Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: H0AHH1yVuH8hVxRb3+RGrO1d2nw0wCoCIp/CuwJI5qI=
Subject key identifier: EC:99:AC:AB:C5:4E:AE:7A:8C:B1:C1:09:6B:0D:50:EC:0E:18:B8:3F
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 01A08AFA841BBFC9355A2DE578620AB03290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 15A3
Signing time: Thu 10 Sep 2026 11:01:08 +0000
Manifest this update: Thu 10 Sep 2026 11:01:08 +0000
Manifest next update: Fri 11 Sep 2026 11:01:08 +0000
Files and hashes: 1: EXnm5GMNBH3ppLUeSGSb-X8qsSY.roa (hash: kwkA+KaKZn+wsqhhu9W1i6vshCDzT/Icaj+nQRUQM3o=)
2: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: VDFPKuwduupkcTg6/WqgkBJ0MbLai2Gvb65aG2ySc54=)
3: kobHaurqZr4UJ_TNZculY22rr9E.roa (hash: EwXQXheqMoCgMhiAqNTZhN9jvAagt9eGoH6XnF9Zxto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:84:1b:bf:c9:35:5a:2d:e5:78:62:0a:b0:32:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Sep 10 11:01:08 2026 GMT
Not After : Sep 11 11:01:08 2026 GMT
Subject: CN=ec99acabc54eae7a8cb1c1096b0d50ec0e18b83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:b6:0d:53:42:59:b2:04:17:22:9c:29:90:
2c:74:9d:c3:e6:d5:53:dc:a3:11:2a:e7:fc:ff:48:
60:46:4b:10:bf:17:65:e6:94:59:e7:7d:6d:a5:3f:
6f:fa:d4:21:92:d5:7f:d2:85:38:e1:03:6d:cd:29:
18:a4:41:a7:5f:87:a5:d2:4e:bd:79:90:b0:d4:3a:
e1:6d:fc:78:72:59:c1:b2:43:6c:22:6f:a8:58:4e:
19:6c:a5:e5:da:5f:e2:9c:d6:1f:c7:f3:7d:5c:a7:
97:af:03:3a:8f:06:26:25:b5:d2:3a:38:3d:7a:54:
90:74:f7:79:2e:d5:8b:9c:d3:78:fb:68:6b:0a:fd:
00:c3:a0:c6:02:8e:c4:9a:92:5d:41:52:33:19:cf:
f4:a3:61:a2:ef:d2:47:f5:55:c1:a2:a3:3e:b9:80:
b2:dd:36:1b:be:86:c4:52:b9:bb:8a:b6:98:08:80:
80:b0:fa:a5:51:58:46:cd:49:99:fb:91:fc:17:b0:
5b:f5:06:56:ed:42:27:13:fb:a5:89:42:41:00:c6:
cd:f1:76:4d:31:01:90:45:5f:2d:84:73:f5:83:06:
cc:7f:a1:a2:70:0c:8f:a5:d6:dd:e0:ef:11:7e:37:
13:d7:82:22:49:ae:48:c6:6e:cb:96:23:78:a2:46:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:AC:AB:C5:4E:AE:7A:8C:B1:C1:09:6B:0D:50:EC:0E:18:B8:3F
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:ea:53:f7:ae:58:58:55:42:01:bf:97:ff:bd:50:c4:58:
56:b6:39:9a:9c:78:e8:e4:88:67:ea:76:cb:d3:a7:fd:84:5e:
55:da:76:9d:30:c1:c4:19:46:e8:3c:88:60:40:2e:b2:3c:75:
b8:a0:46:16:87:cf:83:bd:bb:5e:42:b5:27:ff:e1:f8:46:61:
71:06:05:5a:ff:1d:33:fd:16:86:83:1b:c2:f5:56:9a:8e:55:
e8:15:1f:7f:f4:37:56:0f:cf:8e:4c:7c:c1:1a:1b:11:7c:98:
4b:8b:dd:19:24:e9:d6:7a:81:92:37:87:7e:64:16:f6:a8:c7:
44:78:31:ae:10:c0:32:33:9d:9b:6e:47:cb:44:64:27:e9:ea:
f7:6b:74:22:32:94:a5:fe:4d:20:b7:eb:ed:a4:34:6d:2e:7a:
44:c1:cb:a2:b8:5b:7d:24:dd:ad:e2:d6:47:ab:79:c6:cf:d5:
a7:fd:04:62:b2:2d:df:d9:83:1c:f8:14:f2:4d:28:3c:ef:b3:
6f:9f:b1:3a:b3:50:c6:71:1c:8a:bf:f6:26:e1:ad:4f:0e:cf:
a7:17:89:b6:af:80:ad:bc:5f:8b:63:d3:84:b6:bd:95:f4:c7:
dc:cc:bf:c5:6f:49:77:87:bc:5e:ba:50:ea:73:68:4e:dd:50:
0c:0e:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:21 2026 by rpki-client