Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: ojD+9E8NZbTgr7L8/fqmPsFl+dgQh7Wz9Tf2eiAemsk=
Subject key identifier: 6D:9E:B2:60:21:78:5F:3E:09:8B:28:39:07:80:AF:48:AC:46:26:0D
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01A08B9F3874D8AE219778FEB0C3D2DAC1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1949
Signing time: Thu 10 Sep 2026 14:01:02 +0000
Manifest this update: Thu 10 Sep 2026 14:01:02 +0000
Manifest next update: Fri 11 Sep 2026 14:01:02 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: z/0LbNCY4BiJuq+j9xx8SzknYMTLQ3kjWnv69CVpOrs=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:38:74:d8:ae:21:97:78:fe:b0:c3:d2:da:c1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Sep 10 14:01:02 2026 GMT
Not After : Sep 11 14:01:02 2026 GMT
Subject: CN=6d9eb26021785f3e098b28390780af48ac46260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:67:70:44:83:6d:d5:47:bd:fa:54:13:15:
81:f9:f1:0b:dd:95:b6:a0:5e:64:47:c0:40:b9:2c:
95:44:2e:a6:e4:a2:d8:68:ad:82:bd:ec:07:e3:88:
f0:2b:a6:36:05:d9:5c:ba:24:b2:19:1d:e2:3a:c6:
68:31:e7:88:06:cb:e4:eb:c8:7a:e8:58:ee:86:ef:
a5:31:3a:87:e0:30:8e:6b:38:13:94:e1:48:ea:44:
2e:79:74:6a:d2:92:b6:b0:6b:5b:1d:66:dd:26:eb:
02:53:d0:dd:9c:a5:3a:f1:8e:65:ec:6a:ee:56:b4:
3f:f2:47:72:88:23:19:09:57:ff:61:77:dc:bd:e9:
5d:08:db:81:3d:fa:57:f6:73:db:2b:99:63:a9:7f:
88:c7:a6:ba:17:7b:37:de:ae:29:81:bb:7e:39:96:
dd:fb:28:c1:0a:b5:62:fb:83:f6:e5:4c:6c:b8:d2:
d0:75:e3:91:5b:25:77:65:81:dd:81:78:bb:c3:1a:
d0:8f:08:3d:c7:5a:31:87:02:97:79:fb:0b:da:41:
28:4c:ce:5c:00:bb:3e:37:a2:a7:ac:53:4e:cd:60:
c8:20:4b:bc:34:54:62:30:a0:74:1b:fa:6a:e5:cb:
09:37:05:98:3d:3b:0c:91:ce:1f:96:fb:f8:c1:c8:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9E:B2:60:21:78:5F:3E:09:8B:28:39:07:80:AF:48:AC:46:26:0D
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:72:f8:68:72:01:b1:99:1a:65:3b:82:ca:bc:5c:85:47:
80:12:8b:97:14:5f:dd:64:68:ea:d9:31:cc:af:4f:d0:f1:66:
d0:b4:7a:a9:ae:81:6a:56:85:ad:e0:ec:0a:72:cc:41:02:8e:
3c:c2:71:e8:c9:ed:55:9e:14:5d:82:11:9d:83:25:5c:fd:72:
2e:45:00:fc:dd:0e:83:61:e9:d6:1a:2b:49:96:6d:bf:7d:bf:
06:71:43:52:a5:a6:1b:a1:d8:96:58:36:73:da:e2:8a:e6:32:
f4:13:40:29:97:d5:f8:bf:8a:12:d7:14:4d:a6:94:ac:ca:03:
9d:80:f3:1e:65:18:59:eb:2d:76:66:9b:aa:83:af:6d:3f:16:
49:44:13:65:1c:8e:98:8e:45:35:3e:d9:74:82:14:88:5a:98:
7e:96:6e:d9:06:26:cd:61:62:e0:3a:73:30:a2:27:25:8d:6e:
46:77:7a:50:da:05:99:64:fe:4c:57:e4:a0:61:87:bc:44:40:
47:97:43:5d:d5:e3:2e:06:10:68:dd:8c:8f:bd:f6:ff:7f:da:
75:f3:33:0a:03:06:b5:06:66:56:b0:3f:b3:ad:3f:ee:9e:fc:
82:92:6c:53:60:84:af:41:43:6b:ba:ec:0c:29:58:64:18:0e:
41:ce:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:16 2026 by rpki-client