Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: wIMzTyK2Dz7xN+t5R3/r90QG7qLzEaVVKbvdnP93KH4=
Subject key identifier: B6:1F:98:5B:BE:F0:FA:91:77:64:95:8C:B7:FC:0C:0A:4F:92:DC:98
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 01A185D13C011DA0BF9A05812AE8A79A5275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 04:00:44 +0000
Manifest this update: Thu 29 Oct 2026 04:00:44 +0000
Manifest next update: Fri 30 Oct 2026 04:00:44 +0000
Files and hashes: 1: LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa (hash: YC+Err1nsYN5JZkJiiNrSk4ckkPdFmlbNmlV49Qluo4=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: lNqDGuXNL5XSskLEKEQJ+F5d8AKwnVS0SwsfnjxjkyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:3c:01:1d:a0:bf:9a:05:81:2a:e8:a7:9a:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Oct 29 04:00:44 2026 GMT
Not After : Oct 30 04:00:44 2026 GMT
Subject: CN=b61f985bbef0fa917764958cb7fc0c0a4f92dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:39:72:37:7b:6d:41:46:12:93:f6:e5:75:
32:50:0b:62:8a:db:1b:d3:ab:57:75:f3:3e:a5:92:
ed:2e:89:76:74:6a:64:b5:7c:22:14:13:ad:90:2e:
1d:a3:99:23:70:c0:ae:47:9c:2e:8f:ec:88:c4:b6:
6d:b6:33:5c:7a:5b:21:83:87:33:f4:0a:1f:7d:27:
f2:d0:05:24:28:09:20:eb:bf:fe:eb:25:a0:1b:72:
0a:49:30:66:f7:ea:2b:01:d3:9d:49:81:38:24:1e:
ce:c6:3f:1a:0c:aa:19:66:01:47:ea:ca:95:09:44:
f8:31:b4:ae:84:d0:ba:db:eb:a8:17:88:5c:2e:22:
a3:4b:98:9d:4a:c4:a8:92:be:ec:2e:db:88:bc:71:
47:21:48:e6:ea:6e:9d:01:f4:ba:7d:0c:e4:66:74:
97:c5:79:6c:d1:75:26:81:e1:77:50:7f:1c:c3:91:
eb:11:b4:28:1e:f5:3d:e6:f9:42:5f:21:6f:cc:ae:
f0:09:de:47:c5:69:06:f2:cf:2f:fa:7b:1f:1d:3f:
c7:2f:1c:c8:2e:9b:80:91:67:2a:26:4f:75:40:1f:
8a:27:f6:82:bf:25:b2:1e:cf:8e:f9:de:e3:f3:26:
eb:54:eb:76:45:90:7f:41:5e:5b:66:08:bc:b5:bb:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:98:5B:BE:F0:FA:91:77:64:95:8C:B7:FC:0C:0A:4F:92:DC:98
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c6:34:c8:2b:fe:22:fe:2a:16:f0:a5:22:30:03:49:4b:7e:
80:e2:68:7d:1b:a4:24:f7:2f:fe:d8:dd:40:e8:9c:e6:05:70:
94:e4:de:3c:f9:ed:57:23:94:42:fc:ff:fe:d5:af:18:49:5c:
eb:e5:9d:bc:b7:eb:63:15:8f:73:e5:7c:4c:57:70:3e:40:3b:
d2:e7:36:02:11:b0:3d:aa:96:72:0d:b8:79:a2:bb:bb:7c:7a:
77:f2:02:2d:46:8f:02:e5:c0:ba:c1:86:cb:d4:e0:e5:9d:d2:
c2:dc:c6:c7:5f:67:69:80:1d:19:7c:7c:56:22:cb:b1:cd:e5:
63:3d:0b:28:ca:05:dd:7f:c1:cf:bc:5b:d7:c3:12:fe:85:2a:
33:3f:2a:56:e7:6b:6a:02:a5:9d:73:f3:ce:8a:f7:8a:30:65:
35:ac:d7:44:19:77:f2:6d:ca:15:2d:ae:98:b8:36:4c:3d:4d:
2c:5c:74:3b:ba:20:82:a1:7f:f2:db:0d:3a:39:24:9a:07:0f:
e9:25:bc:b2:cd:4c:4d:7d:a3:4c:eb:4a:79:d6:87:05:d7:c9:
8d:15:95:94:47:a7:8a:c1:77:60:c8:b1:61:04:a5:10:e0:11:
b4:8e:9d:69:36:d4:e9:ac:5a:5b:46:76:73:07:5e:61:cf:6c:
7b:8c:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:02 2026 by rpki-client