Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: aRdeltRJZBqETC/HPtiV2pe8syVYa53/PX2LyLeMsrQ=
Subject key identifier: A4:A8:38:E3:40:7D:DE:D4:C6:53:09:25:A5:69:12:8B:2A:B7:69:D7
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 01A0DF17EEFF039D1BD76C0DA246E493DC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 19:01:22 +0000
Manifest this update: Sat 26 Sep 2026 19:01:22 +0000
Manifest next update: Sun 27 Sep 2026 19:01:22 +0000
Files and hashes: 1: K7imHnGp5a0GZEXjdJA9ycC0yM0.roa (hash: WpPn3I2nrpKd+2H696eaEy1UwnJ6zYF2icMGlpKEWrE=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: PkJ33Fs46H4yAhe/uSwFEyR/eoIdLUzfNrbOXn3+oW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:ee:ff:03:9d:1b:d7:6c:0d:a2:46:e4:93:dc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Sep 26 19:01:22 2026 GMT
Not After : Sep 27 19:01:22 2026 GMT
Subject: CN=a4a838e3407dded4c6530925a569128b2ab769d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:6b:c1:ad:2b:45:b6:9e:de:1c:0e:22:a7:
e6:1b:49:71:d1:4d:20:0e:04:03:65:da:62:46:d5:
f1:67:bc:43:9b:0d:30:53:af:e0:95:3f:90:fa:35:
1c:45:02:09:92:27:df:49:d3:89:c9:da:d5:45:e4:
fe:e8:40:65:38:9d:69:39:99:6c:52:b3:58:21:3b:
d0:8a:2d:fe:11:a1:f1:db:54:4a:6c:b8:06:0f:4c:
11:82:0a:c8:cc:8e:33:c4:c3:54:3f:59:bf:02:7c:
ae:d6:43:17:e1:48:f9:4f:2e:88:2f:37:ef:cd:69:
48:9f:5e:78:18:da:4b:ef:8b:5b:cd:76:d7:83:ca:
c6:1a:ab:80:1a:d1:77:09:15:fa:ed:08:67:69:45:
f0:53:14:cf:a8:d7:f6:db:85:8b:30:4d:72:06:b4:
f1:39:ce:53:15:fc:3b:2f:f0:2e:d0:22:82:1f:17:
f5:72:30:b6:92:0c:59:79:fc:ee:5b:5f:e9:a0:06:
61:e1:4a:cd:26:bd:25:ca:32:d7:cc:ab:39:70:f0:
c2:03:b4:0f:0e:7c:6b:b7:2c:98:77:34:8e:22:21:
24:70:34:80:61:cc:b3:97:c5:39:2b:20:cb:e6:22:
ef:5f:38:d2:d1:98:7c:35:f6:fc:f0:9f:ff:3b:b0:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:38:E3:40:7D:DE:D4:C6:53:09:25:A5:69:12:8B:2A:B7:69:D7
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5f:21:ea:cf:0e:96:9d:27:ff:42:16:dc:e8:c8:35:d8:41:
36:53:da:a0:ca:94:d4:78:cf:9b:23:fa:08:0a:89:4c:cc:aa:
70:e6:35:1e:38:7a:1b:b9:8b:53:51:20:83:f8:04:17:93:fa:
64:ef:a8:a4:da:aa:93:87:e1:8f:83:4a:25:8d:00:a8:15:97:
cb:88:ca:79:06:34:de:f7:a7:c7:3e:83:d5:39:0b:41:b9:17:
b9:51:d6:39:4d:07:bc:f9:6c:e7:30:4c:67:73:4d:a6:28:75:
69:93:e4:4c:05:ba:dc:fa:c2:fb:48:7d:e1:9c:2f:f3:b3:c3:
56:dc:3b:1c:c4:20:17:7f:8e:de:c3:af:3d:4c:cd:a3:aa:18:
3b:60:c1:a3:4d:36:f4:ec:53:82:fa:68:08:bc:b2:32:6c:c3:
81:d8:80:27:05:61:96:f0:ed:e9:5a:00:dc:38:4c:c8:c7:d8:
58:d6:f7:5a:33:2b:2b:67:00:4b:fd:34:e1:53:ef:58:86:14:
fe:9c:91:38:a1:cd:90:9a:1a:ae:ca:f6:29:3f:a3:45:57:6d:
a2:7f:2e:53:d3:46:8b:c0:85:cc:63:9c:77:59:8c:d6:27:ec:
e2:3e:11:e8:1d:1a:27:1d:5e:d7:f5:96:c5:31:4c:b0:76:ca:
24:18:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:37:27 2026 by rpki-client