Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: XxEIh+UAdm2vqmldDEDkJ3M6zhXLsws4h1OTAy9/8QI=
Subject key identifier: 09:A0:39:B6:56:31:FA:05:EA:16:79:18:97:B2:60:57:F7:24:14:E0
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A15BF9FDE6D825CC54C7C4EC6853642098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1800
Signing time: Wed 21 Oct 2026 01:01:12 +0000
Manifest this update: Wed 21 Oct 2026 01:01:12 +0000
Manifest next update: Thu 22 Oct 2026 01:01:12 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: Tg8i/VQBLQW7RoI71Npr6zCQ/K/BXAtJHjEsr9xmqAU=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f9:fd:e6:d8:25:cc:54:c7:c4:ec:68:53:64:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Oct 21 01:01:12 2026 GMT
Not After : Oct 22 01:01:12 2026 GMT
Subject: CN=09a039b65631fa05ea16791897b26057f72414e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:81:97:c1:c0:98:21:d5:26:8f:1f:bd:e4:
78:b3:d1:5a:b9:4b:65:50:a2:ee:3f:4c:f8:09:d1:
37:87:55:2f:e1:1a:04:8b:91:0b:0b:a9:51:d2:d0:
e9:07:41:85:6e:44:c9:2c:88:62:b5:b4:25:2d:48:
ee:fb:c7:eb:ee:8e:54:84:3b:b7:73:bd:92:c4:5f:
20:d1:a2:ec:d1:75:95:78:8c:e9:c6:db:b3:72:7d:
b3:b6:17:69:d8:76:20:d7:8d:c7:10:34:52:62:b1:
f7:0a:15:a6:44:ed:11:17:1e:50:0b:79:df:d3:96:
4a:0a:67:4c:a7:31:e9:57:70:e8:d9:fd:b0:ef:6e:
5d:f8:ef:fb:eb:27:0b:8a:0b:ab:2e:06:75:67:6e:
23:30:c0:13:5f:ae:36:7e:b7:c8:64:24:8f:5d:a0:
ca:53:49:a4:fc:ea:38:dd:7d:c6:a6:9c:20:38:42:
c7:55:3a:0f:59:18:a9:57:c6:89:93:f2:12:b1:24:
79:58:9b:12:c9:0b:9d:24:ba:12:97:41:d0:36:f9:
83:2e:85:9c:16:e0:53:04:ed:32:14:71:ca:63:8e:
e1:cf:76:7e:a2:15:f1:e2:c6:1d:e9:18:a0:ec:9c:
85:1e:9e:87:d0:4c:3b:94:05:37:24:0a:0e:1a:4d:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A0:39:B6:56:31:FA:05:EA:16:79:18:97:B2:60:57:F7:24:14:E0
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:78:cd:ef:65:92:56:88:ce:de:2d:ce:65:ce:71:7b:36:0b:
db:e9:33:bc:8e:42:85:99:73:19:e4:44:8f:43:4e:84:28:8c:
47:af:28:62:80:78:b4:87:46:dd:4e:fa:52:4d:0c:39:d7:46:
46:c9:c3:54:8c:0a:26:18:ee:73:fc:57:7a:30:a8:19:20:11:
40:b9:4d:1a:7f:f7:3c:ca:1e:45:c1:c1:32:b0:43:91:ca:57:
b5:34:04:fe:bd:de:ac:39:3f:ed:85:4e:91:08:48:fd:fd:be:
9c:75:d5:9a:4a:09:1b:b6:43:0e:e8:e2:0a:ae:2a:d0:28:47:
9c:a7:80:9f:ee:0f:e8:00:98:f1:9c:d3:f6:78:14:27:63:02:
78:dd:bf:eb:37:fc:27:d5:0b:97:56:d3:0c:1c:17:3d:f1:d3:
0a:61:c4:e6:c6:84:44:a7:3d:40:fd:b4:94:c3:06:54:5b:4b:
7d:1c:c5:94:59:50:10:7b:21:40:69:8a:e6:85:d8:61:c0:7a:
c1:7e:81:a5:cd:6b:68:cc:0e:e1:83:f7:07:4a:74:c8:88:dc:
31:39:3d:3c:1c:4a:9e:19:e1:ab:e7:a9:90:38:2d:d8:aa:3b:
03:85:a0:32:91:c4:11:4a:c0:fd:8f:ad:d7:9f:e0:4c:54:d2:
b5:ca:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:13:38 2026 by rpki-client