Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: ZXk0qeGfJV0Wxst23tcw61qDB8ysSaETQoguNM1ELQo=
Subject key identifier: 86:1C:96:C5:67:F6:90:04:2F:C9:53:04:E7:59:B8:99:46:9D:C4:75
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 01A17F2ABF4C205367FDBD1CDAEDE89CEC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 21:01:10 +0000
Manifest this update: Tue 27 Oct 2026 21:01:10 +0000
Manifest next update: Wed 28 Oct 2026 21:01:10 +0000
Files and hashes: 1: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: 9DSgNLhZLNbR1mB7uXEv6xAl9gfxCMiUjb0SnDK17wQ=)
2: pwRfNzXMGOEuy9-A9ygooZEM6n8.roa (hash: sFyYjRFOUtVZQUg+k6G6omkeszu0+pmN0gGghnRFGQE=)
3: u160Jah7hr6D732oGKFsXLBVoaM.roa (hash: jqJUVyD95/VoCXLkI72WeORMPIzKdKLuEWQQeOaKueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:bf:4c:20:53:67:fd:bd:1c:da:ed:e8:9c:ec:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Oct 27 21:01:10 2026 GMT
Not After : Oct 28 21:01:10 2026 GMT
Subject: CN=861c96c567f690042fc95304e759b899469dc475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:d5:e4:a9:e3:65:00:a2:f1:b2:2e:48:7c:
35:c5:5a:0f:66:57:3d:4d:be:d1:c0:70:5d:89:19:
54:69:2d:72:e8:a6:9d:ff:f3:8f:b6:03:ec:29:40:
a3:3b:58:b5:06:76:bc:b9:79:8d:63:49:46:56:10:
72:17:b2:22:64:19:d0:02:fe:7b:41:3d:b0:22:ee:
a1:38:bc:b4:74:46:82:60:8c:3f:cd:0f:d7:dc:34:
f1:fb:9d:c8:45:fe:82:ae:1d:77:8a:96:d5:b2:84:
be:54:74:40:cb:67:bc:7b:bc:f6:23:d5:b4:35:c6:
92:33:45:7f:63:b1:c3:4b:68:a6:80:39:fd:52:e5:
fb:e9:2a:76:8c:6c:b9:1d:6c:b1:56:5d:84:6b:6f:
d9:c9:ba:85:3a:19:eb:68:a6:f8:c2:bb:3f:70:ff:
9c:e2:7d:d6:81:48:e7:5e:a0:a2:f5:67:0c:02:3a:
18:90:6d:6e:d5:69:28:62:16:77:25:6d:73:68:74:
0a:19:e7:da:32:fc:4b:5e:5b:4d:4a:2b:0f:4c:5b:
ce:82:0e:d2:63:81:66:04:7d:3b:a7:1c:8d:07:fa:
4a:10:75:09:69:ac:5f:96:b2:32:d0:dc:92:3d:59:
08:1b:b5:cf:f2:dd:59:00:3f:37:d7:de:71:7c:38:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:96:C5:67:F6:90:04:2F:C9:53:04:E7:59:B8:99:46:9D:C4:75
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:58:b5:58:5d:3b:98:71:14:82:d3:05:e8:d5:84:93:47:b6:
08:0a:71:4d:f6:e6:75:97:12:63:7d:e0:31:0b:bb:86:e3:62:
61:a7:af:5b:97:f5:48:a8:af:64:c0:e1:24:fc:03:36:41:36:
7c:a5:4b:26:26:c9:ab:b1:dc:b2:83:c0:f2:1f:d6:59:ae:0e:
c4:17:9f:b3:21:e9:21:4f:18:36:cb:2a:8b:df:8f:95:52:8c:
9e:71:9e:00:96:85:c3:d0:16:6e:1f:5a:6f:b0:b5:91:0f:94:
00:dc:fa:23:c9:ce:18:2f:54:4a:26:3f:85:78:68:a5:2d:c8:
43:dd:58:4d:4d:37:9c:9d:65:84:54:18:d3:49:b9:e7:16:f7:
f5:b7:35:2f:6d:5a:55:d7:22:16:16:e7:e3:ef:c3:f2:f9:f8:
b1:42:05:8c:58:61:ed:b7:95:b7:d6:ed:01:8c:9c:b6:18:e7:
98:6b:21:0d:86:60:09:b0:e9:3d:4c:e5:0f:89:ef:19:d1:71:
f4:c8:0d:32:fb:60:81:f0:e8:d3:26:fd:c7:02:ef:f9:f4:64:
fe:ed:81:b7:c6:92:91:be:e1:dd:cb:cc:2e:ca:ee:73:39:81:
8e:b3:06:16:0b:99:4d:99:47:b0:1b:cf:ef:e5:04:65:b9:bf:
db:72:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:21 2026 by rpki-client