Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: fsJZ3iV4/ei++qRJm01/QWJNfJGMJHNThxaVagq576Y=
Subject key identifier: F2:09:06:3F:35:0E:40:D3:7D:6D:A1:58:BC:6F:BE:19:B6:CD:CF:E3
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 01A1306AAA4E5CF983F653240CB3ACFF1320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0AC9
Signing time: Mon 12 Oct 2026 14:00:59 +0000
Manifest this update: Mon 12 Oct 2026 14:00:59 +0000
Manifest next update: Tue 13 Oct 2026 14:00:59 +0000
Files and hashes: 1: 0B_-fCyLXp7fUsWOj-653bKohWc.roa (hash: Y+dKm3SHW56iDu1ZP9jbGp26P92Eyq4+86SkrCqeKGU=)
2: A_-h6j62GakTf8sVYSZUPDVBMR8.roa (hash: csIAxW9bXtziqhqyhaEg7C2GF8tHOgSMTxW10V1Xvoc=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: Pjqu/XPKyRSE5Iee0TgHz8l7EJVgIjg7TQsEVTmToKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:aa:4e:5c:f9:83:f6:53:24:0c:b3:ac:ff:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 12 14:00:59 2026 GMT
Not After : Oct 13 14:00:59 2026 GMT
Subject: CN=f209063f350e40d37d6da158bc6fbe19b6cdcfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:3b:1a:86:30:3a:42:87:4c:ac:da:e3:3a:
5d:88:a2:76:3b:07:e1:8a:32:83:10:e3:5e:cb:7f:
39:3d:7c:26:f4:29:f7:98:12:3a:e7:2f:25:10:24:
ab:5a:96:2e:18:41:37:72:4b:7d:cb:84:7e:05:d3:
3b:f5:8c:30:6d:98:0a:1d:c9:9a:70:37:f3:99:ed:
71:9a:3d:a1:81:9e:48:d6:c1:4b:38:c9:c8:6f:30:
68:21:38:68:93:a3:5a:eb:9c:c6:96:48:4f:27:b9:
04:6f:1e:e1:b1:6f:cb:7c:53:b7:8c:9a:0b:bc:df:
7b:50:50:dd:e6:63:85:45:04:d9:a0:b3:5b:d1:bf:
11:9b:9d:5a:f8:33:3e:72:d1:8a:03:2f:5d:03:09:
1a:dd:d3:44:26:b6:5c:47:43:fc:6a:18:48:a0:45:
ab:2c:fb:88:71:ef:c8:78:c8:8a:28:1e:93:bb:3c:
ab:62:ee:72:e9:b0:11:22:8a:16:92:dd:b9:17:f8:
6b:9c:5d:bb:39:11:38:9f:9d:70:3a:ab:66:bf:3f:
dc:71:69:1a:d4:33:4f:86:69:fb:b1:83:90:d7:1a:
dd:8d:73:42:26:56:62:0f:6b:f4:eb:3a:a5:5e:32:
e2:68:67:0f:87:eb:4a:d2:7d:9f:83:0b:fe:e7:bf:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:09:06:3F:35:0E:40:D3:7D:6D:A1:58:BC:6F:BE:19:B6:CD:CF:E3
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b8:8c:ac:a1:19:81:c2:0e:b7:56:0c:f3:11:91:6e:56:f0:
43:9e:0c:36:ac:9e:03:aa:18:8f:92:c6:6d:df:83:7a:5c:ea:
10:fb:ed:46:ef:32:da:d9:0a:bf:31:fc:20:1b:5f:37:d2:bd:
2b:9e:91:73:dd:e8:fb:8e:6e:d0:d6:a3:66:52:ee:c6:39:55:
91:b9:c8:e1:d8:9d:b7:7b:ad:51:01:b7:8a:1b:47:7f:30:f9:
a8:57:39:2d:00:c7:11:65:83:99:5e:a2:8c:97:09:f4:47:0d:
92:e6:1f:25:fd:56:7e:84:4e:50:7a:5e:6f:12:94:3a:4b:c7:
56:84:00:8b:95:74:a5:6d:d2:c9:e3:22:26:cb:6a:ea:ff:e6:
0d:87:44:8c:a3:8a:9e:35:eb:05:e1:9e:7d:c5:e3:53:f9:5b:
32:8f:8b:8b:eb:ff:51:84:63:64:8e:d4:c4:f9:45:48:66:67:
c7:c6:24:93:07:16:d4:40:ff:93:0a:d3:9c:a4:c9:bc:b6:0f:
a1:c1:93:b2:40:44:bd:a4:e9:75:03:8d:32:88:1f:52:e4:da:
a6:6f:a5:6a:99:f5:1d:be:78:68:b4:5c:76:69:1b:d2:ec:14:
87:df:e1:61:a0:b3:62:d2:2e:57:75:86:d3:bd:1b:99:79:8b:
c4:29:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:15:54 2026 by rpki-client