Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: WQkUgiNEFod82OIO7jAKhIf9UmHzwvpCoNtt/sTvmwE=
Subject key identifier: 9B:B4:AB:F5:7D:6C:BB:CD:12:69:95:F8:2E:22:3C:D3:07:53:7A:38
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 01A1479778BFAE70506E8F055DFC6D553A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 02:01:11 +0000
Manifest this update: Sat 17 Oct 2026 02:01:11 +0000
Manifest next update: Sun 18 Oct 2026 02:01:11 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: JD2LMbwZu+laE8ma04iiVE7yhOAOyrxOfMh/R0WGXTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:78:bf:ae:70:50:6e:8f:05:5d:fc:6d:55:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Oct 17 02:01:11 2026 GMT
Not After : Oct 18 02:01:11 2026 GMT
Subject: CN=9bb4abf57d6cbbcd126995f82e223cd307537a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:30:40:c4:66:0d:95:17:c8:df:7f:ba:e8:
b5:9b:3a:24:07:cf:87:d0:6c:55:bc:d9:3a:cb:bc:
16:18:aa:ea:63:7e:bf:79:8e:3f:25:6f:dc:42:5f:
bd:f2:6f:66:73:4b:fc:7c:ba:b4:5c:01:a9:d3:0c:
0a:33:50:ad:6d:a6:e9:fc:e5:5e:d3:92:89:54:2f:
4b:0c:a2:47:87:29:85:63:f4:b1:6a:08:2f:71:9a:
16:c1:55:c4:b0:af:a8:70:df:c9:b5:50:e3:00:ff:
a6:a7:1c:bd:29:1f:78:80:9c:2f:b6:37:1a:09:dc:
8a:4f:6f:53:aa:31:37:58:79:6c:20:be:76:65:72:
af:9f:7a:65:0d:ae:b7:04:dd:7a:56:c9:47:90:a5:
25:01:3c:65:b9:fd:ed:3a:28:fc:0b:8e:b1:c7:d2:
ba:81:e5:7b:cb:14:b6:6d:98:49:4c:c3:f3:85:d9:
48:e7:5d:99:80:f1:b1:d1:74:6a:e5:fe:17:25:dd:
0a:2b:6b:5e:af:d1:8a:34:e1:6b:0d:b9:f7:46:6b:
f4:60:df:0a:8c:52:72:99:77:66:1f:e1:49:8a:83:
ba:71:68:da:c2:8e:8f:f6:b8:40:93:c1:65:29:65:
72:e8:e7:72:b9:be:68:2e:f4:17:90:c4:51:04:37:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:AB:F5:7D:6C:BB:CD:12:69:95:F8:2E:22:3C:D3:07:53:7A:38
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9d:fa:79:5c:d0:30:00:8d:c1:74:3a:6b:cd:e7:c9:4a:7a:
ad:e3:81:14:a5:1e:f0:6c:79:5d:b0:98:c7:45:00:5c:9a:38:
44:00:a0:65:b1:68:93:7d:fa:9b:22:6a:b5:ce:f3:ef:eb:ab:
66:1f:a4:f0:15:c0:88:f6:61:fa:0d:2a:b5:ec:d3:15:17:3d:
be:aa:5a:29:56:99:c4:c1:8d:5c:94:c5:bf:37:27:e6:48:5d:
7b:80:ad:ce:71:e8:4e:81:7b:fb:d1:c7:45:a2:81:1f:cb:a8:
3f:25:40:6a:97:1b:47:c5:cd:0b:a1:44:30:70:19:0a:06:28:
50:5d:87:2f:e9:8c:0e:5d:bc:ce:02:40:e1:58:71:79:f1:c5:
d2:d7:a7:e2:97:39:34:30:9a:d1:62:83:d5:ae:bf:6c:b5:7a:
3a:29:63:f3:60:8d:f9:00:b3:0b:49:1c:48:aa:a5:37:ea:94:
23:93:57:5f:cc:dc:ef:da:01:96:c8:95:c2:de:06:c3:02:9f:
70:4f:77:7f:b9:2e:8a:b4:17:8a:2a:20:09:08:ec:c9:94:4f:
38:27:d3:47:12:73:fc:3c:eb:ff:83:03:5a:3e:77:96:de:04:
96:5b:ad:80:93:3e:55:09:37:95:45:98:9b:c0:b2:51:c5:6e:
2e:e2:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:50 2026 by rpki-client