Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: 07xrVBDqo4qDUidpLe8eB7IQIYDiDd5uaPW0Zd2H1YY=
Subject key identifier: 1E:FE:F8:F6:BE:3B:80:61:5C:5C:81:A6:5C:CC:45:78:40:D9:3E:A3
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 01A06E714760CE58AD0D37BB6E04F986C7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: EA
Signing time: Fri 04 Sep 2026 22:01:52 +0000
Manifest this update: Fri 04 Sep 2026 22:01:52 +0000
Manifest next update: Sat 05 Sep 2026 22:01:52 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: fu9rA9aqDT0wVeWcpA3l8lMuVNV3zWNr1Ox1tILbJiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:47:60:ce:58:ad:0d:37:bb:6e:04:f9:86:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Sep 4 22:01:52 2026 GMT
Not After : Sep 5 22:01:52 2026 GMT
Subject: CN=1efef8f6be3b80615c5c81a65ccc457840d93ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:d5:d1:a9:f6:d6:73:b8:ec:e0:ee:cc:9a:
df:71:ea:39:a9:42:a9:d5:e4:af:78:08:f1:23:c8:
ac:ab:18:c2:47:c6:20:2c:c0:76:ed:2a:94:77:93:
e4:ed:4b:80:83:81:65:36:b6:0d:66:ad:e0:0d:d0:
2e:1e:a5:ba:52:b6:70:df:f2:83:c4:98:84:39:ab:
95:91:6d:8e:83:14:a9:f9:32:3a:c8:7e:85:42:3a:
56:31:d7:56:80:71:db:ac:0a:1c:3e:d9:2e:a0:f2:
f9:7f:73:a7:27:85:88:f0:65:eb:09:87:5d:4a:0d:
dd:f8:e6:dc:60:50:35:25:5c:bb:57:94:52:c4:37:
cd:bf:53:4a:c8:d6:c1:92:fb:c9:95:2d:74:81:58:
35:c8:f7:87:68:4d:43:63:61:ec:e8:57:78:c0:0c:
d5:14:0d:df:5b:28:ae:70:02:18:d6:f9:6e:eb:54:
f6:a7:ae:f0:56:ef:43:3f:8f:86:75:e8:cb:9c:ca:
b4:42:fa:89:c6:49:3c:91:3d:b0:19:79:90:9b:6f:
89:38:ab:4b:76:e5:6f:c1:19:1a:67:0c:1d:fe:b7:
6d:f6:1c:a5:00:da:7f:f6:98:ac:58:10:46:1a:20:
35:eb:65:37:71:45:89:e5:42:37:b8:0e:45:fd:d5:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:F8:F6:BE:3B:80:61:5C:5C:81:A6:5C:CC:45:78:40:D9:3E:A3
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ef:ba:da:9d:69:04:79:9e:ad:0c:a0:77:9a:93:12:21:98:
c0:ef:f1:9b:a4:35:2d:48:4f:fe:ab:d3:6e:b5:62:52:ed:b1:
d3:dd:42:94:cd:13:d5:f2:13:6e:d5:61:0a:8b:b8:30:4b:ed:
e8:db:ac:bf:fc:ca:3c:2c:42:74:3f:91:b3:5b:48:5f:07:c6:
df:ad:6e:e9:35:88:99:fa:85:2d:f6:82:37:57:68:ab:dd:bf:
bf:07:06:40:97:a7:fe:67:2a:a7:0a:c8:1d:80:f3:4f:4c:1c:
99:90:3a:bb:02:b8:71:6d:c7:4e:89:ee:00:a6:95:37:7c:d9:
8f:bf:26:c9:30:17:04:c7:ce:06:23:bf:56:40:dd:c7:64:3d:
14:b3:59:26:fa:d1:f9:54:66:b9:32:06:07:f8:4f:b1:31:3b:
8f:f7:1d:1e:78:86:89:c6:8e:4d:45:08:00:b6:a9:97:c8:e7:
f5:9c:c9:2a:4d:e6:82:d3:3a:a2:06:d8:2b:ea:de:7d:d0:66:
ea:16:ee:a9:23:9d:26:0f:44:46:e4:88:7d:36:66:47:b1:09:
0a:f3:45:aa:c3:6b:16:63:f4:9a:47:a4:da:58:41:36:9d:eb:
34:4b:65:c5:99:ce:3e:58:50:c0:28:90:43:6e:65:ab:a4:d9:
ee:31:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:31 2026 by rpki-client