Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: +lIPlttiqsY+d4kVlDt1MyknutJn/9BXgdgU301Hc40=
Subject key identifier: 20:42:A3:D3:DE:BD:77:90:46:7A:76:18:77:5A:73:5C:EA:73:33:14
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01A18A8A144E588CB3FECF1816C1A1F9B2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 19CD
Signing time: Fri 30 Oct 2026 02:01:07 +0000
Manifest this update: Fri 30 Oct 2026 02:01:07 +0000
Manifest next update: Sat 31 Oct 2026 02:01:07 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: vv8v8N1S6YAOukRXDFVXh7NX3mSwIVCQAPh5+irFvuo=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:8a:14:4e:58:8c:b3:fe:cf:18:16:c1:a1:f9:b2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Oct 30 02:01:07 2026 GMT
Not After : Oct 31 02:01:07 2026 GMT
Subject: CN=2042a3d3debd7790467a7618775a735cea733314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:22:97:9d:79:58:14:fa:3b:38:8b:0c:59:
bd:41:dc:36:54:46:c9:d0:77:b9:ac:be:c0:ae:cd:
29:66:64:b3:a5:23:17:87:cc:40:ff:01:94:ce:13:
23:45:76:6b:83:ae:02:1a:5f:12:c7:08:9c:2d:b6:
6a:96:dd:1a:b4:99:45:2a:16:86:49:e0:47:26:dd:
9f:0b:c7:04:e6:f7:0d:0b:42:b9:da:cb:0e:e0:f6:
e8:9e:43:be:56:ab:10:1f:e7:aa:3f:f6:78:42:01:
2f:66:57:e6:8b:52:37:c3:96:cb:15:b2:f8:0f:4f:
dd:d8:9b:d4:a9:63:3c:d9:9a:f8:fc:ec:ea:d0:1d:
dc:65:68:fc:c8:52:93:fa:22:74:a8:1b:36:ad:af:
df:fc:5b:e3:a3:8a:a7:9e:e1:db:0e:5d:7d:d2:e1:
28:8c:bf:42:01:49:29:54:dc:30:60:39:cd:38:47:
c5:d7:a4:d4:a1:2b:15:93:da:90:45:1f:a8:77:af:
29:7c:b4:0a:d1:de:a6:bc:d3:84:b1:39:fe:92:4d:
84:83:b2:9c:d8:5a:5c:0b:df:a6:61:06:d8:f4:a0:
b4:0f:84:91:e5:a0:9c:f8:99:96:e8:76:a2:81:68:
53:2d:1d:ad:5a:7a:f2:28:ef:6b:61:8f:be:37:29:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:A3:D3:DE:BD:77:90:46:7A:76:18:77:5A:73:5C:EA:73:33:14
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:de:b4:07:33:8e:73:3f:07:58:6a:3e:37:4d:27:67:c5:
7f:63:2d:9d:d1:55:4f:af:c6:21:92:25:17:4a:c7:19:bd:4b:
62:c6:4a:3a:bc:00:fe:5f:f2:16:e7:ad:1f:02:69:42:f0:a0:
b1:e1:8a:73:f2:06:ab:6f:09:f6:e5:bf:f5:f4:43:74:cb:25:
83:6d:af:9e:45:dd:a7:af:ae:ba:b7:ba:8c:9c:42:d6:aa:bd:
cc:44:cc:3d:4d:ab:7c:08:90:3e:ca:27:16:fe:b5:ea:98:a8:
e7:d5:10:f4:9d:1c:d9:34:d4:40:72:65:09:28:da:23:c2:44:
26:0e:12:be:55:3c:1d:25:07:17:9f:91:09:e9:0f:e1:31:67:
8b:c3:36:c1:df:78:08:b7:08:dc:cf:9e:96:6d:62:4d:47:c2:
d7:7e:ed:8a:66:93:fd:75:4e:0f:fd:e6:e9:b6:e5:a8:13:ab:
98:31:94:8b:90:5e:d8:68:f8:c1:a9:3b:a5:95:c9:d4:fe:ab:
00:45:e5:00:33:26:ca:a4:a3:7b:bc:0a:79:b7:84:d2:fd:89:
c5:12:f0:93:54:1e:72:7b:a5:96:2b:3f:f7:3f:ae:1a:3a:04:
3b:d8:a6:bb:e4:09:e0:63:67:e8:6f:cb:3f:32:e4:51:4f:e1:
4e:5f:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 09:55:24 2026 by rpki-client