Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: ZVDjKKj7Cka+RMSGQ3o/K5FdBhDR3b+1TA3UjF0LziU=
Subject key identifier: 06:82:0B:7E:D5:80:32:6A:CA:DC:58:05:47:52:3A:A6:1D:0B:50:F6
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 01A08979B6B0886D50D1E955435F35A7083C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 0255
Signing time: Thu 10 Sep 2026 04:00:50 +0000
Manifest this update: Thu 10 Sep 2026 04:00:50 +0000
Manifest next update: Fri 11 Sep 2026 04:00:50 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: 3wtNku00hqm4s3IvkrsnX3TPRzKJ+uigNdh0ZC5D8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:b6:b0:88:6d:50:d1:e9:55:43:5f:35:a7:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Sep 10 04:00:50 2026 GMT
Not After : Sep 11 04:00:50 2026 GMT
Subject: CN=06820b7ed580326acadc580547523aa61d0b50f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:54:b0:48:ea:28:57:89:2c:9d:02:61:ee:
da:24:77:d6:14:bc:5a:7b:77:10:6d:da:8d:55:f4:
10:0a:b2:cd:4c:fe:92:ae:56:ae:1e:8a:86:ee:cd:
16:31:f0:06:ee:cc:cc:f4:1b:d9:08:4b:f4:e1:8d:
ca:54:51:88:f3:5d:8f:60:51:7f:c6:17:84:21:0a:
76:da:78:f8:19:9e:48:08:a4:16:27:9c:52:74:b0:
69:aa:f8:88:42:43:ee:59:93:7b:da:23:e8:bd:81:
63:b9:63:86:7e:b8:b3:39:aa:2a:a4:66:a6:5a:9c:
f3:09:85:9f:9e:b3:cc:fc:b8:73:36:9f:d4:24:e1:
ea:7d:74:2d:17:b3:fc:7c:0f:e6:93:a9:8d:68:af:
0c:f8:86:56:2e:b5:2c:fb:8d:b3:4f:de:22:93:41:
15:9e:66:e7:1b:50:15:ce:e1:ce:37:e5:e7:83:5b:
f9:ad:17:69:5b:bc:79:22:a0:1b:9f:34:23:86:49:
87:ad:8f:2d:69:3f:f3:5c:88:42:73:4a:34:f8:17:
18:97:ae:4a:88:42:05:a3:dd:dc:d7:48:0e:12:fc:
f4:81:08:f8:e4:0c:33:ec:d7:ed:47:dc:00:bd:fa:
04:df:1d:e6:d7:19:a6:cb:12:7f:a3:69:4e:15:51:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:0B:7E:D5:80:32:6A:CA:DC:58:05:47:52:3A:A6:1D:0B:50:F6
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:54:76:3c:e9:8f:9f:3c:8c:1d:81:2a:c0:fd:5b:35:bf:4e:
04:e3:2c:d3:7e:e9:80:2e:34:8e:16:07:78:56:08:51:a1:0d:
62:d2:c8:c9:81:59:01:be:83:57:d5:92:c0:f6:c5:f5:ea:1f:
5c:d3:e8:c9:24:fd:54:49:48:13:cc:3e:e8:58:36:38:cc:92:
8c:32:b1:f1:16:d6:40:fc:e8:23:a4:a6:6b:63:92:75:78:f2:
d6:2d:fe:df:64:4a:22:4b:f4:0c:86:31:4a:6b:3c:3b:89:3d:
7b:58:4e:de:1e:7d:87:98:69:de:7b:78:17:56:b6:59:e0:d4:
5b:84:3a:56:10:74:26:99:db:04:ba:4a:fd:3a:0f:da:2c:92:
e4:b0:2b:da:d5:9c:b1:ec:90:59:7e:6d:ec:24:3a:ab:47:8a:
6b:75:98:f9:c0:05:78:9f:e9:a1:01:60:1b:c1:ce:cc:ad:06:
88:cd:76:b6:46:b3:37:1b:9a:db:2e:f3:1e:47:64:ee:2b:4f:
77:6d:dc:60:47:bb:24:db:0b:73:b0:56:16:62:6a:c1:e7:1e:
1b:69:19:a9:ba:47:9f:23:3b:fc:05:43:72:4b:06:89:27:b7:
b0:13:11:c4:35:4b:af:d4:97:55:cf:be:b3:8f:d5:2a:49:dc:
78:63:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:16 2026 by rpki-client