Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: WPFXwblLrXPyOtah58p5Phc9G7yw7qp/mjFNj1wREm4=
Subject key identifier: 86:17:7E:B9:DC:E9:E3:1A:9C:E5:DA:D6:7D:2C:62:7D:8F:09:66:92
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 01A06E70A1E822D27BE0BAA61D0191993684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 0D2A
Signing time: Fri 04 Sep 2026 22:01:10 +0000
Manifest this update: Fri 04 Sep 2026 22:01:10 +0000
Manifest next update: Sat 05 Sep 2026 22:01:10 +0000
Files and hashes: 1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: AjXKz8IKdSv6xYJ9Tgyvx1Wz0YxOTfYQwqw/fXNr/oQ=)
2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:a1:e8:22:d2:7b:e0:ba:a6:1d:01:91:99:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Sep 4 22:01:10 2026 GMT
Not After : Sep 5 22:01:10 2026 GMT
Subject: CN=86177eb9dce9e31a9ce5dad67d2c627d8f096692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:62:df:34:5b:be:af:7c:22:65:a4:f6:da:
fc:af:e5:04:42:42:ba:f4:27:db:38:75:73:17:64:
3d:31:5b:e9:ce:a9:56:49:5e:ec:ec:05:ae:34:03:
78:f2:6b:0e:52:65:b5:7b:cc:48:78:2c:00:1f:e8:
e5:9b:66:63:b5:21:53:a7:6a:08:aa:0c:b9:ec:e8:
fa:39:c4:9f:24:5d:a4:ce:a1:fb:ff:17:18:15:0c:
60:4f:59:75:28:e1:43:21:84:5e:c2:e2:c9:c2:40:
62:75:36:01:b6:bb:7d:8f:ef:92:89:0d:9a:bd:84:
34:bb:3c:7b:15:c6:fb:e6:07:7f:b9:bc:8f:13:d3:
f5:91:d1:59:2f:89:45:b7:ad:2e:89:58:19:c1:3b:
8e:d4:87:28:f2:5a:6a:a4:35:a6:bc:52:6e:c9:e2:
b1:c5:09:85:13:e2:a8:ea:c0:b2:a4:14:46:69:b5:
1c:6f:63:f4:a2:d6:cd:e1:ae:9e:bf:65:e8:0f:ff:
d2:7e:0b:fa:55:a7:cb:0e:45:9a:96:72:87:5e:d6:
d5:c6:f3:e7:39:a1:77:77:86:a9:57:85:57:65:ca:
1e:1f:e6:96:19:7c:3c:c8:8e:4d:82:7f:f9:74:c1:
6d:76:6f:12:6d:41:9e:39:cb:f1:46:84:83:9a:d5:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:7E:B9:DC:E9:E3:1A:9C:E5:DA:D6:7D:2C:62:7D:8F:09:66:92
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:f3:ca:b1:96:9d:5c:95:43:7c:61:3c:11:a9:9b:57:e1:
4a:5f:6a:c8:b1:b6:71:40:bc:64:e7:da:04:44:4d:8b:75:e1:
a4:51:97:fc:c3:08:ce:bf:d1:6b:97:c8:a6:25:95:bf:a0:f8:
d2:59:02:52:47:db:5a:81:e5:5c:08:d7:1b:ed:f4:aa:2f:6d:
ab:be:c4:43:8a:d4:05:23:70:ce:4b:ac:c7:82:9d:d0:b3:33:
5f:07:18:0b:93:7e:9d:70:ca:48:ae:b8:32:34:a7:42:2c:0b:
d7:ab:85:5b:d8:94:cb:a8:81:70:75:6c:43:b1:f4:26:69:5c:
56:ed:df:39:40:78:52:aa:6f:cb:0c:e6:0a:04:bf:7b:04:0d:
02:8f:1c:ed:5d:f6:26:30:c7:c5:87:91:67:95:20:a0:f4:23:
55:2a:d2:cf:4e:c9:5f:e5:81:34:1a:59:4f:3d:8b:24:b2:6d:
c6:b6:e1:ba:81:68:e1:61:62:6c:f5:80:47:ed:d5:fe:a5:ed:
89:67:67:ab:0b:97:9c:ae:a6:30:98:a5:47:8b:7b:1f:22:ae:
3b:a8:64:1d:93:33:43:39:db:77:2f:9d:39:8d:46:09:06:56:
19:b1:e6:4f:22:65:70:ae:85:74:d8:22:f9:10:08:e1:ac:ad:
4e:7e:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:22:17 2026 by rpki-client