Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: XinyJh6WKhH/sIWEGSRFXipDUXq54VBjnfxHMx2wpGs=
Subject key identifier: 51:A4:7F:41:CC:11:02:B5:0A:FE:58:90:09:E1:96:2A:39:07:7D:E9
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 01A06D95523D8DC9FCB7DCE42E3F789AE493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 018D
Signing time: Fri 04 Sep 2026 18:01:37 +0000
Manifest this update: Fri 04 Sep 2026 18:01:37 +0000
Manifest next update: Sat 05 Sep 2026 18:01:37 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: DBSZsXcS7WvXDgJQBRg9hCHAaLZSVCYfSIVb9EizBVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:52:3d:8d:c9:fc:b7:dc:e4:2e:3f:78:9a:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Sep 4 18:01:37 2026 GMT
Not After : Sep 5 18:01:37 2026 GMT
Subject: CN=51a47f41cc1102b50afe589009e1962a39077de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:6e:25:37:e4:b8:20:72:18:25:b7:4e:2a:
02:3d:68:9e:89:de:3f:e7:6a:bb:9a:01:f5:43:99:
8e:50:d9:79:7f:2d:e4:8a:06:5f:09:90:d1:83:01:
19:21:5d:70:8c:45:7a:62:8f:28:5a:05:e6:ed:0a:
5d:aa:67:56:43:2b:da:49:2b:be:58:f1:cd:78:90:
1a:31:d0:e8:da:26:1e:eb:7d:ed:5f:8a:25:02:7c:
e6:77:a4:1a:5f:f6:8d:ee:2f:fd:2e:ed:fc:f8:2b:
4f:d7:6a:e7:07:af:65:54:d2:ed:37:d1:78:29:97:
4d:d7:68:4c:42:18:47:0b:09:5a:b8:62:21:48:e3:
9e:ea:04:0a:ab:ad:e0:ea:e5:3c:e1:6b:27:9e:35:
60:80:38:73:6f:93:cb:54:f7:16:f4:20:8d:50:64:
ef:02:6a:a9:d8:65:71:9b:60:97:71:4d:ee:f5:9b:
d5:35:e0:f0:f9:8f:df:55:40:ad:46:24:8c:d7:54:
c0:a4:03:3f:73:1b:0b:c8:33:4a:2a:7f:21:46:90:
00:37:b0:c9:3d:89:bb:47:ba:64:d6:ae:ca:00:85:
77:b9:03:15:d6:88:6f:10:7f:c1:f6:77:e0:fc:34:
9a:50:f1:a9:c0:68:8e:6a:9b:7a:09:b3:f0:39:79:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:7F:41:CC:11:02:B5:0A:FE:58:90:09:E1:96:2A:39:07:7D:E9
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:b2:49:97:b8:0a:02:76:22:82:ec:6f:b9:8c:a6:d7:41:
2d:46:bf:e5:8a:68:10:04:fc:7c:96:b7:18:53:34:b1:b3:4d:
3a:cb:50:c1:1c:16:c4:ac:5f:4a:12:03:15:b1:5a:d5:4c:9b:
5d:04:73:79:73:2a:a2:8b:bd:7d:ed:68:70:02:06:9b:47:35:
9b:46:16:3d:87:22:fb:60:d6:a8:81:95:4a:91:f3:53:77:9e:
c6:fe:66:c2:31:d0:82:44:d1:d2:91:b4:7a:79:e2:ca:1b:62:
20:d8:e3:38:f3:9f:32:d8:dc:85:bc:96:26:8e:60:6e:ab:d4:
f8:c0:de:cf:4a:d9:cc:52:bb:30:b3:c6:89:90:c2:75:e5:ed:
32:98:0c:82:aa:78:b0:16:16:7b:e7:19:84:fd:a6:fc:a9:c6:
a5:d7:a7:ab:19:62:54:0b:1d:3e:ea:29:38:2d:e2:7e:2f:03:
8b:1e:e8:7f:62:40:2d:ca:64:9c:f4:04:cc:6b:89:45:79:c1:
8c:c4:ed:92:66:a3:6e:6f:4c:8a:6a:13:05:8b:39:20:11:e0:
9d:af:d4:2f:e4:31:dc:01:41:70:d5:be:84:ce:56:49:78:22:
5b:f0:c6:ff:a4:d6:f2:38:1d:e0:f5:cb:fe:4f:3c:04:0e:d2:
98:a5:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:09 2026 by rpki-client