Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: KAMch1ytRqFRKV+XLeFnanTJQyRhKpFVFxKDOH3hheo=
Subject key identifier: 89:B5:30:1B:CC:11:7D:56:F5:38:27:28:D2:F3:99:8F:02:AB:4C:25
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 01A17325F7F8007C45782FCE15AD9869D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 0171
Signing time: Sun 25 Oct 2026 13:00:30 +0000
Manifest this update: Sun 25 Oct 2026 13:00:30 +0000
Manifest next update: Mon 26 Oct 2026 13:00:30 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: typcIEmUDkE6r51ONd//yqBgTjVrW0acMbmKJj54GCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:25:f7:f8:00:7c:45:78:2f:ce:15:ad:98:69:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Oct 25 13:00:30 2026 GMT
Not After : Oct 26 13:00:30 2026 GMT
Subject: CN=89b5301bcc117d56f5382728d2f3998f02ab4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:a3:6f:33:27:b2:94:1d:60:7f:b8:35:09:
a0:d4:eb:01:89:74:85:84:f5:ca:5e:95:e5:45:85:
a1:b9:f1:f0:90:a1:40:f6:0f:66:c8:06:cc:a0:06:
a0:1f:b2:97:fe:21:b7:91:8c:7b:7a:87:cd:ae:c3:
52:0e:1f:a9:c8:0a:fb:f0:28:93:64:56:15:66:c6:
a4:17:57:5f:00:d2:9e:2a:8e:7f:a6:f2:c1:41:80:
c7:f9:ff:95:eb:42:eb:cf:a4:58:35:bb:9e:52:70:
6b:21:29:29:0b:2e:2d:32:b0:f5:54:ea:0c:6a:10:
a6:4d:91:30:8d:35:04:2e:ec:48:05:d0:b2:cc:1b:
23:7c:5f:64:a5:65:ab:47:61:40:a6:7c:c6:89:66:
4f:02:11:64:ac:7a:6f:18:81:47:2d:90:bb:a5:89:
ca:69:f7:ff:e2:84:23:2d:6c:79:83:db:0e:04:1e:
34:90:5c:16:4d:46:ee:90:a8:f3:f1:37:44:8a:77:
bd:44:e8:06:ec:a8:9d:28:13:7f:2c:83:ea:71:b8:
a8:ec:91:18:ff:85:33:43:47:28:87:e5:a9:df:6b:
08:0d:8e:0d:24:a8:97:6c:c7:b6:36:6e:f6:68:7a:
6c:d1:27:9f:30:ee:bc:94:1c:6c:ea:7b:39:53:08:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:30:1B:CC:11:7D:56:F5:38:27:28:D2:F3:99:8F:02:AB:4C:25
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:32:46:ef:ad:9b:d6:23:7c:35:d7:86:54:0f:74:5d:86:34:
09:95:b9:e8:ad:35:cf:47:9c:b7:88:0a:5c:e5:3d:6f:a1:a2:
da:ad:c7:89:67:aa:95:14:92:48:4d:02:54:94:b2:0d:e1:37:
f8:26:42:a2:e6:3b:36:fd:f3:66:26:da:26:b4:d6:7c:73:22:
9e:85:b4:bc:11:ae:8c:96:3c:85:9e:0c:ef:d1:76:9c:16:aa:
6a:d4:57:fb:60:d7:a3:ca:44:19:08:25:f9:a4:7c:38:3b:c9:
9e:3f:7e:86:fb:a3:54:2b:e5:ad:3b:18:62:58:ab:5a:fe:d5:
d1:8c:59:3b:ae:f4:6d:97:4b:81:26:cf:61:93:41:29:54:04:
81:09:d4:e6:a3:5f:df:f7:a3:34:01:f8:4a:28:07:77:b8:79:
76:25:a2:a1:26:7e:20:0e:77:4f:3f:a6:89:65:80:42:70:74:
d0:19:09:ef:cf:a1:00:d0:97:75:fa:a4:28:80:fd:bc:3a:6a:
f9:84:2f:aa:06:41:33:17:70:7c:4f:93:9f:86:e5:54:e7:3d:
23:69:c7:6d:d4:db:a0:8f:a9:50:16:26:3d:21:20:7c:de:17:
a9:bd:65:8b:5b:23:fa:f4:6d:d2:63:e4:1c:05:33:03:8f:64:
ce:31:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:55 2026 by rpki-client