Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: nuFlyw1AAWC9TbutyvfZR6fw7dIE+c3TXSpxr8QAtq0=
Subject key identifier: 3E:11:7C:F9:D9:52:48:73:47:AD:AD:5A:E9:E7:6B:EB:A7:6D:C4:27
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01A0028231B4E2E4C35EEFF27E185D3354E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0EB2
Signing time: Fri 14 Aug 2026 23:01:21 +0000
Manifest this update: Fri 14 Aug 2026 23:01:21 +0000
Manifest next update: Sat 15 Aug 2026 23:01:21 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: g6IChvTug/XzRikrioTKqLqKCxzEBkQd4OkjD2V495E=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:31:b4:e2:e4:c3:5e:ef:f2:7e:18:5d:33:54:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Aug 14 23:01:21 2026 GMT
Not After : Aug 15 23:01:21 2026 GMT
Subject: CN=3e117cf9d952487347adad5ae9e76beba76dc427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a2:9b:67:80:1b:ee:ec:d3:76:44:74:8f:cb:
55:03:9b:97:c8:44:11:29:09:5d:a7:01:6d:ce:04:
d6:cb:27:b6:f4:e0:95:6f:f8:41:a5:4a:f7:e9:96:
a6:12:4d:71:11:ba:1c:72:85:65:6e:1f:3f:e6:40:
5e:12:bd:68:ad:0f:18:9d:47:d9:00:b4:0a:01:17:
d4:62:ba:61:61:e5:d5:d7:94:d4:d7:88:76:79:90:
ec:a7:2e:70:15:b7:07:3f:b2:1e:6e:64:cd:ee:c6:
0a:02:13:61:4e:a4:f2:4b:29:df:ba:dd:75:2e:6c:
cc:3b:f8:da:ff:95:a4:09:bf:fd:52:6c:5f:0a:2b:
d8:ce:83:a5:56:c7:94:81:a8:89:c8:03:a8:c2:50:
f5:4d:cc:37:d7:ea:84:ec:0a:c3:65:e7:e8:99:88:
b9:fa:60:35:7d:b2:e7:6a:70:17:b8:71:3a:37:f7:
75:4e:1d:d1:82:d6:2d:f0:f8:85:a3:e8:fd:39:a8:
8b:d0:49:33:c5:3f:e2:97:f5:be:f2:04:af:3d:5b:
50:36:3c:20:c8:3a:4e:1a:e7:15:46:87:f4:37:c1:
31:61:13:de:60:f0:09:55:7a:51:50:d8:9b:30:c9:
1d:8d:3b:af:c5:9c:8f:ae:3f:ad:5c:a6:46:93:8a:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:7C:F9:D9:52:48:73:47:AD:AD:5A:E9:E7:6B:EB:A7:6D:C4:27
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f8:ff:82:4f:07:07:ec:03:66:aa:9a:39:56:70:16:f3:64:
d7:39:51:99:12:2e:28:09:45:da:e3:87:43:d2:6c:c1:8b:46:
00:da:82:64:52:0d:6c:6d:80:89:69:f9:64:58:a4:92:fd:b8:
72:02:81:4f:5b:5c:13:87:53:41:a8:62:ec:12:6e:d8:c5:39:
6c:0e:12:70:7b:a0:da:67:3d:79:ca:65:25:be:c4:47:12:49:
32:38:96:e6:88:19:04:33:08:6c:88:41:0d:a1:ae:89:e0:4a:
e2:13:ee:5f:60:e3:68:39:c8:ad:52:9a:0d:0b:69:fc:44:93:
f4:c4:42:a8:9c:9e:66:d3:17:ac:08:48:2a:13:d3:aa:bb:58:
1f:7a:bf:22:6b:41:8b:cb:b2:9a:e0:f8:cc:02:a3:2d:e1:c6:
cb:1c:1d:ed:b6:da:24:35:7d:df:80:48:91:3c:78:fa:e6:47:
06:32:78:a9:61:61:b0:07:0a:de:79:70:d5:4f:ec:1a:ad:17:
0e:3e:90:7f:1f:8f:b9:79:8d:5b:3c:4d:e5:a3:7c:51:1f:a9:
b9:33:4a:74:80:94:a3:5d:4d:8d:9b:17:09:d0:67:4a:f1:e5:
f7:53:13:e5:8a:19:67:d9:78:6e:f2:1c:5b:e4:4c:13:60:f0:
45:51:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:09 2026 by rpki-client