Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft
File: j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft (raw, json)
Hash identifier: c8EFsJhggvqm6q0srTiAFlTM0Yn11CWMtrLtwLY6Iqg=
Subject key identifier: C6:5C:EE:F4:EE:48:C2:D1:A8:F1:6F:69:45:89:2C:12:EB:4D:A6:10
Authority key identifier: 8F:8B:BC:A0:4A:DB:7A:9D:05:E4:97:FB:A4:BE:1B:E8:97:2B:AB:92
Certificate issuer: /CN=8f8bbca04adb7a9d05e497fba4be1be8972bab92
Certificate serial: 01A16533BEA69A20FAA0F0D4BC9A72D0D570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft
Manifest number: 43
Signing time: Thu 22 Oct 2026 20:00:52 +0000
Manifest this update: Thu 22 Oct 2026 20:00:52 +0000
Manifest next update: Fri 23 Oct 2026 20:00:52 +0000
Files and hashes: 1: 1-j8jDP3bORh426kMEUjRlIcJjMc.roa (hash: +OdXpb2PPrieyJ1lwa2CS2y8tgLbHR1wIMWCu8Z4P5I=)
2: j4u8oErbep0F5Jf7pL4b6Jcrq5I.crl (hash: RUC7GKbwec81Okwy4K27n9mrwlaHo2f/rD7qAJfqIFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:33:be:a6:9a:20:fa:a0:f0:d4:bc:9a:72:d0:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8bbca04adb7a9d05e497fba4be1be8972bab92
Validity
Not Before: Oct 22 20:00:52 2026 GMT
Not After : Oct 23 20:00:52 2026 GMT
Subject: CN=c65ceef4ee48c2d1a8f16f6945892c12eb4da610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:9c:c5:a9:9f:15:54:6a:b0:e7:ce:98:0d:
5b:c9:cb:99:7c:9c:d4:e9:ac:15:ab:66:52:27:89:
d8:d3:69:aa:86:00:11:ff:d5:b9:76:e9:1b:92:16:
27:bd:24:fa:f1:f8:e6:d5:4c:1f:09:46:4c:bc:ca:
1e:a7:79:14:92:79:f6:bd:7f:ab:5c:f2:74:50:5f:
2e:96:9c:db:dc:7b:bd:bb:1b:cc:8d:c9:87:73:f6:
28:36:bf:5e:29:d3:eb:40:11:b9:3c:54:9a:27:13:
82:a5:9d:6b:3e:d3:19:eb:21:44:ad:1a:17:a4:05:
40:8f:b5:90:e2:fa:72:a0:eb:06:24:6f:32:c1:2e:
c9:20:e1:e7:aa:dc:28:b6:f2:40:d4:ce:7b:0c:04:
19:a8:00:d0:51:96:65:4c:20:55:66:8f:a3:10:48:
cc:8d:a6:88:d6:e1:3a:06:6d:a9:d4:cd:05:d7:19:
43:c4:98:ab:95:ff:f5:2b:d5:c2:8a:4e:2f:ee:b6:
08:cd:0b:0f:00:01:ba:c7:ec:d6:dc:e2:0a:7f:d8:
8f:ac:b0:b7:a6:19:76:4e:9f:db:56:bb:e3:9e:a7:
b8:02:a2:34:99:37:bc:43:10:bf:31:2c:ba:14:61:
fa:f0:d9:9e:d0:ac:7f:7d:47:28:7a:54:03:99:dc:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:EE:F4:EE:48:C2:D1:A8:F1:6F:69:45:89:2C:12:EB:4D:A6:10
X509v3 Authority Key Identifier:
keyid:8F:8B:BC:A0:4A:DB:7A:9D:05:E4:97:FB:A4:BE:1B:E8:97:2B:AB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4u8oErbep0F5Jf7pL4b6Jcrq5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3dd73c-6dfa-4bd6-b44e-03f0c9b30eab/1/j4u8oErbep0F5Jf7pL4b6Jcrq5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:44:e5:c5:8e:19:ac:50:30:07:8d:c1:be:ad:78:31:29:
73:55:7a:10:44:cf:c9:4c:7a:33:86:b3:17:c4:58:e3:44:04:
d7:dc:92:8d:39:2d:2e:d1:f7:ac:fb:dd:45:80:c7:33:17:94:
30:fa:0b:db:3c:da:78:57:94:3f:c4:8f:e9:e3:30:43:3a:8b:
91:73:ba:48:d0:3a:ee:32:ec:19:85:ab:bf:a7:27:f3:9c:56:
5f:58:25:e5:43:29:f9:4b:e6:ce:ed:c8:74:a7:7b:2e:07:5f:
6d:58:98:9b:80:79:01:3c:d8:7f:36:c0:b9:2a:2d:51:87:2c:
e2:09:20:db:9a:5f:63:96:f3:31:33:f5:73:7b:0a:63:e7:cc:
7f:89:4d:a1:de:51:f0:47:dc:eb:eb:73:d5:50:34:c1:65:1d:
f3:c2:fa:f9:fb:e6:c0:b7:3f:98:17:3b:f6:db:64:0d:7d:c7:
90:6e:76:75:8d:19:fc:9c:11:4f:53:bf:2a:61:9e:9c:ab:7f:
a1:38:9e:eb:e1:bf:06:3d:04:48:61:b1:d3:77:b1:2e:20:80:
9a:65:1b:df:57:0d:4a:cc:54:b4:6c:a3:a2:46:b9:36:63:2d:
5d:eb:40:bd:29:05:84:24:bd:1c:1c:10:b2:c4:eb:4b:31:b4:
5e:87:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:43:51 2026 by rpki-client