Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: wxx2e2nsm2Ud4nEVoAc6XgGh1xkCoWmWNc+SX1V9GkE=
Subject key identifier: A5:59:61:6D:E2:06:77:21:B6:09:2F:2E:D1:3A:8C:48:93:11:5C:F6
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 01A17E4F20CBA2195C3191C37BCE22DE66E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 1419
Signing time: Tue 27 Oct 2026 17:01:17 +0000
Manifest this update: Tue 27 Oct 2026 17:01:17 +0000
Manifest next update: Wed 28 Oct 2026 17:01:17 +0000
Files and hashes: 1: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (hash: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM=)
2: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (hash: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM=)
3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: i3sYai/ddMNYBCIYHUB7yFt3dL5qvQBAB4f8C2bLCho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:20:cb:a2:19:5c:31:91:c3:7b:ce:22:de:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Oct 27 17:01:17 2026 GMT
Not After : Oct 28 17:01:17 2026 GMT
Subject: CN=a559616de2067721b6092f2ed13a8c4893115cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:ec:c5:fe:53:e1:a6:bb:05:1b:be:cf:df:
91:be:32:c2:43:df:d4:64:10:b3:55:b7:0a:66:91:
53:f5:1d:0e:9e:c8:e3:0d:15:4f:63:a7:75:89:45:
03:86:38:6b:75:35:0f:d8:9f:cd:6c:3a:ee:52:c2:
4a:1b:13:d1:1b:92:40:63:dd:13:4e:cf:2c:4f:1c:
0a:e0:68:a6:16:30:e5:fa:d4:83:c8:24:98:54:fa:
b7:24:e7:bc:c8:fa:db:32:70:5d:0d:77:6a:e3:93:
d6:de:4a:00:de:fe:db:62:5f:b0:28:f9:94:ae:95:
c0:93:59:cd:b5:d8:2d:b3:1e:72:7a:f5:86:0f:db:
c2:6e:8d:2f:e1:75:fa:6e:e9:33:67:f7:89:13:8c:
4f:f2:50:9e:90:e3:68:94:80:1b:99:a3:9d:38:d9:
fa:2b:e4:4b:2f:cb:f8:1f:4f:88:8a:33:e8:dd:78:
84:d4:84:b5:14:b8:86:75:53:31:9f:d3:bd:5e:f0:
a2:ae:af:8d:ad:49:b5:2a:1f:a7:47:1f:88:ac:87:
ae:6e:6f:24:cd:99:21:35:8f:0d:ff:a3:04:27:2e:
bc:52:65:fc:df:dd:d2:32:dc:77:af:14:38:98:b7:
83:6f:84:d8:97:55:82:10:78:19:8e:55:a7:f4:dd:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:61:6D:E2:06:77:21:B6:09:2F:2E:D1:3A:8C:48:93:11:5C:F6
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:be:d6:36:79:9d:b9:62:a2:d6:33:c4:05:14:f7:2f:78:
db:2e:6f:54:a2:8f:d7:c5:5b:70:ac:51:3f:f1:0f:0a:e5:a8:
6d:38:3a:c2:90:21:32:c8:95:66:ba:48:d8:8e:5e:00:95:f3:
eb:da:6f:dd:e8:e3:96:64:07:7d:6f:27:c7:92:de:26:72:fb:
e8:c1:ea:da:8a:3d:d0:49:dd:44:a7:4a:dd:70:10:3b:fa:d3:
7a:52:b1:03:9c:68:fd:0e:81:34:a7:fb:a1:65:e3:65:14:b8:
4d:ba:48:1b:9e:5a:5f:3c:62:8e:e0:95:f2:8c:6e:80:cf:1d:
3d:2d:07:3a:45:65:dd:51:bc:07:44:7a:72:8c:18:00:b7:61:
72:c7:60:98:86:55:ff:54:65:57:c1:8a:86:2d:5c:80:c4:e4:
76:5d:d9:03:26:79:0f:56:ef:1c:50:3d:39:96:17:3f:cd:5b:
a0:81:b7:08:b5:7e:6b:0d:e6:db:f9:89:62:77:b8:0c:4b:98:
8d:4b:9b:e9:06:9f:27:53:9f:cb:d8:c8:f0:41:7e:f2:f0:77:
c4:cc:5f:e3:ee:14:78:81:9c:3c:2e:eb:d2:33:b4:d8:81:4d:
5e:0e:4b:56:02:c1:89:28:11:02:96:2b:14:50:ec:66:c7:d1:
7c:1a:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:52 2026 by rpki-client