Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: zehLn6w8xXi1+JPuMbRz7YF4AN1Vyf9CB9Miypz+vv4=
Subject key identifier: B7:A0:21:09:C8:07:7D:A8:32:D4:5C:E7:CE:C2:FE:FA:F4:57:C5:B3
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 01A15A4259367A4ADBAEC147D53C6D192946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 1978
Signing time: Tue 20 Oct 2026 17:00:59 +0000
Manifest this update: Tue 20 Oct 2026 17:00:59 +0000
Manifest next update: Wed 21 Oct 2026 17:00:59 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: yc8/gfiXAJHZkTRmFKfRcgrYJsmEwBUScEW1BGveG/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:59:36:7a:4a:db:ae:c1:47:d5:3c:6d:19:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 20 17:00:59 2026 GMT
Not After : Oct 21 17:00:59 2026 GMT
Subject: CN=b7a02109c8077da832d45ce7cec2fefaf457c5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:29:bf:30:71:28:87:85:da:2f:ad:3e:c9:
e2:c7:b2:19:32:cc:0c:56:c7:fe:02:7f:d9:30:07:
91:7c:0a:53:8f:69:bb:a1:ab:a5:b4:d6:b2:bf:3f:
fa:18:1b:84:ad:30:44:d5:7a:4e:45:a4:5e:8c:67:
92:fe:df:37:d5:1c:f0:24:4a:13:e1:8a:17:e4:1e:
46:05:ac:8e:27:e6:c9:bb:a2:74:6c:dc:ab:4c:ac:
ad:6e:b8:ef:d1:16:a7:ee:f7:2f:47:ba:15:c8:26:
dc:a4:21:c3:9d:e4:ce:eb:6f:93:45:26:69:e4:1b:
db:37:42:62:96:a2:16:87:14:1f:26:72:61:af:72:
60:a0:88:50:08:8c:ad:d6:52:24:33:4b:a2:e4:c1:
30:aa:40:4b:e1:35:0e:70:ff:9f:94:d4:ef:4c:bd:
0a:9c:39:4c:8c:66:54:86:75:f3:4f:eb:41:b8:75:
f6:85:a6:93:ce:ec:89:a3:42:ee:1a:5c:de:11:e4:
ad:51:54:32:ab:10:7c:3a:0d:6d:59:ac:08:b1:f0:
6b:c3:f1:c9:d7:66:6a:67:e3:04:d1:ff:81:b6:2d:
82:95:16:88:4a:3d:5d:72:5c:08:46:05:a9:3c:b9:
22:ca:dc:60:1d:07:02:af:aa:4b:48:46:d5:ab:83:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:21:09:C8:07:7D:A8:32:D4:5C:E7:CE:C2:FE:FA:F4:57:C5:B3
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:42:14:72:6d:b1:95:34:43:a5:c8:89:5b:84:23:52:6f:ab:
86:b4:80:46:4d:86:53:89:5d:88:50:db:e6:b7:d5:b6:5b:c9:
1a:89:c8:ab:c5:e1:a7:a1:c0:57:e5:22:d5:d4:c9:91:2a:79:
55:ee:01:5b:45:81:49:b3:d2:89:27:6d:c2:24:55:df:65:6c:
3a:35:06:fc:19:d9:d4:4b:18:31:0f:cb:00:df:5f:e1:ff:ec:
53:05:4c:24:6a:1a:7b:49:d3:86:fd:69:55:11:4c:00:8f:ef:
c4:8b:12:ad:49:a9:2c:d4:ac:8b:7d:c8:e0:25:c3:74:3d:5e:
aa:2a:df:f9:97:dd:d0:07:6f:37:a4:46:31:29:55:d3:93:5c:
b0:38:9f:b1:5c:cb:d3:49:4a:f7:6a:67:fc:8a:f1:b0:79:31:
8f:b7:84:75:c5:25:2a:99:bc:8b:89:fe:30:ad:bd:c3:e5:2e:
b3:ea:b8:90:d4:8e:96:87:62:ca:b0:c5:89:49:6c:77:cd:65:
15:1f:d2:b6:9b:63:2d:b0:8b:09:60:0b:31:db:09:e6:0e:04:
be:db:88:b4:4f:a2:ce:21:0f:25:f6:27:63:65:de:dc:0e:66:
a1:68:50:c1:e4:03:f1:29:a9:9f:d6:b2:bd:68:20:2b:9a:73:
f2:6b:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:05:19 2026 by rpki-client