Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: W3gmPapqahP5UAGSmnI5IWKU3qH9bpxa7hQ1r5rHN6k=
Subject key identifier: 8A:BF:0B:A9:2F:06:71:49:6E:80:B6:01:D8:1C:66:A6:72:75:88:1C
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019E29CC02EED0DE51AD400BC6A136B559F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0BDA
Signing time: Fri 15 May 2026 04:01:36 +0000
Manifest this update: Fri 15 May 2026 04:01:36 +0000
Manifest next update: Sat 16 May 2026 04:01:36 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (hash: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: UK4aB7s2dYQN8cF3t8U+veiY+lSk4Tu0qYQdQlK8msw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:02:ee:d0:de:51:ad:40:0b:c6:a1:36:b5:59:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: May 15 04:01:36 2026 GMT
Not After : May 16 04:01:36 2026 GMT
Subject: CN=8abf0ba92f0671496e80b601d81c66a67275881c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:6c:4a:6a:0f:38:f8:4d:77:d0:68:24:8b:
9e:a7:4e:4c:0e:cb:8d:63:48:aa:05:03:53:f5:1a:
3c:6d:d9:09:0d:c7:1a:06:80:11:63:9e:1b:c5:8a:
0c:16:bb:bd:a9:b0:99:29:da:59:1f:6e:c0:a3:2c:
04:1d:5d:a3:5d:77:63:f3:f0:cb:70:0e:3e:00:22:
7f:84:5a:77:5c:2a:71:e9:5d:a5:a2:3c:05:65:3f:
57:d4:2e:f0:c3:26:41:5b:19:c2:a8:68:57:f5:2a:
59:17:a3:d9:44:f9:21:59:9f:40:1a:00:fb:59:a3:
d1:00:3e:bd:43:36:96:41:91:b6:3b:15:ac:87:30:
81:a0:70:34:7a:a2:d4:ca:54:f1:d5:6f:3c:f3:12:
a5:46:c0:87:ff:cc:58:cf:6c:7f:5a:4c:6c:22:36:
86:09:69:93:75:a4:46:62:8e:b2:80:cb:45:59:8c:
1c:5d:ef:d4:98:5c:06:8e:8c:ba:ba:ac:f4:0b:e4:
9e:cb:91:dd:81:e6:52:ee:ba:19:cf:e5:5b:fd:70:
dc:80:de:88:cc:ef:a8:df:04:63:47:d3:cc:a6:28:
c6:a8:32:f6:0e:d9:ff:51:64:d6:bd:c0:db:25:2d:
28:92:d5:83:d5:ce:6b:5d:5e:68:9f:a2:96:ae:12:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:0B:A9:2F:06:71:49:6E:80:B6:01:D8:1C:66:A6:72:75:88:1C
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5b:9a:d1:e4:f3:0c:fe:6d:40:71:2e:c7:f6:d3:4b:cf:61:
60:dc:01:43:36:a7:fa:e6:0a:1e:43:09:7a:08:2d:5d:5a:30:
af:47:f4:93:2c:29:c6:9f:1b:06:21:02:61:67:43:26:93:3a:
08:a0:4d:0f:d0:4d:66:c1:07:43:bd:5d:43:06:6e:f9:94:c2:
4d:4d:2d:a2:eb:bf:10:07:a9:3f:68:50:91:fb:89:76:64:4b:
5f:ac:d0:f6:b4:d9:54:f4:d2:2e:35:dc:d9:cc:a8:36:36:e6:
59:d2:92:f6:0a:1e:0c:5a:08:6d:66:3f:2b:28:97:73:8c:9a:
0c:3e:b6:47:8c:ac:4f:50:bf:2b:83:a5:de:4d:db:fa:e2:99:
ae:2c:31:9b:d7:47:85:b8:01:47:71:a2:59:c5:52:21:b9:d9:
0f:5f:0f:5f:91:88:c1:49:3d:f3:dc:51:a4:47:56:a8:2e:9c:
f6:c6:92:58:25:fc:82:be:3a:76:e0:22:3b:cc:c1:0d:42:e2:
a7:97:07:50:53:2e:9d:e9:6e:ed:47:fd:8b:43:49:58:33:c5:
80:d1:a2:fa:f7:fe:aa:a3:4e:15:fa:6c:21:cb:19:7f:2c:a6:
f6:54:c0:ff:e1:e9:ba:e9:be:4b:ff:de:73:09:fb:b7:82:86:
a1:f8:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:04 2026 by rpki-client