Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: anWeoyszHefURUir2rxaDtk06HQho/TF/FecgR6vu98=
Subject key identifier: 2C:AA:D4:30:29:E7:88:85:25:91:3A:01:A0:BA:8D:98:81:F2:AA:F4
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 01A13D1396919EE2D79EAAC4D5874E048B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 136A
Signing time: Thu 15 Oct 2026 01:00:56 +0000
Manifest this update: Thu 15 Oct 2026 01:00:56 +0000
Manifest next update: Fri 16 Oct 2026 01:00:56 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: a4fndaxcNLMmGYh4R0KvXAxH+17u7lwREn8P2bv5sOw=)
2: fSxv-fa820aQ4S9EYgBkeHgJYUs.roa (hash: K47nAqoGk2oEUNxR6ydvT1zDvrh8m0EYPg1t6S3F6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:96:91:9e:e2:d7:9e:aa:c4:d5:87:4e:04:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Oct 15 01:00:56 2026 GMT
Not After : Oct 16 01:00:56 2026 GMT
Subject: CN=2caad43029e7888525913a01a0ba8d9881f2aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:20:d4:d7:ff:b2:27:9e:cf:50:35:f0:58:
12:01:3d:47:ad:87:ce:ce:3a:2f:55:e8:37:8b:0c:
47:ac:1d:5f:69:d4:3d:26:00:55:06:e0:1c:34:ba:
55:6c:5e:91:ec:58:89:d7:b0:ae:43:6a:f0:71:05:
79:a9:40:79:b9:27:ad:56:be:84:ba:e6:16:14:86:
5e:66:65:2c:03:c0:b8:02:c5:24:0d:92:07:c6:30:
bb:a1:d0:e8:a7:be:2b:54:dd:67:db:43:30:30:fa:
b2:84:bc:35:aa:6c:b2:30:b7:87:be:10:7d:61:d7:
4d:b2:3e:1e:87:71:37:43:f4:fd:e9:cf:72:b5:15:
98:3e:98:b6:9f:1b:cd:ae:ce:ba:0e:6f:ed:38:fe:
5d:26:95:46:07:37:ff:a6:80:df:b6:62:56:62:ec:
24:d5:33:2f:85:24:1d:1e:e3:c6:a0:15:eb:88:6d:
31:4d:20:e3:44:34:53:8a:38:8b:ad:0f:a4:ea:b2:
db:b4:1e:d3:34:d0:09:33:da:0b:4e:93:cd:07:57:
cf:98:bc:43:57:6b:66:d1:e8:f0:c0:c5:4f:5d:1d:
56:bc:7e:8c:9d:81:65:ac:bd:67:02:4b:56:4c:c2:
e8:70:15:b0:01:f5:5f:ad:d4:92:da:5f:d9:63:c3:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:D4:30:29:E7:88:85:25:91:3A:01:A0:BA:8D:98:81:F2:AA:F4
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:4e:17:d7:e0:c1:a2:14:b1:38:5e:f1:14:1f:5b:c9:1c:
32:59:46:41:e1:97:f5:9c:f0:10:4a:11:3a:08:2a:80:97:22:
11:a8:56:65:17:59:9c:b3:64:f7:87:1c:87:a4:73:d2:27:fc:
f8:78:0e:3f:36:c1:80:dd:0a:72:39:62:c8:4d:47:b9:95:32:
df:86:be:5f:07:57:eb:05:1d:84:b2:40:e8:f0:16:86:c1:33:
52:e6:41:95:20:4c:85:0f:0d:ed:a5:2e:7d:ed:ee:65:d5:2c:
23:19:e6:36:26:4a:c2:f8:44:87:a9:9d:d5:bc:8b:81:13:d9:
f7:3a:c5:46:cb:7f:a5:f8:40:f2:23:2f:fc:92:ef:87:ff:39:
e8:59:bf:e7:09:f8:ee:9e:56:41:2f:08:db:85:24:2e:eb:c3:
e8:87:fa:ef:6a:e3:b8:e9:da:d5:f7:b0:17:49:82:d6:38:5e:
13:01:06:8c:73:17:e3:d2:ba:32:9d:7a:5a:3e:5e:7b:76:ab:
48:34:18:b9:8a:e6:03:c9:7e:44:54:24:7e:61:48:8f:bb:eb:
8b:8a:65:9c:3d:dd:8c:8e:ed:5e:65:38:af:e4:c3:d2:55:cd:
99:59:c3:a6:bb:a3:7b:b4:77:1a:6c:1b:06:e0:20:5c:47:33:
0a:2a:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:19 2026 by rpki-client