Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: jz4XmSOTSy3DCOTK40VHa3tpRDpASY5r46RnhFUXa70=
Subject key identifier: 4F:50:BB:3A:CF:CD:EB:B1:ED:B1:39:E9:29:7A:CD:DB:24:84:F1:8C
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01A16533ADBD1D250242981C3ACF91026A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0FE9
Signing time: Thu 22 Oct 2026 20:00:47 +0000
Manifest this update: Thu 22 Oct 2026 20:00:47 +0000
Manifest next update: Fri 23 Oct 2026 20:00:47 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: R4crMFSrGofEoB2kzuxthrVoXIOUYdFZ1Lj79HXcIlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:33:ad:bd:1d:25:02:42:98:1c:3a:cf:91:02:6a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Oct 22 20:00:47 2026 GMT
Not After : Oct 23 20:00:47 2026 GMT
Subject: CN=4f50bb3acfcdebb1edb139e9297acddb2484f18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:d2:1e:a1:ae:d5:d0:c4:5c:ff:55:d4:84:
d1:a4:8e:d1:e3:84:57:ef:1d:56:40:eb:d6:f6:61:
34:d3:c0:e0:44:b6:86:d9:6a:f1:a8:ef:cd:94:60:
79:04:2e:25:e9:22:1e:c6:f7:ef:5b:9c:cc:9e:01:
e4:0a:67:15:ae:c4:89:80:f3:5a:0f:52:2d:e5:20:
61:25:e6:d6:03:13:7e:44:d0:ae:3a:56:81:64:28:
29:21:54:63:9e:d6:8d:fc:b8:a8:a6:30:73:0d:7d:
8c:a4:25:f9:c9:7e:00:c4:bc:6a:27:4b:6b:7a:84:
86:91:81:9b:b4:2a:39:9b:64:3f:0a:82:c6:49:a5:
c6:6c:8f:79:f9:d8:29:09:5d:61:57:a2:51:ad:6e:
c9:c5:42:08:cd:30:5e:96:1d:e1:e1:be:45:b1:e2:
72:69:2d:68:ea:f8:f4:9e:ba:1f:fc:4a:78:79:db:
6f:01:1a:23:a1:8b:95:4e:90:0f:38:22:c8:57:a5:
b3:a7:c1:61:18:90:e7:e1:64:83:86:e6:60:dc:9e:
20:9f:a8:c0:c3:79:a0:cb:40:44:a8:50:6c:39:6f:
0e:3f:33:80:80:d6:3c:8e:85:5a:11:a4:a8:b0:a0:
76:12:f1:88:81:05:5f:f3:9d:0b:55:17:21:e7:0c:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:BB:3A:CF:CD:EB:B1:ED:B1:39:E9:29:7A:CD:DB:24:84:F1:8C
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:14:f7:0b:f0:29:b0:90:94:9c:6f:7e:b0:1e:98:01:28:
1a:51:cb:ff:b7:98:66:93:86:75:6b:46:c5:9c:f8:fb:58:42:
a0:80:64:31:1b:7e:9b:3f:04:f6:fc:10:52:cb:23:d9:94:7b:
60:53:34:c9:c4:4c:e9:41:a7:0c:84:8c:55:ba:42:d1:48:a2:
54:5b:58:c5:6e:83:16:02:e0:0f:a0:dc:ff:a7:7f:00:ce:72:
f5:a5:53:ab:f4:de:66:fb:3a:b6:c5:18:2f:cb:b7:dd:1a:a1:
c3:26:32:7d:c6:bf:8d:b3:09:42:79:72:0b:ad:a3:42:e6:2f:
bf:69:7b:12:80:18:09:c4:d7:44:8c:e4:1c:08:35:59:83:62:
93:0a:15:cc:e4:b6:01:ad:93:73:53:db:47:d8:b6:d1:d8:cb:
e5:c7:52:d8:8e:79:11:d6:e6:3a:06:64:62:2f:42:35:20:62:
99:b1:d2:19:a2:04:d4:42:aa:27:f9:ff:0d:52:d9:dc:76:46:
91:84:b8:20:64:16:18:89:be:1d:bf:07:82:ea:fc:d5:f2:a2:
d2:5b:99:b7:91:9b:5e:03:5f:36:ee:d5:a0:71:8b:e8:6d:f6:
6e:f7:29:d0:ef:99:58:30:48:eb:32:0d:3d:8e:93:e4:fd:29:
cd:1b:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:59 2026 by rpki-client