21:5d:47:61:
de:ee:71:a3:fa:dd:31:9d:de:c6:e1:67:89:c4:55:2d:42:b0:
ed:48:61:ba:49:80:af:19:c1:fb:01:74:62:d8:d7:a7:a2:50:
7c:10:25:41:b7:b0:30:2b:be:ad:b8:36:77:bb:51:1b:91:71:
6f:da:e7:79:b8:fc:7f:0c:c6:0a:51:a0:97:9c:d7:d5:25:6f:
66:31:5c:2c:6a:c4:7e:6e:6e:a1:93:1a:13:3e:0d:85:df:b8:
f8:6a:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:06 2026 by rpki-client