Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: iPxk1WWx/DAH35pmtaVwwe8P0ephPAAOluBuxmQDnQ4=
Subject key identifier: E5:63:FC:3B:A7:9F:E8:A7:12:82:AB:AA:01:F2:65:16:6C:D6:8B:94
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01A066EDB3144EA7CCC3E1802F3A64579D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1A34
Signing time: Thu 03 Sep 2026 11:00:48 +0000
Manifest this update: Thu 03 Sep 2026 11:00:48 +0000
Manifest next update: Fri 04 Sep 2026 11:00:48 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: ZEmF802iEMDbh1/ukm9bvDpt/7nHqdOx0KPo0anorlI=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:ed:b3:14:4e:a7:cc:c3:e1:80:2f:3a:64:57:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Sep 3 11:00:48 2026 GMT
Not After : Sep 4 11:00:48 2026 GMT
Subject: CN=e563fc3ba79fe8a71282abaa01f265166cd68b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:37:2a:f9:06:25:b5:23:b4:d2:0d:45:33:
84:41:bf:01:2e:81:d9:8a:ee:82:45:74:13:49:b8:
43:7d:9a:d6:42:60:72:78:9f:a4:27:e2:35:2b:c2:
e0:a0:2d:a6:9c:b1:d4:31:21:d4:3c:05:fa:6e:85:
b5:9d:e1:b5:ba:9d:2e:92:2f:38:f6:14:92:c4:5f:
9a:58:b0:6b:65:f7:63:1a:c7:f6:90:6f:c5:e3:a8:
2f:12:a0:ec:81:18:5f:e2:10:36:dd:65:3f:ad:20:
41:3d:a1:3e:31:b8:20:ea:39:86:e4:db:71:65:9f:
f4:5f:c7:d4:0e:b6:57:df:2a:ed:14:91:34:02:7c:
2a:94:e9:18:5e:80:93:1a:77:78:d2:6e:56:6d:e7:
c7:6a:4f:ae:2a:0c:76:e9:6d:85:85:e0:91:9c:2b:
71:77:68:77:4e:8d:2b:35:a6:b9:31:83:40:48:d7:
5c:40:de:b3:42:8b:b0:fe:9c:a6:95:34:d3:fd:69:
0d:6d:36:ad:44:16:62:cf:05:e0:e5:94:7f:ad:94:
b1:25:99:eb:cd:b0:28:cd:95:d5:ff:7d:1b:86:f9:
7e:0f:31:49:cb:45:b6:3e:68:82:c7:86:1f:c9:ad:
10:fe:2a:22:55:5f:c5:6d:83:e2:a0:9d:4b:a5:df:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:FC:3B:A7:9F:E8:A7:12:82:AB:AA:01:F2:65:16:6C:D6:8B:94
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:52:81:1b:64:0d:23:b9:ed:a7:18:67:dd:7e:2b:5a:55:
f9:87:d4:83:49:a3:c1:7e:fe:4c:e0:44:bf:18:6e:2f:27:d2:
0a:cd:25:df:df:8a:68:a8:81:c1:85:67:aa:c6:82:60:f8:36:
d0:d2:6b:c9:5c:6a:a2:27:33:a0:9d:91:ce:af:53:6a:83:08:
c6:e6:f5:cc:d1:52:5f:09:fb:6c:d2:2a:65:bf:90:ac:35:f2:
9d:09:35:56:b6:b1:4a:8e:71:0b:fb:de:21:b2:eb:66:52:4e:
f1:6f:17:14:82:64:d1:63:b2:56:37:b8:79:03:ec:50:fe:61:
cc:eb:9e:94:57:41:97:36:dc:f0:eb:fc:e3:af:6e:a8:6d:c0:
af:68:0e:e4:6f:0c:fd:33:ef:c3:3c:10:f4:b6:98:b0:3a:53:
01:db:fa:99:89:4f:c8:36:09:4b:c6:88:d4:21:2e:48:e7:39:
3d:cb:e1:3f:f6:a2:3e:40:f1:21:4a:89:82:e3:46:9b:54:ec:
62:70:16:a9:4c:58:e7:78:ff:04:6b:25:31:21:be:2b:04:4c:
36:54:c8:92:12:88:bd:13:f3:3b:07:45:6a:8f:21:3c:77:ed:
66:cd:62:67:80:42:e0:22:23:0e:61:b3:5e:6e:1c:d8:c4:ab:
71:bf:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:42:46 2026 by rpki-client