Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File: jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier: AClOklXbma4DbfgIco80OdM9KYemd8GX5a8X4KMHXcY=
Subject key identifier: B3:82:26:79:03:08:8A:15:A9:AB:B5:65:FD:C7:56:8A:AC:B6:60:29
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer: /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial: 01A10B81E6365A712A51C54906EB463CD65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number: 1A88
Signing time: Mon 05 Oct 2026 10:00:24 +0000
Manifest this update: Mon 05 Oct 2026 10:00:24 +0000
Manifest next update: Tue 06 Oct 2026 10:00:24 +0000
Files and hashes: 1: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (hash: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY=)
2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: 3THYmC+0sVwMW9wGIQEonvvh3S1CEJquJ9knNjPsafo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:81:e6:36:5a:71:2a:51:c5:49:06:eb:46:3c:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Validity
Not Before: Oct 5 10:00:24 2026 GMT
Not After : Oct 6 10:00:24 2026 GMT
Subject: CN=b382267903088a15a9abb565fdc7568aacb66029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:b8:ea:80:f6:6c:26:c4:75:58:3d:b1:fe:
97:6f:de:d5:81:5d:13:91:26:01:89:53:14:27:41:
f3:ae:82:ea:c7:ed:13:a0:b5:d7:f3:ce:4b:2d:d1:
92:28:65:c9:f5:70:ed:48:2c:6f:e1:ad:93:7b:a3:
75:49:d9:14:29:34:bf:3a:39:55:6a:c6:ca:59:8f:
9f:01:c3:29:24:fc:fe:43:e5:a3:ba:9e:0a:ef:6d:
17:ca:4f:8a:3e:d6:38:f5:31:b5:d8:04:8a:f1:73:
fd:b4:86:ae:1f:4c:e4:e5:c9:f7:76:98:f0:b7:56:
4e:7e:36:b9:28:88:23:15:b4:12:cf:91:72:ab:9e:
f0:78:67:8b:59:d5:a5:4c:95:e1:17:90:cd:f9:65:
98:7e:e2:ff:5d:3f:3f:f7:04:13:59:3e:28:87:b1:
cb:0f:c3:17:9e:e4:4a:a9:4b:ce:c9:a0:f6:ab:a6:
73:ea:2f:05:83:aa:4e:00:51:17:31:e1:56:ba:3b:
b3:fd:a9:62:b6:7e:7f:e9:0f:d0:64:5d:32:5e:0d:
50:02:4d:be:65:8b:ba:f9:c8:42:56:81:a5:38:2f:
9c:e7:04:71:ee:4e:97:9d:63:07:bb:a4:3a:6e:f8:
b4:f8:d1:b7:13:59:6b:0a:2d:35:b4:0c:02:2f:77:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:26:79:03:08:8A:15:A9:AB:B5:65:FD:C7:56:8A:AC:B6:60:29
X509v3 Authority Key Identifier:
keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3a:17:a4:71:ab:cc:db:d3:99:43:7c:50:11:f2:61:05:5e:
71:ab:61:5b:cc:35:fc:ac:6a:95:4d:a2:eb:22:7a:2d:a2:2c:
e3:42:a9:ff:39:3d:da:b3:15:29:0b:18:44:e1:1e:fd:2f:83:
ca:cd:ef:9b:9b:3f:ff:4b:b2:a2:1d:07:98:07:ea:64:cb:20:
34:ac:fb:15:3c:38:64:8e:13:0c:2d:3e:24:82:78:2b:59:e9:
20:ae:93:50:01:4e:0b:c7:73:f6:84:57:a4:40:46:76:bb:61:
ad:37:b2:49:b4:af:6a:fa:5b:ba:85:5b:64:2a:2d:fd:bb:6c:
46:41:38:17:a5:ef:0a:f6:97:96:1a:b2:8f:e7:d6:e6:b2:c9:
30:58:34:4b:8d:3a:d5:e9:f3:5b:f5:36:0f:4d:d6:0e:07:2c:
07:ac:4d:d2:c3:63:95:9c:90:3d:68:b4:0f:89:a8:8e:e0:24:
dd:20:f2:98:5c:3b:5a:3a:63:35:02:45:38:6f:d7:d2:0b:c7:
70:75:12:03:5b:10:cc:3e:16:9e:dd:a6:91:06:44:e0:93:94:
31:71:8c:05:c0:0d:42:23:64:a5:8d:6f:d7:aa:5d:73:e2:d2:
33:6f:a5:e2:18:d3:20:41:f4:8c:a8:3e:b9:6a:fa:aa:d7:12:
e9:3d:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:54:08 2026 by rpki-client