Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: aDHMQshqNMJAM/PH8Rlt8vAyxQKRcCQkQ8NFxCL25TM=
Subject key identifier: 1E:8B:31:4E:E0:F5:78:75:5B:24:17:E3:46:9C:A5:CF:10:5E:10:20
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01A173CB7790B170EBF024B3F6D6CC49A36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1AA6
Signing time: Sun 25 Oct 2026 16:01:16 +0000
Manifest this update: Sun 25 Oct 2026 16:01:16 +0000
Manifest next update: Mon 26 Oct 2026 16:01:16 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: 3+A/onBRHlzq+JGOISD0ZwcgltWdD/TizZ3CtN2m70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:cb:77:90:b1:70:eb:f0:24:b3:f6:d6:cc:49:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Oct 25 16:01:16 2026 GMT
Not After : Oct 26 16:01:16 2026 GMT
Subject: CN=1e8b314ee0f578755b2417e3469ca5cf105e1020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:db:6a:c7:f7:3d:0b:6b:bf:5d:c0:87:49:
96:9a:a7:65:40:7b:1a:a1:72:2d:85:8b:90:83:a5:
c5:fe:7e:0d:ea:c4:00:a5:ce:ea:57:94:31:90:14:
43:b7:7e:e2:4f:87:6c:68:01:b2:ba:01:6a:bf:ae:
ec:9a:ae:6a:64:ee:57:7e:af:83:f1:c5:0e:3e:5c:
fe:4e:05:59:c0:53:ff:9c:3a:6b:8c:80:af:c8:b3:
fa:54:ea:22:19:80:7e:71:0b:d3:8c:82:92:b2:a4:
a5:8f:24:fc:f9:ad:fe:93:0d:2a:d2:8a:e2:3c:29:
3b:05:14:08:50:96:30:1b:63:ec:d6:ce:50:2c:f4:
5f:f3:80:9b:83:63:04:0a:72:a3:18:4a:88:c5:2f:
f4:1d:bf:6d:61:e9:bb:71:40:9b:54:72:7f:53:f9:
c1:41:6e:2d:13:ca:9f:89:cb:95:20:f0:c0:11:0b:
d9:10:96:c0:a3:8f:5d:28:ba:c6:44:49:de:9a:1f:
c8:f3:9f:50:fe:4c:55:e4:72:c9:e9:d9:2d:7c:74:
34:75:a6:da:f2:6d:15:b2:26:d0:c3:63:76:95:2e:
1f:f2:03:af:08:db:61:f9:d3:16:cd:67:68:58:b1:
28:8d:dc:bf:73:19:b0:29:3f:2b:0d:f0:76:7a:7c:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:31:4E:E0:F5:78:75:5B:24:17:E3:46:9C:A5:CF:10:5E:10:20
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:03:cc:50:8e:c7:ce:24:e1:84:93:5a:6c:99:18:97:e4:
5f:57:fb:cd:e0:41:a4:6f:cd:ce:c9:c5:2f:66:76:bb:68:e9:
7c:97:27:24:e6:d3:89:3c:47:4f:04:31:d3:db:8e:32:38:26:
6f:94:ba:06:a6:17:bf:db:02:94:63:0f:f6:02:cd:14:3e:91:
da:b9:6b:ea:e1:c1:e5:3e:89:db:48:6a:ff:e3:3a:0a:4a:85:
d4:b8:ad:16:0d:9c:e2:1b:08:df:c4:92:e7:0e:ed:f9:67:6e:
13:8f:86:a7:0b:13:4e:b8:31:e5:c2:3e:49:71:4a:1c:6f:29:
73:cb:25:c5:bc:90:40:12:c6:ba:6f:14:26:99:98:c8:16:84:
f2:79:2c:02:a5:42:ca:0e:ea:06:3d:7f:2d:0a:e1:3c:04:01:
cc:9a:2f:31:6e:ab:e3:04:75:50:65:f2:0e:fc:e5:92:58:fc:
eb:1b:1b:29:49:fd:aa:3f:97:88:0b:f0:c7:d2:58:ba:5a:2a:
27:a4:71:f2:16:e6:f4:b5:95:cc:98:c5:72:41:5e:51:9d:06:
f8:0f:ed:a3:79:38:72:72:21:72:d7:84:fb:4f:ae:24:bc:1e:
9c:e7:94:49:e4:a4:53:19:a0:18:5a:9c:35:20:0d:9f:81:b9:
51:76:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:28:29 2026 by rpki-client