Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: 0LjmufwCfcxvWNAifzvQ6YHC0psGMkbSLEMVinoXDtk=
Subject key identifier: DE:40:53:98:5B:B3:12:8E:F9:60:C9:62:43:96:98:2C:F2:E2:66:3D
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01A1660FF9650570C12B5018308D2BFF9F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1AB9
Signing time: Fri 23 Oct 2026 00:01:25 +0000
Manifest this update: Fri 23 Oct 2026 00:01:25 +0000
Manifest next update: Sat 24 Oct 2026 00:01:25 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: nE4Ez0Cj2E2tvI6Z0akNUS/OumIpVB+OW8UWIKqSEnQ=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:0f:f9:65:05:70:c1:2b:50:18:30:8d:2b:ff:9f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Oct 23 00:01:25 2026 GMT
Not After : Oct 24 00:01:25 2026 GMT
Subject: CN=de4053985bb3128ef960c9624396982cf2e2663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:32:ef:0a:1e:cd:d7:25:03:72:eb:9b:94:
35:20:27:29:d5:6a:3f:e0:5d:c2:c1:d4:fe:fa:86:
68:89:f3:b0:15:6e:93:67:4f:77:48:b7:80:80:0e:
14:1e:38:86:5e:3b:25:10:d2:3e:37:a6:a1:1a:f1:
71:57:88:d7:f6:de:83:af:34:cb:02:8a:8a:3b:57:
db:87:86:23:ac:8b:fc:3e:f4:1c:a7:79:b8:ba:7c:
cd:c2:ac:68:1e:d9:98:3d:6e:60:9c:cd:14:c6:a0:
ae:75:5d:44:61:90:e5:72:82:0e:6d:fc:9a:eb:d3:
8f:d4:1c:5b:d6:1d:4b:cf:c8:09:c8:43:f1:63:0a:
b8:1a:19:15:8b:53:81:e5:e2:ae:c9:2b:71:0f:03:
ea:c0:6f:b5:39:9c:d6:69:75:70:21:bb:68:09:b7:
74:56:29:f7:19:36:ad:f2:35:40:09:71:5d:9f:71:
3e:a3:12:dd:f2:f2:b3:78:82:5d:95:2c:32:0e:35:
78:89:a7:fe:c1:81:c4:7c:d3:81:91:5e:87:e5:7b:
c3:0d:51:37:b7:88:bc:69:13:da:3c:2b:ae:24:81:
45:bb:52:4b:e3:89:de:3f:72:36:b8:a4:18:ac:07:
b4:9f:73:b0:e4:66:b4:32:4e:c8:13:34:57:e3:64:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:53:98:5B:B3:12:8E:F9:60:C9:62:43:96:98:2C:F2:E2:66:3D
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:07:39:7a:20:0d:cd:b0:ca:fe:eb:d9:27:de:57:1e:30:
96:2b:ba:11:b3:c4:0d:49:77:b6:72:4f:28:c5:67:fb:82:c9:
04:39:58:48:8e:b8:ec:d4:3a:34:9d:d7:6a:85:cc:95:b3:de:
3e:65:7d:01:89:45:7c:d4:50:9d:d5:c7:7a:07:4d:aa:0f:4d:
59:ff:19:d0:3e:13:42:f5:e8:c1:24:40:96:1e:c3:e2:16:c1:
28:66:b4:bd:55:eb:3f:a1:f5:dd:c2:69:2f:9a:a0:6b:d1:67:
5f:12:e8:61:41:3b:97:4f:b4:84:5c:4e:57:d7:9d:3f:ef:5f:
9f:75:99:24:2c:96:fd:da:e1:33:10:99:f4:88:1b:e3:71:99:
86:b6:58:6e:85:34:9c:17:7c:fd:c8:79:80:21:2e:a2:51:b0:
12:b5:2e:d7:80:95:5c:48:f2:b2:92:ab:ca:bc:42:ca:f3:66:
f6:5f:bf:ee:47:0b:2e:2e:b0:a9:0c:27:eb:cf:7d:95:0c:50:
5c:c6:87:9a:ca:46:e7:93:bc:98:14:b7:3f:62:77:71:a1:04:
d4:84:e5:b5:6e:cd:72:cc:78:36:c4:17:3d:10:56:5c:f7:57:
d3:59:29:8d:98:db:8e:2f:91:b9:7e:cd:dd:79:57:c4:b7:7a:
0d:f1:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:52 2026 by rpki-client