Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: adW9RKi4X4hD7hdHvNRyc3emnCSMUJtirUpWG9VRnYw=
Subject key identifier: C1:E5:90:FC:C5:A9:1D:03:45:C3:DC:0C:9A:F4:7A:DE:47:BB:D1:31
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 01A06D94A6554AE233DECF016F8682CCEB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 1857
Signing time: Fri 04 Sep 2026 18:00:53 +0000
Manifest this update: Fri 04 Sep 2026 18:00:53 +0000
Manifest next update: Sat 05 Sep 2026 18:00:53 +0000
Files and hashes: 1: JJBuxiH7N8lbcBXgw5KQrt5-EvU.roa (hash: yuGCrAPUyjxlYSHRZDhM2aJs4WM249W9d+i/Vuix/5Q=)
2: KUSYPuHV0BPhErEp3TcpVUt1EQA.roa (hash: sBg+JjnzDUbRmXsbrD21Od6LO8lyYKiFXNtgEPlf+T0=)
3: irgcza7ueUyMGnD413LhS2bOjJI.roa (hash: daWp79CmAXWz32HU7ki6gyN205KgB+0e3s53G3yOlXg=)
4: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: LnzVF2oKfc4Rdfbz0h+GBtNzJnUKEjZs5mu/SkEnxKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:a6:55:4a:e2:33:de:cf:01:6f:86:82:cc:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Sep 4 18:00:53 2026 GMT
Not After : Sep 5 18:00:53 2026 GMT
Subject: CN=c1e590fcc5a91d0345c3dc0c9af47ade47bbd131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:d7:e4:f2:81:60:a3:be:a6:64:77:7d:86:
9a:7d:47:95:23:bf:89:ec:9b:d0:3d:b4:44:84:a0:
0d:bd:34:97:d1:5b:56:aa:51:0c:1a:26:b6:95:52:
66:34:66:5b:f9:e7:da:4a:0a:94:07:d4:90:40:8d:
73:61:ef:90:2b:74:69:22:3e:a1:17:64:da:1f:0e:
05:6b:5d:ea:72:84:8c:32:e1:6f:e8:40:00:fe:fa:
e2:05:f8:5e:93:e7:43:37:9d:c6:8d:d4:d2:c3:fd:
72:f5:72:cc:9a:ad:8f:b7:d1:39:a0:37:51:82:f0:
f5:f6:ce:1e:ff:1c:eb:fa:0a:8c:b2:09:b2:94:a3:
1a:43:e7:31:63:d7:d8:0f:4b:af:7c:5e:db:f3:71:
87:4b:68:6b:23:ac:7a:b6:86:34:ed:ef:03:82:7e:
27:66:6a:68:d9:e9:55:5a:58:de:1e:fe:c8:cd:84:
28:7d:dd:0b:2f:68:b6:b6:14:0a:bf:59:e8:2b:07:
73:62:0c:6b:38:9f:01:f4:22:d8:7c:44:40:0f:83:
67:b3:03:68:c9:12:81:01:b4:e1:27:20:6f:80:66:
46:bb:12:b8:88:43:6e:73:a5:3c:01:24:6b:ec:a8:
54:b8:ac:24:b9:e6:d0:21:24:fe:60:93:11:83:69:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:90:FC:C5:A9:1D:03:45:C3:DC:0C:9A:F4:7A:DE:47:BB:D1:31
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9a:87:d7:08:9f:a6:d0:a4:23:e5:c1:01:61:1e:f8:f5:07:
4a:3e:c4:6a:21:74:43:35:03:a9:83:83:c8:b1:86:7a:e5:53:
9b:a4:1d:a8:54:8b:5d:b6:68:d9:5c:dc:37:f8:1e:87:fa:38:
dd:b8:89:ee:f2:0e:c0:5b:7b:f4:88:67:1d:98:49:16:a7:52:
dc:b4:b5:07:88:e1:a2:67:f0:e7:87:8c:13:ab:a8:cb:77:9e:
b3:ee:ef:01:66:41:74:65:31:9d:d4:3d:40:0b:2b:59:b7:84:
f7:47:ae:86:01:39:a1:78:55:b4:74:4c:14:35:44:18:d8:75:
fa:22:9a:fd:13:20:61:00:78:d6:28:be:11:bc:be:45:2c:3a:
c4:54:b3:3b:dd:ff:4e:bc:08:1a:8d:ec:51:ac:a5:c8:d7:41:
35:dc:78:16:3f:b0:73:9c:a9:d3:f2:62:39:c8:5c:68:b4:7a:
9c:32:80:5d:a2:39:12:a4:48:9d:86:80:3c:30:24:0e:7b:f8:
b1:03:72:69:16:76:27:54:bd:4a:6d:86:9b:54:87:6a:23:52:
bb:46:c7:db:4f:f1:58:9a:e7:99:13:99:40:6f:9c:c7:8c:5a:
f8:18:6c:e1:fc:14:8a:8c:5f:35:a5:83:93:1c:ec:eb:be:63:
2e:27:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:25:01 2026 by rpki-client