Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: r7KAY4tmYcr0Syghhw/dKczmfvhCekjdZlJLcNrFnUM=
Subject key identifier: CD:C1:DA:35:D5:FE:68:E6:4E:02:D5:ED:DC:40:A4:81:FE:4B:66:7D
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 01A08A8D743290A1F6F5DAA54A0EF2744360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 09:02:01 +0000
Manifest this update: Thu 10 Sep 2026 09:02:01 +0000
Manifest next update: Fri 11 Sep 2026 09:02:01 +0000
Files and hashes: 1: QF8uybwGJvFTI6zPZaEwMnyLJao.roa (hash: pGY0CFO2xra97YkiSL42DPsL5Et7lf+M4AGkIXR7mbM=)
2: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: i+/TX5X1ms5w+En8E9Efv4IRw9+e+PfYa69ZAFeIefI=)
3: sVQfoQUtytZsvgvmAfEIvvKahSg.roa (hash: bzMbXKVYhkySvKWCrR/MwrdgAwPkPzpxm3VIOmD3ao4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:74:32:90:a1:f6:f5:da:a5:4a:0e:f2:74:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Sep 10 09:02:01 2026 GMT
Not After : Sep 11 09:02:01 2026 GMT
Subject: CN=cdc1da35d5fe68e64e02d5eddc40a481fe4b667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:76:c6:f3:db:4e:05:b7:ec:3d:cc:6f:01:
40:d5:83:86:d8:25:3d:48:27:ca:0e:23:d6:bb:b1:
cf:08:04:d6:74:59:a5:28:16:aa:f7:75:39:7a:f7:
a4:a6:f1:19:6e:6b:70:3a:09:af:ad:9c:94:97:aa:
73:11:55:86:c4:ee:b1:49:37:4c:b1:21:03:e4:ae:
90:7f:73:71:66:9b:e8:3e:b8:5f:f0:98:27:84:9d:
f8:b4:0e:c9:c6:3a:0d:3e:e9:28:43:ee:6b:2c:40:
31:19:4f:a9:fb:cf:51:af:bb:99:79:f5:3a:2f:90:
ea:60:cf:94:c0:b5:c1:bd:c0:84:89:04:43:38:ce:
06:a1:b0:35:88:d7:8b:c2:58:9c:73:d8:70:dd:1c:
90:c0:58:8a:5e:f8:23:50:a2:42:14:27:04:ca:af:
07:c4:21:37:03:c6:9a:96:ab:d7:db:05:a2:28:f9:
fd:7d:c8:fc:b9:1b:eb:47:65:9a:fc:60:59:f4:79:
b9:b2:c7:6a:24:ad:d1:9b:03:a1:39:14:0c:a9:b4:
72:6e:29:3f:50:19:74:8d:63:f7:01:87:d9:14:17:
32:51:a8:cf:0d:64:a2:4d:b0:fd:17:49:21:44:75:
4f:f4:f0:50:43:d4:d0:73:89:70:20:94:61:8b:17:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:DA:35:D5:FE:68:E6:4E:02:D5:ED:DC:40:A4:81:FE:4B:66:7D
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:77:9b:04:75:a5:a8:ce:2d:18:ea:c8:fe:29:7b:cf:69:77:
aa:be:98:c1:d3:8d:7f:4d:25:e0:80:bf:49:95:b9:1e:80:1f:
e4:d2:7b:7c:42:77:32:81:a8:53:b7:ae:ed:15:ff:f2:07:44:
bc:74:e1:e1:a3:a3:a6:01:67:ac:04:6f:34:b9:c0:6b:2e:7f:
e1:b1:d6:f3:bd:be:05:32:0d:47:e0:2a:58:26:57:26:1d:d6:
3c:73:c1:e8:a5:4f:17:0d:67:51:28:0e:56:2d:43:29:c2:dc:
9e:75:5d:e6:ce:b8:94:bc:3d:60:84:3c:64:f0:95:ad:47:ff:
d4:35:7e:3c:a6:8d:d6:84:ba:d6:c5:03:2d:7f:fd:55:b4:81:
2e:89:98:26:ea:82:19:01:e7:81:a6:d4:3e:79:cc:c7:84:9e:
7e:e4:0a:b0:a2:69:e3:f9:af:24:03:8c:16:eb:f4:f5:5b:21:
54:a9:95:3c:20:f8:7e:87:1d:54:5b:e5:5d:26:82:d8:35:4d:
92:16:a6:c5:71:27:39:b1:aa:51:12:72:30:c5:e8:46:36:3e:
f0:91:3c:f7:4e:a2:ed:9a:f0:c1:9b:00:8f:86:ea:cd:c8:83:
07:a0:5e:85:ed:ff:dd:b5:4d:4e:8d:b5:e0:40:4c:9f:98:b1:
00:26:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:44:58 2026 by rpki-client