Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: 91tAqbgCVddJeJcXxJuX3rLaETyI5e9KNMRB8tWYdRY=
Subject key identifier: 96:37:D5:11:08:42:AF:68:6F:10:47:32:C9:12:CD:F3:3D:4E:04:14
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01A16CED99BDB701F315582BDD4342C810DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0FED
Signing time: Sat 24 Oct 2026 08:01:13 +0000
Manifest this update: Sat 24 Oct 2026 08:01:13 +0000
Manifest next update: Sun 25 Oct 2026 08:01:13 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: nBNgde6LKUWRwr/gPeR8prxJFqNlS5sUfEaoKEPRMeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:ed:99:bd:b7:01:f3:15:58:2b:dd:43:42:c8:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Oct 24 08:01:13 2026 GMT
Not After : Oct 25 08:01:13 2026 GMT
Subject: CN=9637d5110842af686f104732c912cdf33d4e0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:97:45:98:85:bd:3a:cc:47:46:83:e1:c5:
a7:cd:cc:5a:2e:b3:45:e0:ce:d5:9b:6e:5c:16:d5:
9c:a5:18:5b:2f:10:a1:63:a9:4d:a0:6f:88:74:af:
e1:16:90:07:9e:4d:32:a3:5f:f3:41:1a:84:63:c0:
f0:a1:d7:95:9f:eb:ee:df:e9:bd:a2:3b:fe:a7:78:
d6:5a:40:ba:c3:42:bf:9c:f4:ce:75:6d:61:fb:42:
d8:73:ae:7f:e2:5c:53:0c:92:e5:90:89:5d:5d:23:
90:70:8d:af:ec:6a:65:5d:ec:3d:96:eb:38:01:d5:
59:a7:ee:3b:d3:b4:85:0f:37:86:9b:2c:9e:a0:f4:
a9:8b:86:2b:5e:cf:15:df:5a:e4:49:3a:2c:ec:bc:
26:3b:f8:58:2f:9c:41:ef:ac:9a:05:e4:5e:48:5c:
83:fe:d2:d6:01:c3:fe:95:f4:3c:6e:ce:1e:64:1d:
92:22:48:62:a8:9c:7d:7a:4d:b2:98:24:f0:53:22:
48:50:3f:9f:7e:71:4a:67:41:09:56:e4:9a:3b:be:
2a:1f:43:fa:f2:7e:59:8d:60:ac:96:2c:88:9b:38:
b6:ad:5e:b7:e2:47:69:bb:4c:d1:45:49:f0:d8:04:
4a:7b:34:57:5d:84:64:a3:77:7b:07:d0:9e:c1:b7:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:D5:11:08:42:AF:68:6F:10:47:32:C9:12:CD:F3:3D:4E:04:14
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:c7:1a:75:97:29:15:65:70:d6:7a:60:f7:8d:08:20:cb:
82:bc:25:99:ee:ce:0c:3f:8f:11:4e:ad:c8:ba:d1:5b:61:ce:
20:7c:9e:45:bc:9d:e2:75:71:e6:ca:5a:31:e3:44:ae:83:50:
ca:e8:51:6a:73:2c:31:80:5c:f8:09:1b:51:29:7f:6e:f0:bd:
37:a1:3f:12:5c:60:86:84:69:5f:c1:4b:fc:b0:f2:1c:73:de:
72:88:2c:68:62:1c:03:a3:b4:a8:84:12:25:73:b5:ff:51:2a:
d6:10:2b:16:3d:a0:0f:1e:1c:48:a1:c4:a8:62:85:ae:f2:f6:
12:59:23:0b:a6:e9:8a:1a:a7:50:92:46:e0:b9:fe:81:e2:0e:
57:89:66:a2:92:0a:88:96:bf:be:ec:7e:95:48:2e:a2:41:8e:
33:e0:44:e4:e9:d5:72:c9:07:be:e9:62:17:89:00:39:0b:9b:
98:60:50:7c:e5:3e:5a:56:69:58:c0:76:9e:0d:c2:21:ce:ea:
91:1e:21:ae:da:45:7e:e7:ff:7d:da:73:f3:a7:1e:8b:e7:91:
dd:18:e1:5e:7a:d8:3e:d1:3a:05:ff:a1:5b:15:53:c5:46:14:
4a:78:be:49:e2:e3:50:44:4e:03:c9:c9:9c:00:9b:79:01:56:
d2:15:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:33:23 2026 by rpki-client