Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: I+5sWf84cRtDozdbew5lb4vFInOsURY0Bzh8xxnSMHw=
Subject key identifier: 9A:0A:5B:9B:5D:BA:A3:5E:99:C2:7A:B8:C5:C3:B8:F6:BC:5E:D9:2D
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01A15477E7494F17A53EAE991D6179BBA2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 1827
Signing time: Mon 19 Oct 2026 14:01:46 +0000
Manifest this update: Mon 19 Oct 2026 14:01:46 +0000
Manifest next update: Tue 20 Oct 2026 14:01:46 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 2jcm7PasTUEU7cZ7Jkqw0bMWiZWThvqGGk56wWI5sSE=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:e7:49:4f:17:a5:3e:ae:99:1d:61:79:bb:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Oct 19 14:01:46 2026 GMT
Not After : Oct 20 14:01:46 2026 GMT
Subject: CN=9a0a5b9b5dbaa35e99c27ab8c5c3b8f6bc5ed92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:7a:97:c6:82:b3:dd:7f:91:d4:11:ed:0b:
51:c2:88:bc:38:dd:41:f4:83:07:85:fe:39:36:65:
a4:f1:82:ae:35:b8:97:44:9d:22:ad:d9:94:54:a3:
5c:ee:ba:8d:03:20:54:a4:75:58:ec:fe:df:aa:dd:
d3:12:90:39:86:6f:73:7c:5d:97:3c:9f:aa:db:08:
d9:c3:4f:40:a7:7f:c3:f6:60:d3:e0:87:96:9e:eb:
f9:75:7a:e4:1b:66:84:1b:0c:57:9f:2f:c7:4e:2a:
3a:07:d4:a5:32:2a:00:58:34:c9:65:fb:f9:18:7a:
d5:8e:25:fe:a5:63:43:8d:77:79:b9:7b:01:41:6d:
ab:9f:d2:ac:68:6b:06:01:b2:c5:51:a7:b0:eb:70:
6e:6b:55:ad:e0:66:83:9f:48:33:34:c6:18:25:9e:
95:5c:58:0c:a5:2e:c3:e3:b6:2c:ad:46:b9:79:01:
17:64:e6:3f:ec:1b:59:5c:c0:0a:f2:9f:76:90:21:
f1:a2:2b:ce:8c:a8:ba:97:9b:13:99:e2:37:e4:ea:
12:8f:16:9d:ef:38:e4:fc:2b:07:32:10:ab:af:e9:
64:8b:83:a0:a1:26:6b:92:84:be:67:a8:be:b2:93:
45:2f:6f:c3:8a:b9:a6:fa:26:1f:86:af:85:76:c3:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:5B:9B:5D:BA:A3:5E:99:C2:7A:B8:C5:C3:B8:F6:BC:5E:D9:2D
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:e4:a1:a3:1a:26:e5:ca:16:42:53:63:5c:bf:2b:c8:4d:
ca:fc:e2:e9:09:b9:a4:24:58:3b:0e:03:e7:28:4c:85:c0:48:
0c:ba:da:02:a2:c1:23:37:5d:d5:5c:10:85:9f:26:88:b3:37:
e0:b3:af:fb:70:aa:1c:e5:d4:5e:2a:7f:04:fa:7a:ac:5f:a3:
88:8b:95:dd:30:5c:39:13:33:c3:f9:14:78:ed:c1:4d:be:76:
5c:c3:8e:82:fa:d5:9d:7b:2e:01:5e:55:30:0c:f5:5c:b3:5c:
86:a1:35:65:04:3d:ac:60:51:82:c4:7d:6e:4d:cf:9d:ec:fc:
fe:59:af:35:6c:5b:d1:56:94:6c:98:f3:9d:97:14:73:29:cd:
fb:92:fe:0b:81:7e:89:c9:1f:ca:fd:0e:1d:5a:bf:95:67:ab:
da:9f:58:d6:8c:ee:02:28:7f:3b:ba:d6:46:28:b0:ad:39:13:
09:0d:58:e8:71:ee:9a:1a:bc:f1:3a:87:be:65:57:a2:91:47:
07:a9:47:aa:a4:e7:7b:df:23:32:36:fd:34:45:7c:69:6e:35:
46:13:1e:a2:6e:73:a1:2d:a0:c3:15:bb:76:af:17:b1:b9:ef:
6e:8a:05:cc:90:70:a7:03:cd:1e:19:66:dc:3c:8f:31:ae:41:
97:8b:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:39 2026 by rpki-client