Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: TqxJFMqbMJNdrMLBRJy0L6rgDsfw+w0eP/qoayBqQpM=
Subject key identifier: 99:E6:C9:24:74:72:F7:74:A2:64:7D:7D:5F:25:DC:3E:F0:67:5A:4C
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 01A181BE8413C72F21C55E2A057966DCFA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 09:01:48 +0000
Manifest this update: Wed 28 Oct 2026 09:01:48 +0000
Manifest next update: Thu 29 Oct 2026 09:01:48 +0000
Files and hashes: 1: QF8uybwGJvFTI6zPZaEwMnyLJao.roa (hash: pGY0CFO2xra97YkiSL42DPsL5Et7lf+M4AGkIXR7mbM=)
2: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: 7txBjuxnr38MYEJ5CerMg7TpnetpcYOvPDQLsUSia+c=)
3: sVQfoQUtytZsvgvmAfEIvvKahSg.roa (hash: bzMbXKVYhkySvKWCrR/MwrdgAwPkPzpxm3VIOmD3ao4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:84:13:c7:2f:21:c5:5e:2a:05:79:66:dc:fa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Oct 28 09:01:48 2026 GMT
Not After : Oct 29 09:01:48 2026 GMT
Subject: CN=99e6c9247472f774a2647d7d5f25dc3ef0675a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:33:10:b8:b5:9d:cd:e4:60:b2:e5:61:af:
e1:30:a6:5c:47:f3:74:bf:e6:1d:d9:06:91:33:76:
76:1a:85:03:f0:ef:4e:d2:d1:98:b3:1d:d2:24:ae:
9a:2d:14:9d:c4:7c:98:7a:ef:70:a8:41:6e:0b:71:
7e:ef:28:6f:b2:80:87:5a:17:e0:05:43:ef:c8:a7:
03:bf:05:9a:c4:08:c6:61:d0:75:7f:fe:58:7e:db:
15:05:65:f1:7e:b6:fb:94:c1:9f:70:f8:ab:c2:70:
ff:95:13:59:ce:f2:79:fe:bc:85:60:b6:5e:13:5f:
ce:e3:7b:09:73:a0:59:23:fd:d8:cf:41:9c:45:44:
90:ba:a6:cb:8e:5f:31:b4:0a:f7:5d:82:bd:4c:ab:
fc:15:5f:3a:d1:3d:ed:dc:2b:d8:69:5f:71:e5:63:
87:72:f6:70:c6:e3:0d:4d:09:ae:81:95:81:02:3c:
41:10:45:5f:c7:4a:6e:d4:48:f9:8a:a7:b9:03:c9:
a9:f3:27:eb:65:c7:f7:fb:76:0f:d7:0c:5c:c5:e0:
0c:10:04:6e:ce:29:02:0a:d0:fa:5c:38:cf:8c:df:
0b:1d:f6:9d:b2:5f:83:bd:a2:c4:e7:fb:d1:ce:1c:
e1:e7:a6:13:5b:dd:95:0a:80:9e:f9:f2:c5:63:3b:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:C9:24:74:72:F7:74:A2:64:7D:7D:5F:25:DC:3E:F0:67:5A:4C
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:80:5f:1c:40:53:b1:3f:5c:c3:77:a2:37:08:12:66:c3:74:
72:bd:1e:a6:74:9d:ff:1a:5b:8a:e6:87:e1:87:e0:19:80:32:
12:d0:cd:8c:48:67:e3:48:f7:05:4b:75:54:7d:07:51:a8:50:
78:26:94:a1:14:16:2a:c0:4e:ae:50:aa:37:8b:a0:6c:5a:93:
0e:ea:43:31:60:8b:f9:6b:e0:24:53:3e:2a:b2:27:2c:4a:44:
0d:fa:fd:22:77:31:20:e5:e2:f9:c6:91:32:1d:ee:25:a8:43:
45:8e:17:4c:a5:30:d8:ac:e6:b2:46:44:02:df:da:d4:95:38:
d0:a1:f4:9f:06:22:b0:fc:24:45:3f:98:f4:44:88:6d:aa:39:
35:20:f6:4d:3d:d7:4d:3e:17:1f:5d:d3:0a:18:81:10:71:d8:
dc:9e:ce:1e:c3:bf:41:c5:e4:52:bb:a1:83:d0:d2:16:8f:67:
f6:3f:2b:a2:ad:ae:d4:1b:0d:1d:25:b4:cd:33:ac:47:f4:7f:
15:7b:26:22:ba:95:d4:27:50:10:87:13:07:7f:b3:5c:ca:9a:
c1:3a:61:32:33:b4:5e:86:79:57:fc:d2:b1:f4:98:b3:f1:2e:
5b:47:b9:6a:80:fa:19:38:ff:55:94:c4:1b:e3:c2:a1:cb:49:
de:9a:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:38:30 2026 by rpki-client