Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: txXyleb/LEr8K8FSfZrq9Hf/DxcRHLG6Nfah5Bp+rhE=
Subject key identifier: 5D:ED:1A:0F:2E:A8:29:B7:E7:0A:B8:CD:EB:86:B1:61:36:95:F3:14
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01A06EDE5E99B63F9C041DF25C6F5F986E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1A39
Signing time: Sat 05 Sep 2026 00:01:01 +0000
Manifest this update: Sat 05 Sep 2026 00:01:01 +0000
Manifest next update: Sun 06 Sep 2026 00:01:01 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: 0fs2jcMnKkOnTrLJt5V7YC+QjL3l7JBGF9lNa69/U6w=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:5e:99:b6:3f:9c:04:1d:f2:5c:6f:5f:98:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Sep 5 00:01:01 2026 GMT
Not After : Sep 6 00:01:01 2026 GMT
Subject: CN=5ded1a0f2ea829b7e70ab8cdeb86b1613695f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:bb:a6:ea:2e:ee:ef:c2:22:ba:24:22:99:
b2:9d:05:1a:c5:10:9b:14:ac:ee:9e:9c:25:fc:f4:
01:9b:57:ed:a8:50:d5:ef:b7:12:48:31:be:35:bc:
4e:e8:b6:0e:e2:b2:c7:c4:ed:05:e2:09:55:c1:5f:
4f:2a:f2:8d:3b:2a:4b:99:58:96:a5:68:42:0b:e5:
e8:2a:3a:cf:e9:1b:33:17:15:eb:74:a8:ce:e6:ff:
7b:36:0c:52:83:7c:27:c4:db:6d:22:23:4d:89:20:
85:86:ed:46:81:61:29:04:9d:b5:05:63:f2:fa:5d:
9f:aa:f1:87:c9:33:fa:0d:f7:85:e3:d0:5c:86:0e:
dc:f1:3b:c4:15:3e:a9:78:12:f9:67:5e:2c:4a:77:
34:5f:b1:c0:f2:61:a5:aa:24:b9:ca:68:9d:87:75:
cf:ad:e6:e3:b7:56:11:af:ff:0c:01:1e:d5:8a:f1:
b4:fc:bd:0f:ce:09:14:50:c9:e6:37:74:28:69:b6:
b7:ee:9a:db:96:ac:a8:6d:63:c7:c6:cd:82:36:21:
ff:43:5e:4f:82:0a:f3:6c:3f:62:79:a9:9a:81:0c:
36:16:51:4b:50:67:a5:07:ed:87:75:ea:e2:98:12:
1c:d0:52:d8:06:73:da:1e:d6:b3:ed:64:d1:fa:b3:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:ED:1A:0F:2E:A8:29:B7:E7:0A:B8:CD:EB:86:B1:61:36:95:F3:14
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:0e:19:f8:ff:66:16:78:32:8c:d8:3c:80:4e:2c:87:01:
22:2b:fa:68:95:cf:46:0c:0c:92:57:8e:6f:34:e4:df:4e:6b:
8a:a7:5d:d2:a1:ed:4f:73:cc:f4:f0:86:9d:a2:e0:8e:ae:94:
77:3d:cb:ea:b5:7e:56:65:5f:f0:30:d6:3a:f4:dd:71:f2:03:
bd:92:9d:6f:31:6d:fb:6b:f9:e6:77:8e:c9:de:14:76:1c:6e:
4e:ce:7c:c9:c7:d4:71:25:fd:70:ca:15:51:dc:20:5e:8e:ed:
89:2e:cb:a2:8c:1d:ad:57:e4:9d:b0:3d:20:e9:99:df:c2:12:
59:47:7a:04:5c:4a:90:e3:1a:3b:94:cb:9d:68:98:e5:a1:1b:
70:fb:8c:32:37:a7:a5:46:d5:a0:ae:1a:dd:4a:9e:a3:b8:78:
6c:6b:ec:f4:a6:31:74:bb:4b:4d:8a:8b:b1:7d:46:b6:bd:24:
88:82:ee:ec:cf:35:3a:02:68:b3:05:5a:15:0a:7e:71:dd:88:
5b:d6:60:17:49:a1:b4:80:6e:a8:c7:f4:64:ae:e1:2d:3a:62:
64:f9:8f:34:d7:29:86:a2:b1:fb:05:41:90:3d:02:6f:61:ab:
66:3c:dd:f9:32:d5:65:ff:a1:50:89:cd:42:19:e1:9d:04:ce:
a0:93:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:45:31 2026 by rpki-client