Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: AnsxQTSo6HqEFadriY3uvzIbU5l7M/zBWz0hJq65MdM=
Subject key identifier: 8D:65:5B:F8:01:FC:B1:CB:81:E5:A0:CE:A3:A2:B3:57:49:FE:3D:37
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 01A14B740B4E9E368B6AE3C22DC9C5AF53A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 20:00:58 +0000
Manifest this update: Sat 17 Oct 2026 20:00:58 +0000
Manifest next update: Sun 18 Oct 2026 20:00:58 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: 7SgLa8nf/K1r4Z3qaXNLQwbvceY5OlVckjb1vi2ubN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:74:0b:4e:9e:36:8b:6a:e3:c2:2d:c9:c5:af:53:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Oct 17 20:00:58 2026 GMT
Not After : Oct 18 20:00:58 2026 GMT
Subject: CN=8d655bf801fcb1cb81e5a0cea3a2b35749fe3d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:32:03:bb:a4:46:b2:3a:19:a5:7d:5b:ed:
72:18:3b:d0:4e:b7:f6:93:30:74:94:1b:32:82:e0:
dc:9d:79:8e:f3:e2:08:02:e0:67:c3:39:05:35:f7:
55:ed:5e:38:bb:e3:df:f1:87:70:3f:b7:b8:98:47:
de:1d:32:e8:4f:12:b6:9e:4e:b8:d9:e1:2e:ec:7a:
d5:b6:01:6e:f6:d1:47:d1:71:68:d3:7b:15:c1:a9:
1f:b0:83:6b:9c:f0:96:bc:fe:46:8f:72:7e:97:64:
68:ae:b5:20:30:8a:5c:d4:a1:a0:eb:12:3c:8c:c2:
27:41:24:53:d4:67:cb:43:09:84:85:2c:d9:57:f0:
a4:6f:15:07:f6:b4:35:3c:a6:ac:af:7b:33:7b:82:
9f:bb:a2:78:be:12:89:ae:75:09:5c:ce:4d:1a:fa:
fa:ec:39:66:b1:be:02:88:48:bf:10:cb:3f:49:c9:
47:ed:a1:26:33:59:19:75:73:a8:dc:8a:37:d5:07:
db:da:b5:07:49:00:ee:d7:dc:88:4b:6e:50:2e:85:
01:7b:67:8d:14:ca:f6:dc:f2:4a:0f:38:83:24:11:
3d:cd:e2:83:11:c2:8d:6f:b3:5f:97:4c:76:9e:79:
85:c9:b2:e0:3d:3e:cf:b2:aa:db:35:a8:47:38:5a:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:5B:F8:01:FC:B1:CB:81:E5:A0:CE:A3:A2:B3:57:49:FE:3D:37
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:ac:4e:33:8e:12:d7:4a:8b:55:03:eb:f6:45:c7:f8:dd:
47:81:5f:1a:37:39:d7:cc:62:13:5e:27:7e:e6:a0:4c:ac:6b:
be:6b:d7:75:67:77:15:4d:ce:df:93:ec:88:94:8e:34:20:ef:
fe:52:ba:19:ba:14:58:cc:bd:ab:1a:22:22:fc:16:3f:cb:89:
41:ce:fb:b6:18:11:6a:4d:e7:c4:9c:25:45:f3:2e:5e:91:48:
ac:86:5b:42:f4:15:4b:59:38:48:08:25:91:05:2d:52:55:c5:
45:fe:e7:60:a5:08:07:d0:9b:ca:3d:5c:7d:ad:5a:01:7a:d4:
fc:89:2d:6d:de:c0:a8:1d:db:83:ca:bc:e7:c1:7f:b0:19:c8:
f2:57:43:86:24:07:c0:c4:39:43:67:e2:83:ce:6a:02:82:b9:
1c:9d:2e:c5:b6:a3:2d:7a:98:79:bb:bd:be:29:af:b4:40:10:
1a:91:f8:d0:de:ae:c2:f9:07:b2:e6:42:00:bf:6d:08:aa:07:
e9:26:14:ca:1d:57:28:b6:a7:5f:fa:aa:5e:2d:54:75:71:9d:
97:7d:f2:75:e3:cf:de:ca:af:ba:b0:1f:0c:29:51:b9:5a:9b:
1b:7c:23:a0:55:a7:7a:f4:ef:df:ee:1c:d9:48:84:78:57:8b:
eb:32:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:03 2026 by rpki-client