Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: xHLY4rfg5foyNK7Gs9hfqtbVbl8U1g7I5d8SHuKJFWE=
Subject key identifier: AB:C7:84:E1:C7:2C:DF:9D:64:0A:23:DF:A3:94:C3:8D:63:76:86:83
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 01A1144EE471BFCE543160B899E0341E6F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1A92
Signing time: Wed 07 Oct 2026 03:01:16 +0000
Manifest this update: Wed 07 Oct 2026 03:01:16 +0000
Manifest next update: Thu 08 Oct 2026 03:01:16 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: 8FYhLdknXG4PFOp6dKyiMEiZKDsDY8v5UwwRp06SwhA=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:e4:71:bf:ce:54:31:60:b8:99:e0:34:1e:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Oct 7 03:01:16 2026 GMT
Not After : Oct 8 03:01:16 2026 GMT
Subject: CN=abc784e1c72cdf9d640a23dfa394c38d63768683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:6b:dc:01:f0:b2:09:ac:ac:30:3c:74:b3:
c7:cb:6b:85:82:d4:e2:67:79:f3:9e:26:41:77:df:
4d:88:47:0b:d4:f4:aa:b2:4b:d0:09:65:e7:37:5a:
15:0e:f2:7a:a6:4e:d5:9f:f9:08:3a:99:77:52:8f:
1a:77:fe:13:4b:04:04:57:7f:39:2a:ce:b0:7b:ee:
99:98:2c:33:69:23:a1:04:84:cf:6a:3b:88:ed:f6:
32:82:b1:3f:9d:8f:d5:4e:df:8d:2b:6d:1f:26:2e:
1a:67:98:85:b6:ee:52:b5:6e:9c:5c:09:de:7d:d7:
58:60:95:a6:7e:19:57:78:32:a9:c9:10:00:56:90:
39:45:18:38:6c:93:b3:cc:84:65:a0:2e:ef:18:8a:
37:4b:3c:c5:48:94:d5:54:c1:a3:7d:aa:9a:6f:79:
2e:4a:a6:68:4f:48:03:1d:12:e8:0a:d3:20:b9:36:
d1:17:d8:3d:ea:73:91:f3:df:ee:53:9f:ed:f0:f3:
68:be:8a:db:09:a5:ad:65:81:84:64:53:91:3d:63:
7b:11:33:7e:4a:c7:04:de:f4:96:ff:4f:e9:57:0c:
12:0f:60:fe:66:0f:61:2d:12:78:71:3b:dc:67:23:
f5:ed:40:67:f5:62:c4:a9:25:21:7c:83:6c:b5:ba:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:84:E1:C7:2C:DF:9D:64:0A:23:DF:A3:94:C3:8D:63:76:86:83
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b1:e0:09:db:12:0b:28:43:2c:be:0a:d9:99:a1:83:6d:7c:
cd:50:6e:90:ef:a9:c3:05:b2:1d:16:03:03:b1:7b:cd:80:6b:
41:30:7d:7c:c7:22:cf:5e:e1:7f:8f:be:5f:ae:98:13:88:8c:
41:82:ac:40:fd:f0:77:4c:79:2f:66:c2:42:0c:1b:f2:26:55:
7b:d9:c9:6c:73:4e:77:3a:ee:32:82:81:ae:f2:d0:20:14:33:
53:e0:9e:f3:e6:dd:1e:52:ae:71:9d:e7:43:dc:cc:a0:57:76:
cd:92:99:55:1c:0e:54:89:58:92:d0:4a:ec:7c:00:c3:d5:8d:
d1:b6:8e:44:49:44:03:e0:2e:b0:16:11:22:6f:44:16:9b:91:
31:81:23:3b:35:7d:b2:04:43:5b:81:7a:81:ae:23:06:f0:72:
ae:c3:82:ea:2c:35:b7:f8:49:a1:61:7c:73:63:e5:81:c4:28:
a6:7a:29:1e:34:03:f8:07:df:c4:fd:3e:a5:21:21:ae:c2:33:
6a:8f:fe:81:68:c9:29:6f:8a:fe:12:ac:51:f7:4b:ae:64:52:
27:6d:0c:db:63:ee:cc:16:29:89:c7:78:8c:0d:06:d1:05:18:
98:62:af:7c:96:3f:ba:2d:22:bf:20:fa:21:eb:dd:6a:a8:ac:
e6:8c:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:07:56 2026 by rpki-client