Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: A5C/497wzY4r8SKE6QI9PsEKwpxhaFQW9V8f+XlSi04=
Subject key identifier: 06:9A:94:7F:0F:23:AE:CA:C3:E2:76:0D:F2:77:48:90:07:D6:C2:E9
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01A15C30E621A44F44E6DB765284FF9CFBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1AB3
Signing time: Wed 21 Oct 2026 02:01:10 +0000
Manifest this update: Wed 21 Oct 2026 02:01:10 +0000
Manifest next update: Thu 22 Oct 2026 02:01:10 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: gJucOEaQGiJMLNZ0AV3AFv/geKtfBv9rCbWaGJQPQU4=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:30:e6:21:a4:4f:44:e6:db:76:52:84:ff:9c:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Oct 21 02:01:10 2026 GMT
Not After : Oct 22 02:01:10 2026 GMT
Subject: CN=069a947f0f23aecac3e2760df277489007d6c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:15:73:4e:e4:b6:6b:05:59:38:43:29:ec:
9f:f3:98:70:3e:58:e9:8d:a5:54:c9:42:07:ec:01:
43:da:de:46:d8:7c:43:73:51:01:9c:d2:2c:ed:ea:
48:e0:0c:c0:4d:72:e9:c3:64:8f:e9:f6:47:59:35:
9c:a9:1e:98:a7:d7:a0:9e:ea:b4:8e:99:62:83:4a:
25:24:79:00:7a:32:73:bc:07:fa:53:fa:ab:60:c0:
df:2d:71:8d:d4:5c:34:9c:50:c2:e2:c2:b3:d4:8f:
15:29:a3:2f:af:6b:18:05:91:8b:db:9b:79:fc:46:
33:d7:7f:7f:52:f3:8b:3b:bf:d3:64:30:01:19:6b:
f0:c1:5b:24:3d:eb:36:04:1f:72:ec:d1:34:19:3f:
22:18:5e:5c:a8:a5:67:e9:ff:f1:bd:28:b5:09:4f:
18:d7:89:d8:35:8e:c6:96:25:3c:20:f6:cb:d0:d0:
e3:3f:d7:0a:92:9c:9f:49:af:02:9f:d4:52:db:99:
ec:7e:18:86:c9:4c:14:49:b6:80:01:b2:85:fe:e9:
2b:44:f2:77:bd:79:ad:82:6e:fa:0f:f5:7c:67:94:
7b:f9:68:7c:ac:6e:e1:12:a3:bd:e0:fe:69:60:fd:
d3:54:4f:fb:1d:1a:a0:5b:af:49:e6:b6:e2:36:65:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:94:7F:0F:23:AE:CA:C3:E2:76:0D:F2:77:48:90:07:D6:C2:E9
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:2e:1c:d9:ae:4e:8e:8b:94:97:05:2a:5f:61:4f:da:a6:
37:99:21:99:ac:fa:da:3a:57:91:c1:f2:47:1a:bc:47:85:18:
a6:79:b7:9c:4f:0a:b4:4c:5b:ff:0e:b3:d1:d7:2d:ae:87:c0:
95:00:e4:d3:40:c7:92:07:26:1d:4e:1e:84:d5:5a:7f:24:de:
8c:e5:e2:8d:53:64:4a:d4:65:ee:93:e0:1d:c5:70:ae:fd:60:
ba:53:e5:05:33:3e:59:84:c1:da:b7:2a:b2:fd:ba:be:1c:fc:
9c:52:41:fe:14:51:4c:f1:a0:02:80:6d:6a:57:d1:55:e5:21:
3e:19:39:c9:a3:6b:9f:1b:23:53:dc:6e:23:39:04:44:e5:59:
4e:76:e1:46:6e:86:6b:14:5f:36:cd:c2:36:4f:bd:d0:cf:b2:
39:7a:ac:a2:c4:29:19:46:f8:92:d1:5c:46:7e:7d:47:11:dc:
9f:da:99:bf:d4:41:19:a5:82:d8:9b:66:78:63:04:5b:de:2c:
8f:3d:b1:56:ea:d7:7f:9e:48:27:7a:46:95:0f:97:2d:9e:a1:
2d:f5:e2:3e:45:3e:aa:df:88:ac:80:b3:16:66:f3:97:b4:43:
86:f0:b0:ba:fc:4e:42:69:26:8a:0e:da:34:64:99:11:25:c3:
a5:af:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:08:47 2026 by rpki-client