Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: UWCsHnMc/Yio407/+/cDLi9HfLqCWYnzmV2ZronX188=
Subject key identifier: 43:1C:FF:3E:60:BA:BD:EF:9B:C3:1B:09:8E:10:58:8A:C1:2C:5A:94
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019FF8DA5D928AAFCE1B7550F40EF64000E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0DF0
Signing time: Thu 13 Aug 2026 02:01:28 +0000
Manifest this update: Thu 13 Aug 2026 02:01:28 +0000
Manifest next update: Fri 14 Aug 2026 02:01:28 +0000
Files and hashes: 1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: fL+k4/ryzkPYStocaapaHtLBaobEhJa2+tG9rABBbUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:5d:92:8a:af:ce:1b:75:50:f4:0e:f6:40:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Aug 13 02:01:28 2026 GMT
Not After : Aug 14 02:01:28 2026 GMT
Subject: CN=431cff3e60babdef9bc31b098e10588ac12c5a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:02:f0:13:0f:86:66:d0:fe:4a:97:41:38:
0f:85:2a:63:cd:2e:6e:f9:6a:54:81:5a:42:30:58:
4a:e6:1d:49:62:17:cb:35:e4:50:6a:7c:86:bc:03:
06:8d:92:f4:c7:86:b2:68:75:00:89:2b:72:98:db:
6e:d8:49:33:86:e2:81:7d:de:7b:70:96:3e:fd:b3:
d1:90:1a:c3:34:d0:3e:63:89:72:e8:aa:6e:3b:82:
c2:2d:be:15:9e:5c:97:9a:5e:9b:9c:58:b1:a9:cc:
69:74:70:ff:a1:19:0f:ea:52:a1:b9:8c:fc:c2:d6:
7a:ad:3d:e3:ce:0b:dc:5d:70:66:93:1b:0f:42:a6:
43:8f:f1:15:a9:1a:71:b2:76:64:da:8e:95:00:55:
5a:9b:d7:ae:ed:f3:88:b9:49:11:0c:5e:4c:ee:f4:
87:b2:28:f6:c5:2b:f6:27:36:79:b1:81:4a:14:79:
a8:28:3b:d2:54:41:ab:ca:35:18:1e:2b:84:a6:c4:
48:fc:09:48:45:ef:5e:c7:e5:3f:1f:ec:ba:fa:59:
dc:7c:b9:fd:8d:9d:be:27:da:72:11:4b:40:b3:00:
41:e1:43:43:bb:84:28:7b:4b:4c:37:b7:f2:92:96:
77:33:c3:a2:93:27:a4:23:48:7c:00:17:e6:10:01:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:FF:3E:60:BA:BD:EF:9B:C3:1B:09:8E:10:58:8A:C1:2C:5A:94
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:af:27:e3:07:2b:13:cb:d6:7b:9c:4e:0d:b6:3d:f4:9e:
96:9c:6f:d8:da:08:0b:94:45:dc:59:23:9c:e6:e1:0b:38:15:
a9:cd:12:9f:fb:46:d2:88:7f:a7:27:17:d1:69:52:35:ab:56:
6f:ab:a6:87:53:f9:63:83:54:ed:21:17:d4:ff:07:cf:ba:37:
87:7d:f5:84:26:b5:2f:62:ba:b7:aa:68:28:28:dd:90:7f:14:
1b:0c:6e:46:3a:a2:43:6a:fc:b6:bc:c5:d0:07:b0:ee:30:f5:
ac:e8:fc:54:d9:ef:14:68:7b:25:0f:8d:cd:3d:20:1c:71:eb:
7d:57:d5:52:fc:a1:e5:81:3b:dd:d9:a7:9e:69:65:39:89:de:
18:59:dc:68:21:90:5c:29:21:f0:7e:6b:e2:5b:65:32:6f:8f:
80:46:b2:77:20:91:2f:9a:39:03:d1:d2:aa:03:b6:66:74:38:
49:a4:7d:9f:f2:f9:8a:20:e2:b9:4d:d0:06:30:51:c3:c0:70:
bc:98:bd:7f:25:6b:6f:12:6c:ed:f9:3c:03:f0:77:a7:30:e0:
7c:fd:85:74:3d:44:8e:26:5a:2a:bd:ae:25:04:24:6b:87:fe:
28:68:73:11:eb:77:1d:ad:2d:d9:fa:c3:ec:93:2f:af:54:e9:
12:26:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:42 2026 by rpki-client