Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: YXJgzt6rb7k3t5JEdTrKo+YHKW9bsADI/Er2mBT4xqU=
Subject key identifier: 37:AB:7D:C3:46:91:74:87:4E:E3:DC:38:28:9E:E3:67:B9:47:46:49
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 01A08B683E192096A1012D3D162A5603DA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 046B
Signing time: Thu 10 Sep 2026 13:00:59 +0000
Manifest this update: Thu 10 Sep 2026 13:00:59 +0000
Manifest next update: Fri 11 Sep 2026 13:00:59 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: jHd9DaedElVhMUT9xlItKBxYxPal7Rw7Y2OwGvtBv9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:3e:19:20:96:a1:01:2d:3d:16:2a:56:03:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Sep 10 13:00:59 2026 GMT
Not After : Sep 11 13:00:59 2026 GMT
Subject: CN=37ab7dc3469174874ee3dc38289ee367b9474649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:b3:47:9b:b8:18:0c:46:3e:47:fa:79:a0:
0d:e8:fa:d2:ce:9b:e9:71:19:20:97:34:52:86:41:
15:87:ac:99:1b:17:d2:ab:1d:4d:03:c0:a9:06:cf:
ac:4d:35:4e:9b:7f:d6:c2:89:61:fb:1d:98:d3:d7:
c4:df:0e:07:84:6b:eb:41:44:5a:ee:90:24:b9:6e:
24:30:21:fa:f0:59:e1:fd:e4:f0:ab:a4:c0:fb:b5:
f8:d0:f9:bd:0e:ed:28:07:6c:70:f2:89:c8:cb:23:
11:16:1a:d6:17:fa:9a:ac:d6:2a:08:de:b3:4a:3a:
af:03:4b:1e:0d:cc:40:d7:60:e5:3f:80:ca:8f:34:
25:4f:92:35:b4:b8:73:a9:40:d3:8a:66:a4:1f:8e:
06:cc:ed:e6:ab:6b:fe:cb:1d:f3:59:44:29:18:09:
6f:e4:55:1e:51:29:3f:0c:1b:21:9d:70:ce:8d:e6:
78:f6:30:15:3d:73:7e:40:e3:1e:80:a8:de:ed:89:
b8:52:c9:d6:cc:84:fd:db:78:69:82:7c:9d:5f:96:
33:a9:47:79:ed:31:92:c5:1e:c0:0a:4e:74:33:c9:
16:79:1e:97:74:55:d7:cc:39:8d:c2:ac:76:d5:64:
b3:40:9b:0b:6b:11:f9:b7:c9:c1:d3:7a:95:5b:f7:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:7D:C3:46:91:74:87:4E:E3:DC:38:28:9E:E3:67:B9:47:46:49
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a6:e1:d9:b5:8b:38:06:81:72:68:3a:05:7b:01:6b:0d:c2:
c0:a6:e5:03:da:04:02:39:6c:f9:40:d8:44:c2:04:c7:53:3b:
5d:5e:72:bf:55:6d:d9:51:b8:0d:e2:7e:52:0b:f4:b5:9c:54:
b8:ea:3c:3a:a2:fe:60:6c:bb:36:db:17:7d:97:ac:05:cb:6a:
60:c4:bb:6b:bd:d5:4c:bb:b8:6b:a3:22:2d:7f:69:f5:39:28:
af:17:ad:16:e1:ef:f2:36:61:c1:4c:7e:81:43:a0:8e:03:8e:
10:76:ac:4b:7b:15:b2:bf:91:1e:48:91:5c:80:bd:db:f3:6c:
c9:4e:10:57:de:6c:a0:60:a6:bb:34:94:15:af:53:d9:02:23:
f3:6b:50:15:28:e3:9a:0c:25:25:39:39:d1:24:7a:2e:18:c2:
db:5f:88:7d:1c:06:28:0c:bc:a6:ff:ef:85:66:4d:fd:0e:f4:
43:4b:93:a6:08:f1:f7:3f:6b:73:45:89:36:b1:e8:3f:77:fa:
c6:10:0b:25:55:3c:33:80:e4:39:d6:b9:50:fb:2c:82:1b:26:
a6:92:0e:e0:ca:c5:d0:26:c3:b0:b5:9d:b8:2e:26:42:3e:e0:
e6:2f:bb:6c:ae:22:5d:d4:6b:e0:59:28:80:e1:c3:22:87:45:
d7:52:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:52 2026 by rpki-client