Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: IEn6RBqbZXtHBM0+q03EBz64XeQa+1Y5k6BSMOrgZSI=
Subject key identifier: 4A:33:8E:D2:C7:58:A4:3F:8C:45:B6:6E:1C:B3:50:72:C0:DB:5E:49
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 01A13CA5D2C176B8D9FA807ABE6763A68D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 17D5
Signing time: Wed 14 Oct 2026 23:01:02 +0000
Manifest this update: Wed 14 Oct 2026 23:01:02 +0000
Manifest next update: Thu 15 Oct 2026 23:01:02 +0000
Files and hashes: 1: LL_AxmtYZZoPVDJOgngQ3xheZAg.roa (hash: SlYQb5afBreMgIamUgnc8eCfbQSDhHvoVK81024PSGE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: w4QTcbbnnxreCiF+NuLswyDLy/1WAG6T6He5/NXVmUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:d2:c1:76:b8:d9:fa:80:7a:be:67:63:a6:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Oct 14 23:01:02 2026 GMT
Not After : Oct 15 23:01:02 2026 GMT
Subject: CN=4a338ed2c758a43f8c45b66e1cb35072c0db5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:46:fa:7e:34:09:96:c2:ec:16:e8:f4:6e:
59:1b:6b:62:5e:46:97:d3:7a:46:6b:77:1a:5c:b8:
cc:30:ce:36:40:c4:10:cb:9a:1f:c6:3d:f4:14:c2:
fd:55:0b:b7:e9:0c:78:97:65:19:79:fa:65:87:a6:
5d:1c:32:39:12:fc:01:b1:74:ce:26:e6:c4:71:37:
52:a3:6e:b0:fa:ce:04:47:2c:7d:4a:da:d7:d9:e0:
61:74:b7:6b:67:21:61:77:fc:ef:bb:b9:e6:46:4c:
c9:f1:cb:15:c3:6b:1a:5f:b6:49:22:6d:75:43:1c:
c6:7e:e8:f7:5c:d5:bd:5b:59:18:21:43:56:ce:fc:
7d:3b:32:c1:e9:90:84:c2:46:b7:23:e2:d5:e0:a9:
3f:6d:89:4d:dd:6e:a6:e8:af:da:7d:8f:5f:e7:be:
50:ae:b1:8d:96:e4:91:f3:d9:5c:2c:55:eb:6f:10:
0a:4c:b0:8a:3d:0f:c1:40:18:05:c6:5e:60:1f:d3:
05:f1:41:f6:ef:73:da:f8:3f:7b:9b:53:bc:82:71:
d9:f0:fa:67:70:50:1b:8a:c6:ad:ef:90:e2:28:1b:
d1:ae:34:7a:c7:02:fa:bb:e5:46:a0:9c:7e:66:48:
77:cf:b7:c2:27:d4:eb:b4:85:82:72:e1:3f:4e:f6:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:8E:D2:C7:58:A4:3F:8C:45:B6:6E:1C:B3:50:72:C0:DB:5E:49
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:ec:cc:b9:85:a6:19:a9:75:ee:31:ae:5f:72:fb:07:45:
82:b5:8a:34:5e:5b:f6:62:cf:1c:4b:82:e1:77:6a:7b:f9:6a:
4c:a8:8a:7c:f6:3e:33:bd:a7:bf:31:54:c9:64:03:c8:49:35:
6e:84:93:2e:c3:8c:bf:67:46:d0:42:ca:9e:8a:8b:f4:cf:9a:
b6:aa:3f:45:f6:1d:d7:52:d6:e4:ef:7c:ed:01:3a:5a:5f:47:
36:1b:55:d4:f5:13:5a:c8:4f:ad:10:fc:c2:55:be:64:63:0e:
e3:12:df:24:17:3d:63:bc:c8:43:2d:d6:e3:14:ee:ff:48:60:
56:85:fb:7a:2c:34:c6:af:6c:4f:96:f6:26:e2:14:9c:90:1f:
93:19:ea:af:d3:cf:cb:7d:b8:7b:59:5c:c0:0b:23:a2:e2:cc:
4f:ff:f5:e5:6f:a4:1c:62:fc:7a:e8:0d:a7:c7:52:d0:30:15:
62:63:4e:e8:8c:42:50:73:96:09:df:81:fa:d2:39:ad:40:34:
82:54:69:4a:7d:83:bd:59:2d:db:c4:97:2f:61:a7:1b:2e:b7:
89:b8:6b:b5:77:94:2d:f5:4f:f4:b1:89:39:a9:2a:f5:48:d2:
dd:20:79:03:8a:90:4a:41:c6:6f:4b:09:0f:f2:4f:59:73:6f:
c8:ca:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:55 2026 by rpki-client