Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: GPVNVdjJ5hNytzucJWf9xgoN7P/0WxiT8H53zzUl7Xw=
Subject key identifier: 8C:00:D6:AA:A5:3C:2A:F7:3A:50:D2:77:32:DB:44:7A:BB:90:B4:FC
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01A17EBCBBB2B8735DD86B41C7FF66E0BB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 15BA
Signing time: Tue 27 Oct 2026 19:01:00 +0000
Manifest this update: Tue 27 Oct 2026 19:01:00 +0000
Manifest next update: Wed 28 Oct 2026 19:01:00 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: j8GvO4YNxm0biY0ZKOEOhMztqYfRXi5RJGqPPnQ8EQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:bb:b2:b8:73:5d:d8:6b:41:c7:ff:66:e0:bb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Oct 27 19:01:00 2026 GMT
Not After : Oct 28 19:01:00 2026 GMT
Subject: CN=8c00d6aaa53c2af73a50d27732db447abb90b4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:9b:b1:19:89:70:42:c5:60:0f:6b:0e:4f:
ba:c1:13:ce:3f:69:a7:63:64:11:4c:62:1f:78:fe:
da:7f:a4:01:69:d0:01:bd:c5:5e:ab:d8:05:3b:d1:
b0:1d:0e:e3:3f:c6:c6:9d:30:8b:39:c0:be:eb:26:
d9:0b:bb:16:8b:a5:19:b3:71:db:58:a4:b1:27:95:
73:c9:05:64:9e:09:c0:d9:20:74:7c:e2:05:63:fb:
8b:37:78:d3:b4:35:e6:6e:5e:1a:31:c4:dc:ef:bf:
96:cd:79:61:14:d3:a5:0a:2c:8b:cf:3e:b9:9e:89:
22:c4:7e:55:db:4f:f7:12:9a:16:71:83:aa:52:f3:
ba:9a:d4:8c:f6:e3:62:f4:04:f4:60:48:25:86:c8:
08:d6:f6:79:68:03:01:ec:91:f8:a0:26:5c:dd:e5:
35:38:17:e7:b8:b6:95:93:ec:02:e2:c9:88:34:98:
96:83:89:20:26:0a:f2:98:39:de:ae:a4:a7:bd:6e:
8c:5b:1b:75:a7:ad:ee:0f:18:4a:64:95:a7:e4:39:
d1:8f:e1:46:3b:75:7f:1e:ec:97:5d:31:6c:1a:57:
eb:f9:e4:7b:b8:90:d0:28:0c:85:c0:75:2c:81:8f:
fd:9b:6c:34:37:09:78:0a:b5:09:94:c8:33:33:c4:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:D6:AA:A5:3C:2A:F7:3A:50:D2:77:32:DB:44:7A:BB:90:B4:FC
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:cc:67:08:31:c4:36:69:f0:cd:30:46:e7:c2:88:1a:2a:
c7:be:40:3d:7c:9b:c5:bd:cc:bc:7a:74:4c:25:9d:c8:f4:e8:
5c:4c:c1:9a:5c:31:16:b0:d5:12:33:88:d5:50:de:8d:87:11:
7b:65:95:69:f9:1e:f1:c1:e2:75:7a:dd:aa:ed:c5:a3:7a:3a:
38:35:87:22:5e:27:42:ec:b2:2e:4c:50:cd:d3:0b:bf:5c:e5:
ce:2a:df:e7:39:aa:8e:b3:2a:c2:f6:af:06:e8:a9:94:14:9e:
f5:b7:37:57:33:78:72:00:b7:b0:e5:48:a0:70:fa:af:66:35:
85:32:a7:ac:9a:f7:0c:35:10:50:c7:69:67:8c:61:e1:06:8e:
4b:ff:0c:f4:b8:33:5a:38:c5:7b:88:55:33:ec:18:7d:bf:c4:
a5:54:08:47:1a:3a:e0:45:37:f0:24:a2:a2:f9:9d:96:93:86:
0d:e2:70:cb:7b:f1:e3:7f:eb:cc:4b:44:a7:8e:90:5d:73:f5:
62:05:e7:28:25:bd:12:55:3c:29:92:98:26:6a:fe:ae:c5:48:
93:01:3a:48:ff:17:59:60:52:64:6e:75:d2:66:f1:4e:63:35:
dc:b4:37:e3:c5:64:e8:45:0a:d1:90:5b:c4:fc:fc:fd:49:65:
aa:cb:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:28:54 2026 by rpki-client