Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: V+fyR6Fyn1uwXynIDhjx9QScMmFIma9HUiL4bKCpxkc=
Subject key identifier: 1F:09:25:71:79:F0:BF:0F:11:58:55:C7:0C:58:68:04:03:F4:49:46
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 019FF9B626A8B24E52828FD9ADE048F74AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:31 +0000
Manifest this update: Thu 13 Aug 2026 06:01:31 +0000
Manifest next update: Fri 14 Aug 2026 06:01:31 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: atBdYrqBazt8KYEoWH0IPvl/yed05lcxm4Q593K1GAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:26:a8:b2:4e:52:82:8f:d9:ad:e0:48:f7:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Aug 13 06:01:31 2026 GMT
Not After : Aug 14 06:01:31 2026 GMT
Subject: CN=1f09257179f0bf0f115855c70c58680403f44946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:28:53:54:25:cb:97:26:21:4d:85:48:fc:
67:ab:87:27:d7:50:1c:de:4c:de:02:ea:0a:50:8a:
86:a2:7e:53:d9:30:94:93:08:d7:78:1e:27:6a:1c:
7c:ce:10:3a:bb:4b:6f:81:9d:ad:93:86:dd:2c:e3:
c4:8b:92:83:15:36:79:38:59:b1:b1:95:26:1c:43:
4a:44:e3:8b:16:0a:03:f3:ef:24:1e:c2:c8:ab:8d:
44:35:be:cc:3e:86:7b:8a:28:10:26:4e:70:d4:a7:
48:c7:e9:9d:ad:24:1b:e2:32:a7:10:31:13:fd:5b:
6b:81:e5:6d:12:04:ec:00:9c:65:79:08:ae:95:23:
66:b4:ae:20:50:bd:2b:76:f7:65:95:fd:f1:97:49:
31:e7:f4:04:05:cc:d9:f5:50:4e:89:5f:77:e4:5a:
5e:f9:0e:e9:ae:7b:33:14:b0:f2:2c:f6:49:4c:da:
00:de:de:62:37:45:3f:7c:39:84:f2:27:a9:af:d0:
5e:47:ad:dd:5e:52:34:d2:68:ed:e6:c2:3e:59:22:
03:6a:86:65:ed:cb:06:58:7c:cf:ec:80:72:fa:21:
2b:32:d0:d5:ce:f4:60:82:55:9b:60:2f:8e:b1:04:
29:41:48:be:43:ee:1a:28:9b:f6:91:3c:a1:7a:79:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:25:71:79:F0:BF:0F:11:58:55:C7:0C:58:68:04:03:F4:49:46
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:5b:ea:81:70:9c:0a:f4:30:39:c4:dc:63:07:42:1b:ba:
3a:71:5f:05:40:0c:b8:8a:cc:55:c3:d6:25:29:25:ff:46:58:
e8:96:3d:5d:c0:a4:92:3b:0f:3f:c0:d8:6c:4a:4b:a8:52:43:
43:1b:9b:dc:36:6e:3e:a8:08:46:b0:cc:de:54:3c:59:d1:75:
7b:e0:67:26:7a:50:d6:16:94:1b:da:3b:38:5e:77:85:76:ce:
4d:45:fc:e7:d2:bb:f5:14:dc:1b:23:08:99:22:c8:01:09:b8:
d2:1f:d2:cf:a8:13:d5:58:25:4a:33:dc:91:11:ef:77:75:98:
c2:92:64:bc:8b:95:d4:77:21:7e:c7:3a:a8:8a:5f:64:bb:a1:
1c:2d:64:b8:e0:1a:d3:b8:18:8b:05:d0:e7:78:6d:ca:76:b9:
ca:f4:15:5b:d2:a9:98:c6:1b:d2:7e:b8:77:ca:fd:67:5e:57:
ad:27:1a:9b:7f:fd:32:4e:20:7f:0c:fc:a5:b4:c0:6b:de:e4:
b7:d1:77:a8:f7:80:c4:ce:12:01:d5:43:9b:3b:f0:c8:de:c1:
4d:30:9d:d2:94:44:4f:de:2f:29:47:d0:97:e0:9e:cb:bf:6b:
2f:1e:c9:4c:08:26:7a:81:ee:a6:be:1e:72:d5:49:a7:0b:41:
ec:42:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:03:29 2026 by rpki-client