Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
File: jJED0ak0JRu5ixHxacuLK97Gojk.mft (raw, json)
Hash identifier: 2oM5PIBNK51vZh7SzADLZEe90T2uPLjrpMK7TCnmKdY=
Subject key identifier: 4F:49:A3:99:6C:A2:BD:6A:E0:11:9E:F4:18:34:70:3E:80:96:B5:30
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 01A0889E3D8E9EA7419904D9BF8FD38CD633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:01:06 +0000
Manifest this update: Thu 10 Sep 2026 00:01:06 +0000
Manifest next update: Fri 11 Sep 2026 00:01:06 +0000
Files and hashes: 1: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (hash: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=)
2: jJED0ak0JRu5ixHxacuLK97Gojk.crl (hash: AR0kTQ0HFw92imsLmT3FG8B0M3lrNQaKk4oyJQCrzXM=)
3: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (hash: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:3d:8e:9e:a7:41:99:04:d9:bf:8f:d3:8c:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Sep 10 00:01:06 2026 GMT
Not After : Sep 11 00:01:06 2026 GMT
Subject: CN=4f49a3996ca2bd6ae0119ef41834703e8096b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:c0:3f:e2:d9:49:ca:6c:50:2f:8a:32:fa:
c7:ea:05:da:6c:2b:91:94:05:eb:6c:66:c0:bb:89:
1f:7f:a1:49:36:60:6a:87:5f:3e:05:08:ea:0b:69:
46:a6:62:47:a3:17:ee:bb:f6:03:11:c5:b3:aa:0b:
91:d6:d6:c4:de:8e:ca:20:37:4f:0f:c7:e3:ab:62:
03:d6:ad:fa:f3:cc:6e:e7:2a:7e:8c:95:82:21:c9:
89:d7:5b:cb:5c:d6:00:1b:9d:48:9e:f1:94:7e:7d:
01:35:3b:57:2d:8c:90:e6:c6:d3:18:58:d1:c1:2f:
17:f2:96:0b:16:ef:06:ae:22:bf:a9:4b:56:7d:03:
0b:46:5d:74:fb:f6:e0:ae:38:63:3a:ce:86:db:5e:
65:88:66:57:a9:e8:23:34:ac:b0:c3:ea:83:4f:52:
b1:15:ed:c2:ab:2a:08:4e:fd:2c:52:01:cd:b8:de:
25:bc:ac:21:c4:27:af:b4:3e:08:c4:ba:88:93:01:
2c:89:a3:4f:bd:1c:83:2a:bf:bb:79:7b:9f:27:1a:
a1:9e:1f:f1:63:bf:4a:8c:e3:da:c0:bb:f2:02:98:
6c:56:84:eb:f3:18:9e:e1:04:a4:6d:77:0a:d5:81:
f9:34:fe:95:7e:27:34:8c:53:04:10:3d:56:70:3b:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:A3:99:6C:A2:BD:6A:E0:11:9E:F4:18:34:70:3E:80:96:B5:30
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:83:96:32:4f:73:1c:cd:f6:69:44:f0:c1:a2:43:ae:58:
45:9f:b1:56:b0:00:a6:10:2e:22:62:f6:b1:e6:9c:63:c3:7e:
55:28:3a:03:a8:a8:c4:fa:a6:f1:c8:69:55:e0:ef:e0:fc:e9:
7e:e6:61:5d:32:cd:cc:f4:ba:55:46:7e:e9:3c:2c:1a:f7:d6:
20:95:5d:6b:06:cc:e1:09:1e:e8:88:81:8d:c7:11:78:4c:81:
da:26:f7:6a:2b:27:84:51:1f:9e:d8:11:15:f2:93:89:f8:ad:
39:25:82:ea:e7:9c:1a:37:aa:23:c9:2e:d5:65:72:80:25:c9:
a6:ac:e7:6b:3e:f4:bd:9a:28:17:87:93:a3:c6:65:70:21:f7:
10:e5:e8:9e:ea:16:fc:b5:ea:1e:3e:f2:30:55:a0:d9:7c:04:
5b:8b:7e:9d:f5:87:75:6f:99:d5:14:c5:ef:32:26:e2:63:a3:
39:42:c1:6b:47:ab:7a:2d:62:ca:5c:c0:fc:b4:99:fb:12:27:
a7:9f:f0:5a:a4:0e:10:2e:89:4b:84:0e:6b:2c:f7:97:b0:09:
03:c3:3f:69:4a:db:a1:0b:d5:83:b7:12:de:97:cc:b5:43:a3:
1e:97:51:b1:f2:07:6e:54:0b:3b:5b:78:f6:7c:16:12:e9:c6:
ba:48:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:16 2026 by rpki-client