Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: KtAAtm8iHuD1T0rj7cU+EijrXIDq+FZPmyndNuyX3zg=
Subject key identifier: 1A:7A:9F:43:AD:FC:19:D7:66:41:2F:79:7E:40:FB:1F:CC:F3:AF:69
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 01A08AC3B1581D90BC84A26B41156F9E7C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 11AC
Signing time: Thu 10 Sep 2026 10:01:15 +0000
Manifest this update: Thu 10 Sep 2026 10:01:15 +0000
Manifest next update: Fri 11 Sep 2026 10:01:15 +0000
Files and hashes: 1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: 22d9GSaY0w/bF+W7Vde7BgjZAg+38y3q6k5+xf2K04U=)
3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:b1:58:1d:90:bc:84:a2:6b:41:15:6f:9e:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Sep 10 10:01:15 2026 GMT
Not After : Sep 11 10:01:15 2026 GMT
Subject: CN=1a7a9f43adfc19d766412f797e40fb1fccf3af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:df:8f:ec:41:2d:4f:ef:90:12:d8:13:f5:
64:5f:48:b5:9a:7b:6a:b4:d3:d9:30:c1:bb:42:f1:
a2:d4:28:aa:ba:82:72:1a:8b:a7:c4:3a:c1:84:c4:
73:85:34:ef:27:65:bb:6e:93:28:88:3e:37:42:08:
0e:c8:5b:67:b7:45:c4:ca:d2:27:35:67:cd:4e:3a:
83:07:90:4e:f6:4b:6b:79:e3:cb:27:98:1a:fa:0c:
2d:4e:ad:fb:ad:0b:93:ea:95:99:59:69:37:6d:a3:
4b:d3:2d:32:37:32:fa:15:9c:e7:4d:35:00:55:9e:
ca:b4:e5:19:8c:6f:99:36:a4:c0:f1:ec:5c:17:1c:
d2:5f:c2:92:a7:99:eb:29:52:2b:f4:17:e1:2d:65:
e7:c2:b2:9b:f5:cf:0f:79:06:0f:8f:8d:93:94:c4:
f0:9b:41:4a:4b:8e:59:7f:73:1a:12:3f:69:26:b6:
c0:e5:69:dd:5b:db:76:f2:f1:8c:45:58:43:90:30:
46:b6:79:3c:e6:af:55:e9:8d:ad:62:34:b9:85:d6:
b6:e5:37:55:95:43:69:dd:23:1e:0b:57:11:f1:97:
c6:c9:96:8d:47:ea:ab:9e:10:e9:f2:65:86:f8:00:
87:e1:cb:37:0b:14:7e:10:70:c6:34:64:4c:fb:cc:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:9F:43:AD:FC:19:D7:66:41:2F:79:7E:40:FB:1F:CC:F3:AF:69
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:56:61:a4:89:f4:3d:fe:ea:c9:73:42:0b:ed:10:1b:e3:77:
bd:77:45:47:74:b7:6e:57:49:f7:0a:81:b6:d6:9a:e3:2a:37:
5a:54:0e:06:47:62:da:b0:cf:2c:93:a6:b1:c0:e7:16:80:21:
58:fa:13:a5:bf:ef:0b:75:c3:aa:91:bf:70:0c:2d:e2:a1:0d:
23:37:52:f7:f1:03:6c:31:6e:24:b1:8f:b2:50:ea:bf:96:d5:
8f:dd:c0:72:91:b3:8e:13:c0:9d:a9:61:36:ed:27:69:9c:e4:
e2:8f:1f:7c:bd:4e:37:93:d8:18:04:62:d8:a7:4d:38:d6:d6:
55:8a:ef:ca:09:6e:df:52:0a:e3:1b:a6:0b:3a:2f:bc:c4:91:
fc:79:41:ae:aa:4f:4f:7e:1a:b2:2b:72:ea:ed:70:3e:d3:f7:
8a:61:58:f5:74:1a:86:8d:28:d7:cc:d6:d9:31:42:15:30:84:
2a:c9:f7:e9:83:ca:df:f0:84:b9:bb:b4:db:94:67:2e:d6:2e:
0e:ee:f1:85:35:f6:53:bb:d9:8a:f0:8c:bd:d3:51:70:32:1d:
25:0a:1d:17:f9:9e:f2:38:ae:c0:bc:41:ee:77:d3:a0:09:19:
4e:b6:f6:3e:da:ee:b1:7a:1c:e9:1e:5b:e6:91:64:77:f5:56:
e3:7b:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:43 2026 by rpki-client