Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
File: _jecWObPq6RMIIdrfVmMCFBLUws.mft (raw, json)
Hash identifier: M85vTu5iG7g59AsgNLcYQEwHpzAlGbbqZPOWWl3ekIE=
Subject key identifier: FF:D5:5E:FC:A9:B6:DD:EE:D0:60:FE:E7:8B:B1:A5:0F:59:1A:5A:B5
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 01A08C7B2244A1AE25F2A8EE06EB77C34392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:14 +0000
Manifest this update: Thu 10 Sep 2026 18:01:14 +0000
Manifest next update: Fri 11 Sep 2026 18:01:14 +0000
Files and hashes: 1: 1f3chHH8Vzxj3ocJFNDQRkHByxM.roa (hash: Yj5a6Anj2XGpmwiiCO9eJxIVZQ77+YUsqu5JfZN+lyo=)
2: 3M6LA-oo_M8iW0WHMWzqNuawrXI.roa (hash: mbA8j0JMCwuQFEr3+eq0m532/7RxJbUAb2My/6/L17o=)
3: DC6F0mfYavqmIkVWp9CoS3ORJPY.roa (hash: H/N8+lVCJsVtR4s7AZv6JX/uXYchHAlYepuRHlvMSmQ=)
4: DqGXOOpUBDyIo6-xMv0lfI01neI.roa (hash: cY+avgvPvcXEHIu9Wj7BmeU7KYCi5ZbN7lhO24Q9+hg=)
5: _jecWObPq6RMIIdrfVmMCFBLUws.crl (hash: f9i74YhhEXKE/IgimkRo4JjDGfy6c5ryxnD8x6cDINs=)
6: bIqQRYp65ffuhEfiWgURnnYmOLA.roa (hash: 2t1dhMXRId6Ep0qRGdrx3Oonk4YhaxQhU/sq1I6fhLA=)
7: ixHLgv4HQ_wAiB8H1aG1cnHYC0U.roa (hash: Q6evZsXBO9hhV+6BK2xuyToyVzZwGNdUppGvsisAOWo=)
8: mQgZ_aeQizevYwNKMCfXAMQNacA.roa (hash: zBq8HYNkmYsx3l9a089U7aq9li/mu5uJZF8m8sHR/3U=)
9: wsLBMp1xRJgr69K7X57Is-5d0GE.roa (hash: mpGX3UZzDQtu714gFa7DML2FgzYlJk2cK8dfIFZYaDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:22:44:a1:ae:25:f2:a8:ee:06:eb:77:c3:43:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Sep 10 18:01:14 2026 GMT
Not After : Sep 11 18:01:14 2026 GMT
Subject: CN=ffd55efca9b6ddeed060fee78bb1a50f591a5ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:b8:f9:d6:7a:57:13:f0:94:7c:e1:20:4e:
1c:77:23:71:bc:ef:0e:88:71:35:ce:8e:27:87:e8:
19:97:b8:4f:29:c7:e0:8b:26:8f:f6:60:d3:2f:a3:
5a:5f:20:52:41:5d:e9:73:27:22:5c:a8:0a:e1:e2:
4d:75:2b:42:63:21:fe:f6:1b:3d:8a:be:6e:7a:a6:
c7:ae:b7:0f:a6:ee:9d:b1:47:16:a8:8e:61:92:66:
12:94:71:ee:11:d8:da:72:b0:fa:1a:ff:b7:ef:d6:
c9:f1:71:d3:63:53:e5:0c:a2:b7:13:9c:4d:75:2b:
cb:ca:a7:4f:60:99:fc:5e:e3:20:db:e2:12:4c:4b:
77:e8:44:0a:d7:4d:78:89:04:ea:35:24:58:75:52:
32:54:ca:3b:9e:5b:6e:86:9a:07:8d:ea:58:3a:eb:
ee:df:e6:d6:94:68:0a:cc:fa:af:30:34:bb:30:72:
b4:e3:0d:5e:4c:ac:ea:d1:27:2c:cc:a3:c4:04:18:
a7:69:51:bd:61:a4:b7:e7:76:a1:2a:08:4e:f3:2b:
25:34:2c:2a:9b:c9:07:79:d8:1e:b1:39:5a:6e:27:
a6:9d:ad:f6:69:74:b5:aa:ac:a1:7a:3a:c9:45:c7:
f0:62:f7:6a:11:7b:d2:e0:8c:85:0b:00:fb:56:ef:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:5E:FC:A9:B6:DD:EE:D0:60:FE:E7:8B:B1:A5:0F:59:1A:5A:B5
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d8:90:86:91:6b:c5:a3:5e:16:d7:32:83:94:58:1f:99:92:
77:df:a9:84:34:11:43:33:54:60:fb:c7:57:69:de:a5:16:da:
d2:b5:55:7f:f8:d0:00:48:87:ea:ce:61:de:ba:5d:56:9f:86:
b7:1c:a6:78:7c:07:a4:a2:00:81:6d:0c:5a:e5:2f:41:13:fc:
d8:a0:90:6e:df:8e:0a:c0:32:8e:b6:76:43:55:5f:2e:73:80:
eb:08:44:20:13:ce:f4:da:6c:ef:37:cd:b6:59:03:23:8a:e8:
21:ae:88:f9:08:32:10:aa:44:a7:3a:92:4e:12:12:53:6b:62:
b7:ab:72:2b:71:e0:27:96:22:f8:a6:d4:00:4b:72:4b:54:9d:
17:b8:83:58:6a:af:a2:b3:23:fb:47:df:ad:42:a4:bc:d8:60:
5d:1e:9a:de:5f:a7:d0:25:3e:52:8c:69:a6:af:0f:fa:1e:f0:
31:2c:ff:b7:d8:f1:71:21:cb:f5:d6:b7:d2:cc:f8:9f:cb:4c:
37:6f:dd:ab:24:68:e6:59:12:7a:42:90:ec:b6:d9:35:33:df:
53:6d:86:41:11:7e:30:ce:b5:41:5d:90:de:8b:47:cf:cd:be:
f9:05:17:53:64:1d:0a:90:6f:cb:49:40:f6:ff:21:b4:54:d4:
84:d4:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:28 2026 by rpki-client