Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: VtAWu5OVTNUKgyY+AO5yoLUqcgmxhcx7NRNVAgmQOhA=
Subject key identifier: 5E:2D:4C:C7:1F:3A:8C:04:ED:29:EA:6F:BC:F6:61:33:D2:40:55:8C
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01A05968FDC32CD0F7BF2EEB3BBB9799E9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 17A5
Signing time: Mon 31 Aug 2026 20:00:47 +0000
Manifest this update: Mon 31 Aug 2026 20:00:47 +0000
Manifest next update: Tue 01 Sep 2026 20:00:47 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: 6TPB9i9uMGts2Zdjmo+s1xhiUtBkiYH8jTjpw3kG5v8=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:fd:c3:2c:d0:f7:bf:2e:eb:3b:bb:97:99:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Aug 31 20:00:47 2026 GMT
Not After : Sep 1 20:00:47 2026 GMT
Subject: CN=5e2d4cc71f3a8c04ed29ea6fbcf66133d240558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:3a:15:d0:4f:48:bc:2c:4f:a4:15:56:02:
b8:ed:06:b9:da:39:48:9c:d3:a1:3c:f3:43:82:67:
c8:59:b3:3e:53:b1:5f:e9:52:e8:c3:90:a3:31:ae:
9a:69:d0:81:5e:74:fe:91:33:d9:0f:b0:df:07:75:
62:00:ea:32:ae:47:36:63:06:3c:46:cf:bf:c1:28:
fb:aa:86:dc:3e:0a:ea:e4:2f:c7:b5:df:c6:86:bb:
ef:fd:d1:06:8c:5b:25:c9:6c:c9:bc:8f:6b:0b:9c:
c3:69:a4:69:8a:e1:57:ac:c9:31:b3:1f:73:ce:0d:
14:8d:12:7c:3d:d2:f7:4d:c6:18:4c:8a:87:f6:91:
d5:97:7e:28:c0:7c:1b:a7:ce:95:af:df:f1:64:10:
85:e2:9d:f6:14:67:cc:4f:cb:27:d4:71:9b:61:ae:
52:17:b8:5e:17:1e:43:3f:40:e6:e1:a9:2b:45:2e:
e8:a2:ab:0e:58:9f:2d:8d:fd:ac:6b:7c:e2:48:da:
03:ba:10:23:92:75:d8:6b:13:66:94:04:c7:ef:e3:
bd:e6:87:70:1d:fb:1c:72:da:0e:69:ad:89:01:d9:
cb:da:97:84:86:20:64:04:13:a7:3b:e6:fc:58:a4:
97:c8:2f:5d:e4:ac:d7:da:ff:91:46:a5:91:29:f0:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:4C:C7:1F:3A:8C:04:ED:29:EA:6F:BC:F6:61:33:D2:40:55:8C
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:c2:de:2b:b8:cd:87:82:ff:88:cb:af:df:aa:45:4e:da:
d3:bf:1d:d1:16:47:1f:2a:b5:ec:48:22:74:74:66:c3:af:36:
f1:3b:94:b5:ac:f4:8b:99:3d:68:fe:fb:a6:81:ce:af:44:3a:
86:97:b1:b5:42:0d:71:33:9d:5a:68:6b:e8:54:eb:32:a8:0f:
c7:e8:3a:0f:ed:c3:23:a9:87:b4:d6:43:fe:e1:e9:18:2b:d5:
bc:f4:53:d1:89:5c:cd:0e:3a:79:e3:d5:3f:3a:8a:52:29:75:
fe:bb:95:a0:a3:a7:df:53:ec:94:19:24:af:14:66:32:0b:0d:
1d:a4:46:aa:b5:f5:97:d8:30:93:aa:34:63:24:fe:13:b6:bf:
5a:20:c1:c0:33:1e:24:bb:75:c1:f8:cd:7e:75:34:84:b6:f1:
c3:af:d8:46:93:09:22:d1:4a:b6:1d:07:fe:81:78:21:be:96:
23:7b:fa:9f:39:ef:08:d3:c9:24:d5:88:69:43:2b:ec:30:27:
54:78:96:32:0f:ae:4f:70:7d:c7:ad:a5:be:1e:2a:89:05:27:
85:d4:b1:f0:8c:e4:fa:c1:44:67:39:d1:3e:53:d1:6c:1a:0f:
2c:6f:a9:93:97:f9:f8:ba:e5:f5:c9:5c:82:55:fe:3f:bd:e4:
8d:d5:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:29:54 2026 by rpki-client