Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: lnpou/IOK8Gpp35uRt3TwRfHLZH2NjDha5objVvgOrc=
Subject key identifier: BF:FD:85:8A:6B:8A:DD:27:04:50:85:24:84:0B:E0:BF:C8:7B:CB:3C
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 01A0B72DCC2FE7ACC8EF035FF1FF919C70B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 1140
Signing time: Sat 19 Sep 2026 01:00:26 +0000
Manifest this update: Sat 19 Sep 2026 01:00:26 +0000
Manifest next update: Sun 20 Sep 2026 01:00:26 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: Pcdt7sko1nyqZc8dhHNL2wDZiKRLNBtKRM9ef3yVB4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:2d:cc:2f:e7:ac:c8:ef:03:5f:f1:ff:91:9c:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Sep 19 01:00:26 2026 GMT
Not After : Sep 20 01:00:26 2026 GMT
Subject: CN=bffd858a6b8add2704508524840be0bfc87bcb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:ba:fc:8e:b2:79:af:44:03:d7:3e:28:49:
7a:ae:a5:34:5f:18:da:ac:4a:e7:b6:c1:6f:0a:10:
30:cd:00:21:92:75:d7:ff:df:d4:e7:74:30:98:a7:
c6:b4:e2:3b:4d:03:c2:21:ec:2c:da:0d:7c:3d:84:
f8:4f:86:26:6f:78:06:48:c9:4a:9d:06:41:fd:40:
d7:63:15:2b:e9:90:48:e3:a3:69:fc:cc:de:11:15:
9d:31:d7:e2:6b:6a:8b:45:d0:fe:ab:70:1c:5d:d5:
e5:36:62:b1:45:06:57:60:f0:3b:d9:cf:70:cb:27:
74:b1:da:1f:39:c9:54:e7:cb:3b:ce:cf:68:cc:3f:
18:d2:07:60:3c:3d:76:10:73:17:42:2a:c2:2b:17:
0e:c8:7a:cf:53:05:52:3d:49:58:2a:d4:10:5c:49:
a2:89:cc:6a:93:83:fc:83:ca:4e:58:fa:31:f5:da:
cd:a4:d7:44:b3:65:b7:3f:fc:8d:a0:ef:6f:75:26:
2a:6b:db:7b:21:14:6d:ae:4d:dd:5f:df:f9:24:b8:
44:b8:07:06:ad:11:13:f1:b3:d5:0e:2f:1a:31:d1:
d1:f0:36:d5:66:da:ca:66:1c:ff:85:77:d4:1c:30:
2c:3f:cf:59:b2:d9:65:33:9d:7b:48:d7:37:c2:d0:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:85:8A:6B:8A:DD:27:04:50:85:24:84:0B:E0:BF:C8:7B:CB:3C
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:12:85:93:bf:d8:f4:a7:dc:90:84:f1:fa:1b:30:6b:ff:
e7:07:14:d7:a2:91:d8:29:2c:a1:93:94:4f:47:9d:4c:dd:4f:
a8:aa:51:11:93:eb:3e:29:b6:6a:a8:38:93:b7:18:f0:d7:8a:
b5:47:ff:c5:b5:65:76:f7:ef:a2:10:45:22:85:11:0f:2c:f3:
a7:19:0c:6f:5c:ec:6d:08:3f:09:91:59:79:0a:d3:8b:78:34:
ad:4f:82:13:6b:42:5d:5e:10:59:ee:ed:e3:ef:5d:9f:12:e8:
a5:27:3f:5d:c8:43:ff:c5:83:fe:bb:d3:0e:af:9f:74:67:83:
fb:22:93:76:04:fe:cb:10:7b:0c:c7:b2:38:ba:68:76:0b:9e:
64:4e:b5:17:a0:50:07:1a:3c:c2:c1:36:34:50:8e:bd:90:ff:
fc:91:74:25:c7:a2:bb:81:91:37:11:51:7e:96:ca:56:89:56:
db:98:6d:49:f3:b8:c9:2b:2f:90:01:cc:ee:d5:b1:7a:ab:50:
57:f1:bf:d2:61:e6:4a:ff:3e:9b:f6:b6:ae:af:80:28:dd:c0:
50:b2:3d:27:92:f1:3a:7b:42:7f:4a:45:7c:40:8c:48:bf:1a:
a8:b8:47:43:76:c0:27:ea:e7:1c:ed:93:b8:f5:98:2f:4a:4e:
ef:ef:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:57 2026 by rpki-client