Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: vjo/XPdKf0Bj14zVB5V2y/MHuo+5LnrVgC4oXEuMaTg=
Subject key identifier: 39:C8:DF:78:7D:F9:D8:F8:5E:79:CA:45:B9:9A:9A:3F:1A:9E:93:43
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01A06F1544262529485C38AC1B2D3D3C038C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 1A9E
Signing time: Sat 05 Sep 2026 01:00:59 +0000
Manifest this update: Sat 05 Sep 2026 01:00:59 +0000
Manifest next update: Sun 06 Sep 2026 01:00:59 +0000
Files and hashes: 1: FnwKQW5UnLQMReNyfTHKRcvd6kk.roa (hash: UCeEtQwba/ftT20tzo08vD+65NQ/1VW7etax1BQEDTI=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: KXVQ46CgDJTVO6BDUJ7mrkxb2YZmQoP4YJ9Ur1PWPyA=)
3: N9eJQft8E_Vlm9-92c34l9oVaOE.roa (hash: STJ3sDAbNVIFBy9HmVpY5X7TsamKj7xapU3f0YN1wC0=)
4: YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa (hash: n9uoqKCqG6Ob4UlpegclYiabrSTMSzoqIVhaQf1T96Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:44:26:25:29:48:5c:38:ac:1b:2d:3d:3c:03:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Sep 5 01:00:59 2026 GMT
Not After : Sep 6 01:00:59 2026 GMT
Subject: CN=39c8df787df9d8f85e79ca45b99a9a3f1a9e9343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:00:8c:93:43:3b:d7:d3:f7:46:e2:a2:2c:
cb:4e:9b:7e:07:55:03:2c:2f:7f:8c:de:06:8a:92:
fc:00:4d:0d:09:6c:c5:d3:d6:67:0a:e5:b0:2d:43:
b5:cd:26:3c:06:ef:06:96:a8:5f:9b:39:79:88:7c:
18:49:bc:5e:12:33:65:51:67:f8:94:8a:b6:e2:34:
17:ff:ed:5d:03:7b:4c:d6:6e:95:63:3c:aa:87:50:
8f:41:6a:ac:23:91:42:fb:2d:24:d3:fb:d5:cb:c8:
e9:fa:1e:d0:3c:97:fb:ad:b3:54:50:02:b7:7b:c5:
49:9f:6c:12:4e:56:10:00:37:90:b3:0d:82:73:a6:
5f:08:84:67:7a:62:9b:54:77:1d:2c:02:4d:52:89:
5f:38:79:c7:f6:21:99:37:9e:b9:c2:ea:8d:ec:9d:
17:5c:ee:d2:a1:4a:e8:ce:01:25:4e:39:e7:c2:90:
8c:c9:f6:87:d1:6e:e3:3b:2c:d3:bc:d5:19:8c:37:
19:2b:e0:65:5b:e2:32:62:9a:90:e2:c9:26:43:c5:
e8:29:88:f5:69:8c:ae:78:11:b4:05:d7:ae:56:fb:
4e:8a:ef:c8:9d:a9:44:7c:36:0e:d9:8d:7e:58:12:
ef:8e:46:84:aa:75:b2:d7:c8:a1:a1:6b:0d:f4:0f:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:DF:78:7D:F9:D8:F8:5E:79:CA:45:B9:9A:9A:3F:1A:9E:93:43
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:af:89:e4:05:1c:bd:64:8f:a1:7b:ea:be:99:a2:9d:77:
fc:07:85:85:8d:e6:15:11:5b:1e:d7:8b:99:ab:57:dd:be:a7:
b7:68:02:d0:dc:b1:3a:dd:cd:bb:72:c6:76:44:17:de:58:33:
2c:10:72:c1:24:7f:25:71:6e:30:02:88:5b:c9:e3:3c:7a:4b:
8d:94:05:c7:97:d7:66:74:96:0d:7c:f0:96:9c:5b:20:bb:7d:
86:fd:cb:d0:27:27:ea:47:f8:0f:a7:31:8d:c9:df:fe:c2:2c:
af:f5:37:e5:d3:67:e0:55:d7:8c:3b:f1:c5:8c:a6:91:46:60:
03:c0:59:87:91:ae:60:61:08:c5:8b:8c:24:8e:97:b1:98:95:
92:cc:fb:be:dc:be:46:0b:6e:d2:4e:ba:6e:52:cf:52:28:0d:
41:2f:50:49:03:75:51:5d:54:87:ef:08:1a:5b:55:70:4b:f6:
55:24:d2:e2:f3:8d:a0:61:0b:3c:44:04:0f:95:e5:66:2b:e2:
45:96:e6:5b:02:97:ae:4c:b6:00:ab:a1:29:0f:6a:37:8a:50:
cb:b5:84:6d:23:75:f0:9b:01:94:02:7a:14:dc:11:74:e1:27:
66:c8:9f:a4:4b:55:79:28:55:6c:81:c0:ad:a5:42:bd:bc:7d:
7c:59:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:12:30 2026 by rpki-client