Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: SDxvGEcrnRflEfOdNbvqBD4REIkjPK0ZVwSPagy5p0c=
Subject key identifier: 9C:C5:8F:F2:41:85:0B:98:D4:9F:CB:DA:F7:C1:9C:69:B8:16:4B:3C
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 01A030DB86062A22CE980D129D2CAE02BD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 07A1
Signing time: Sun 23 Aug 2026 23:01:28 +0000
Manifest this update: Sun 23 Aug 2026 23:01:28 +0000
Manifest next update: Mon 24 Aug 2026 23:01:28 +0000
Files and hashes: 1: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
2: d_e_JyIjKLPMENo5L-8CUih_VYg.asa (hash: y4fScZgWsT2DmITy30uJ8yrcaHxFdDvaL2MnILNovdw=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: 1fHvytI/kO9d4Z6GguJ+9oCrIfTwNwZ5dkppFp68k/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:db:86:06:2a:22:ce:98:0d:12:9d:2c:ae:02:bd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Aug 23 23:01:28 2026 GMT
Not After : Aug 24 23:01:28 2026 GMT
Subject: CN=9cc58ff241850b98d49fcbdaf7c19c69b8164b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:e4:8c:76:93:65:e1:dc:7d:a1:59:1a:7e:
16:d8:b7:83:6f:54:81:ad:fb:76:f6:7e:ad:d3:c3:
05:a3:fa:a1:02:65:a1:02:c7:84:33:5c:ea:45:8b:
74:1a:ea:77:1d:c9:25:9b:24:75:b8:db:92:e8:3e:
20:2b:58:ef:b7:f6:30:d0:8d:21:ab:60:95:d6:1f:
c0:7f:48:7d:f3:fe:eb:98:d9:66:da:9f:31:72:69:
bd:55:ee:08:ce:36:6d:ac:86:ce:5a:72:7a:fb:f7:
7d:2a:d5:83:31:f6:d2:36:31:bd:21:e6:a1:49:c9:
6c:4d:6d:b8:60:44:92:d4:83:41:8a:5e:46:22:6a:
cd:17:72:d7:e0:dc:05:9f:02:da:de:01:7f:61:c0:
c9:f6:64:3b:49:91:02:1f:f8:00:3f:ab:2f:18:7d:
ad:4d:2d:5b:7f:cb:ff:26:52:b2:98:50:8e:ac:bc:
95:48:f9:f8:33:b3:71:34:c5:10:8e:70:37:1f:02:
b6:06:4b:e9:4f:51:62:a0:75:2a:4b:1b:90:1b:53:
fd:c3:dd:3c:8a:4c:84:16:ac:71:c3:7c:43:0c:79:
db:14:7e:c9:b4:d4:b0:64:d7:4a:cf:78:27:b6:4e:
3f:ed:58:c4:c5:b7:ff:83:41:50:10:32:d3:24:be:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:8F:F2:41:85:0B:98:D4:9F:CB:DA:F7:C1:9C:69:B8:16:4B:3C
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:eb:5b:c0:04:b9:1b:3a:b6:da:09:36:1e:16:5c:75:ce:
57:e1:e6:ff:98:00:7c:1d:ad:b3:b3:42:2a:79:dc:5a:ca:e6:
ef:05:91:80:17:70:21:18:47:d3:1a:24:e0:5c:2c:5d:72:20:
54:66:d5:db:a3:39:ac:86:44:80:1d:c5:74:f1:75:c9:46:66:
c4:08:ef:b2:8d:28:bc:66:8d:a8:49:37:e8:d7:d1:fd:75:da:
31:d4:89:f1:fa:ed:64:5e:41:40:4c:85:0e:c8:83:f8:01:6a:
ac:9a:d4:cb:19:7f:f5:0e:58:46:a5:d0:5d:27:13:15:77:af:
c3:b0:f7:04:ac:e6:0b:ec:fa:c7:98:09:f3:69:09:f4:21:72:
1a:bb:db:47:cf:3c:da:01:86:f5:08:55:db:d6:51:d8:01:0c:
92:e1:6c:40:14:7b:c1:fe:e4:d8:90:96:a3:80:a0:b1:bc:cf:
1d:e3:1f:4e:e3:3d:b9:39:d8:dd:58:45:0d:19:2d:c0:af:40:
13:ec:11:a0:dd:45:60:25:39:d0:f3:64:91:13:3c:ee:f1:9a:
e1:11:03:27:79:93:ae:02:13:dc:72:d2:62:34:c3:c7:a8:19:
5f:4e:2a:9c:e8:c5:ad:ac:e3:88:0b:00:e5:e8:74:f0:aa:b7:
30:1b:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:13:33 2026 by rpki-client