
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: VUlHXDn3rh6HqdMXhqEYaGi+ov0I7VKIENX7+WHxrYY=
Subject key identifier: FE:65:9C:88:E1:A0:FB:B7:B3:81:3E:69:D6:95:E2:8D:97:51:49:A7
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 01A08DC4C35F77DB7456274B81E372EE7BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 1A48
Signing time: Fri 11 Sep 2026 00:01:17 +0000
Manifest this update: Fri 11 Sep 2026 00:01:17 +0000
Manifest next update: Sat 12 Sep 2026 00:01:17 +0000
Files and hashes: 1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=)
2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=)
3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: QdEqV9HrMeBONehUVEijzTblcCEW1LHQU4JPCH7HAB4=)
4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:c3:5f:77:db:74:56:27:4b:81:e3:72:ee:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Sep 11 00:01:17 2026 GMT
Not After : Sep 12 00:01:17 2026 GMT
Subject: CN=fe659c88e1a0fbb7b3813e69d695e28d975149a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:e8:bf:65:cb:cb:56:c8:af:c0:93:92:8c:
93:98:9e:eb:f8:11:fb:b5:b1:a6:51:9c:d7:c7:0d:
c0:c8:49:7e:f2:ad:4b:7f:7c:2d:fa:ca:3a:df:20:
e4:53:d4:b4:ca:b5:4a:4d:8d:28:f1:7b:ed:ea:7b:
f5:15:36:10:48:f7:bf:74:d0:3c:db:57:f2:d8:32:
91:03:cf:91:09:5c:a7:85:de:e6:ba:47:bc:06:4a:
fe:1e:44:f1:dd:17:78:1f:ef:01:0f:f3:86:9d:8b:
58:86:b7:be:22:1c:ea:9f:71:26:94:00:9e:02:54:
48:14:cf:74:4b:56:bd:5b:bb:77:30:40:a1:24:e7:
d3:d2:ef:76:62:75:b1:2b:d1:6d:57:5c:a5:b2:11:
61:81:34:67:65:64:e2:0d:d3:b5:d7:58:db:e7:f4:
3f:0a:70:30:31:41:24:09:d5:a6:d4:0a:3f:90:60:
81:99:5d:5d:e6:a8:f9:22:a6:82:95:54:06:8e:eb:
55:b0:71:d8:c6:6d:1e:55:f4:ce:4e:8e:41:5b:4b:
cf:ea:63:4c:d2:5c:69:7b:03:66:42:4f:30:0a:9c:
a9:0b:cd:df:71:26:a6:c3:2c:e1:22:72:69:91:84:
b2:17:ff:ff:ea:11:47:73:84:0f:ea:b4:f4:07:00:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:65:9C:88:E1:A0:FB:B7:B3:81:3E:69:D6:95:E2:8D:97:51:49:A7
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:42:0c:f0:98:c0:8c:ed:a7:6c:c1:13:94:f3:36:9a:10:
f7:da:50:4b:bf:d5:98:b0:26:93:01:28:81:04:f5:3a:ec:0c:
c3:e2:63:1b:01:62:ff:20:c3:3d:e2:ce:dd:88:99:a4:05:fd:
d2:be:43:6d:09:1b:7b:c0:c4:19:40:c1:bf:c3:09:bd:aa:3f:
ef:d7:1c:74:86:cd:7f:ce:80:63:78:a5:6a:be:90:03:97:26:
7b:2f:4a:1e:ab:42:68:d2:21:f4:9e:c6:3b:73:63:4f:70:cb:
63:71:90:6e:3a:96:88:a4:cb:0d:bb:b9:78:a9:ea:dc:93:2c:
ea:75:d8:62:0f:fb:fa:df:9d:0b:1a:97:dd:4c:1c:54:bd:41:
c6:69:37:e8:ae:65:f1:f3:0c:29:b1:55:b7:b3:12:ce:65:26:
bc:69:e8:c5:09:b7:4f:d0:24:34:e5:fb:f8:49:ca:28:b8:16:
0c:43:7c:eb:08:30:44:1d:81:7a:d3:97:7d:d7:9c:f9:b1:7f:
42:79:eb:25:ad:95:c1:58:f6:2e:71:b4:ab:6a:ea:40:c5:16:
15:20:96:ab:0b:c7:2e:9b:3a:32:d0:a4:d4:ce:d5:d0:3b:df:
62:4c:f3:97:3c:24:e9:70:64:d5:9d:ba:b2:83:e3:f6:c5:ef:
fa:e3:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:58:32 2026 by rpki-client