Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: RqGUsx2jmFyhkXHjun6VIPMmyquaFelldtrzp6qAoXA=
Subject key identifier: 31:BB:DE:20:23:51:E9:72:53:37:60:83:2F:21:45:B8:12:45:0C:95
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 01A1231CBD94081662194199A30ABAD21565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1AAA
Signing time: Sat 10 Oct 2026 00:00:48 +0000
Manifest this update: Sat 10 Oct 2026 00:00:48 +0000
Manifest next update: Sun 11 Oct 2026 00:00:48 +0000
Files and hashes: 1: GacqQo2_yWLXH1ZsNLzHsN_ZkJg.roa (hash: 0oQogmWm+7L8vyOzeRyovxgJ33f02sYon4T+HeiS/Bg=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: avPjTmMitbxgyKJr1MyiwGHopYT+mnu7G1ZKEGAJoUc=)
4: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1c:bd:94:08:16:62:19:41:99:a3:0a:ba:d2:15:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Oct 10 00:00:48 2026 GMT
Not After : Oct 11 00:00:48 2026 GMT
Subject: CN=31bbde202351e972533760832f2145b812450c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:ac:35:2e:65:8d:17:d6:35:f6:12:c0:9d:
64:22:b4:91:83:c3:ad:37:89:0c:f5:83:b5:96:69:
6e:c7:c4:07:e6:8a:8d:34:79:d9:68:e6:13:a7:ed:
04:08:6f:e1:49:73:58:b7:c7:9f:d8:1c:24:6f:aa:
08:a3:31:3b:8c:fd:9c:f6:ab:9f:39:4e:12:4b:29:
3f:db:e3:2b:f4:f8:de:1a:1a:4c:dc:27:fd:d0:f8:
80:f1:51:b0:ca:92:7c:53:31:9f:73:68:bb:46:bb:
6c:b0:9f:cc:fa:7a:85:16:6f:b0:fd:50:9f:42:32:
52:08:29:f2:b1:ac:13:51:02:9a:64:cd:1b:c9:2c:
4d:4b:02:b9:05:c0:69:1d:ec:43:ee:23:46:fa:ef:
f0:1f:c0:6c:39:1f:de:5e:da:4b:cb:c1:a7:89:3b:
17:a5:89:c4:47:11:63:56:33:42:55:fb:35:9d:91:
b9:ee:11:07:f0:1b:d2:c1:02:12:13:eb:b1:3b:3b:
5e:cd:50:da:39:32:36:7d:8e:f4:46:6e:02:e5:d5:
90:1f:3e:20:90:19:ad:25:52:ec:8e:41:21:55:a0:
e8:f4:89:83:6d:45:02:1f:84:16:93:53:3b:c1:7e:
f2:40:90:ad:cf:a8:bb:46:63:b5:fc:cd:ad:50:96:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:DE:20:23:51:E9:72:53:37:60:83:2F:21:45:B8:12:45:0C:95
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:c8:41:b0:ba:58:2a:cb:5c:0c:e3:15:ac:2b:9d:21:91:
cb:75:4e:77:c8:86:3d:16:86:b1:09:ae:86:d0:8f:74:c3:78:
f7:f4:5e:ef:61:c8:55:61:c5:5e:af:31:db:cf:e0:88:cc:ba:
24:86:38:75:97:7c:de:42:f3:6e:c2:f0:90:7c:1c:f5:b3:ee:
a9:d1:1c:e3:cf:f1:e6:cc:70:0f:29:ed:f5:13:7f:c3:fd:09:
c8:4f:6d:8f:b5:4a:a6:7e:c5:0f:00:1d:17:cf:5e:08:15:ae:
2e:9f:2f:76:a4:f8:25:fe:48:81:94:78:25:3e:25:68:ac:c3:
08:13:d0:c6:a2:9c:a6:44:10:92:f9:7f:b0:ef:ce:9a:76:42:
27:74:04:25:d0:22:5b:87:04:05:bd:46:87:fa:7c:d8:a8:6f:
4e:1a:6f:4b:d2:61:ed:56:e5:46:b0:fc:3a:db:c0:87:a7:86:
97:f0:c2:0c:fc:b3:93:5e:9b:78:eb:2b:9e:fe:66:1b:46:a2:
e3:44:93:d8:ea:2c:13:63:60:18:5b:98:dc:3c:53:df:3a:1c:
3a:31:bc:7a:6e:1a:33:2b:e2:cd:92:c6:6a:1f:fb:58:2e:1b:
b9:b3:b7:1c:5d:7d:55:32:03:19:4f:61:2c:1f:98:68:74:1a:
52:d9:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:34:23 2026 by rpki-client