Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: yvG6Qi3he302GRIyH3q1S7MS7VzUJd2WtTb4xerhRrU=
Subject key identifier: 23:10:E8:DE:87:87:EB:82:55:37:D5:D3:56:BB:1E:6D:D9:93:8B:43
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01A1393700876528BD9A46909D168D8597D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 068A
Signing time: Wed 14 Oct 2026 07:01:08 +0000
Manifest this update: Wed 14 Oct 2026 07:01:08 +0000
Manifest next update: Thu 15 Oct 2026 07:01:08 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: ynWB9N6eeugVIq/vtp0/x3bS4IV73j6MlOdjJIVsVss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:37:00:87:65:28:bd:9a:46:90:9d:16:8d:85:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Oct 14 07:01:08 2026 GMT
Not After : Oct 15 07:01:08 2026 GMT
Subject: CN=2310e8de8787eb825537d5d356bb1e6dd9938b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:37:ee:29:88:a5:44:f8:78:b3:d8:1f:85:
d1:3a:6a:52:27:3e:8d:6b:db:50:6a:f4:5b:ce:2c:
ea:27:67:00:45:40:5b:d4:11:70:2d:d8:17:37:e0:
b2:00:e4:89:4a:17:19:86:04:45:78:cc:e4:b2:5a:
6a:96:7c:51:3c:ae:dc:b8:88:1a:e6:de:a9:a0:d1:
1d:09:13:84:a8:27:38:da:34:a6:67:34:04:09:66:
c4:c9:a3:32:5b:ce:d2:15:a7:6b:06:6f:37:be:0a:
10:6c:22:9c:31:dd:ce:b1:23:89:bd:b7:b5:a6:6a:
2a:e3:e1:4b:b5:98:6d:2d:5f:a0:26:d1:14:0b:b0:
e7:ac:fa:7e:c0:96:e1:b3:f6:56:7e:15:75:d0:f4:
80:e7:d4:83:86:06:04:f6:41:19:f1:38:94:c9:68:
4c:60:64:54:14:9b:df:ab:16:5d:66:e2:08:55:69:
a1:58:35:c1:d0:fe:87:46:82:f0:35:2e:96:52:06:
73:66:a0:40:99:ac:4a:a0:25:d7:f1:99:c3:9b:ca:
6b:04:b7:be:23:d5:ec:03:49:27:74:f0:d6:3c:22:
b8:c6:85:64:78:ad:4a:4b:2d:af:cd:26:6f:cd:2d:
46:33:55:f4:ab:ab:ca:9a:f8:05:98:5f:63:17:66:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:10:E8:DE:87:87:EB:82:55:37:D5:D3:56:BB:1E:6D:D9:93:8B:43
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:86:7a:c1:b4:73:9d:a4:8b:40:18:29:27:d9:75:a8:b6:4e:
8f:6c:10:d7:a9:6f:e4:51:c4:db:57:80:70:4c:1e:8d:db:93:
0a:43:a8:cb:7a:e3:a4:62:2c:2a:6c:6b:a9:93:0f:7a:a1:95:
c6:91:1e:38:ab:63:a5:b4:b0:c3:47:9a:85:d4:0c:45:a2:6b:
7d:bc:d7:c9:c2:d3:42:bc:c7:9b:57:c5:aa:44:04:6f:b3:33:
c1:35:e3:a1:6e:f1:f5:a0:60:5e:43:84:3f:89:6c:41:68:51:
82:5e:47:13:4f:6d:65:92:60:93:59:91:ad:f7:b8:6f:f3:97:
c4:ec:90:5d:32:6c:c1:b5:2b:28:8d:6c:de:7c:e9:12:17:9c:
f0:c3:27:27:a2:11:7f:d5:52:ff:84:61:10:73:dc:28:dc:43:
78:ba:36:12:ac:5c:32:4d:d5:61:85:4d:c4:ad:a1:2e:48:a1:
d0:d4:fa:65:54:3b:64:2e:5e:1d:01:6b:43:2c:44:ef:c5:94:
bd:69:47:b0:21:5e:95:22:e8:6a:64:9e:6f:57:9d:1b:7e:aa:
fb:7d:c6:0f:db:76:00:f6:59:1a:eb:d9:60:df:4c:92:88:a3:
b5:6f:6e:54:16:8f:81:3c:13:e1:2f:e1:46:a3:28:35:7e:79:
c7:38:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:50:35 2026 by rpki-client