Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json)
Hash identifier: NTjgvG8w3Z758bOzxQHwVAbwSHktrkNbvzY7w9gLmj0=
Subject key identifier: 46:68:60:FF:DB:54:E8:1B:2E:41:9F:A2:6B:36:62:0F:F8:81:45:B5
Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Certificate serial: 01A0EC2F07C02B8282184AD4AA8ABD27F962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
Manifest number: 035D
Signing time: Tue 29 Sep 2026 08:01:40 +0000
Manifest this update: Tue 29 Sep 2026 08:01:40 +0000
Manifest next update: Wed 30 Sep 2026 08:01:40 +0000
Files and hashes: 1: O7qGuza48mR4CR8KTHpYEjM5dqc.asa (hash: D4UI6xT6oTb+P8ng9BLAQlG3FXVjoaZnbTJdKJ9xbrE=)
2: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (hash: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w=)
3: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: Z/o6xFAdZbQ6y3uZuMvRihrm704QOciVgtDUXXVdRBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:07:c0:2b:82:82:18:4a:d4:aa:8a:bd:27:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Validity
Not Before: Sep 29 08:01:40 2026 GMT
Not After : Sep 30 08:01:40 2026 GMT
Subject: CN=466860ffdb54e81b2e419fa26b36620ff88145b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:4b:f1:0d:d9:9c:f9:21:da:72:a0:ed:b9:
de:17:1f:29:c0:62:e0:ff:bd:8f:bd:ca:0a:bb:11:
a2:0e:0d:ec:dc:b5:81:41:01:ad:10:3a:d1:e2:db:
cf:fb:81:aa:88:c0:6d:4e:24:3b:45:7e:02:ca:07:
37:7e:88:a0:36:b9:89:8a:2d:52:1d:ba:b1:87:67:
84:20:20:2d:ed:9c:1a:f5:bd:25:3a:4b:02:db:67:
97:2a:ab:c2:1f:96:06:23:e7:59:27:06:37:65:d3:
87:1d:df:28:e9:4a:55:d1:30:ec:bb:cf:96:19:58:
0c:1c:95:36:45:be:ed:d8:50:31:8e:c0:85:4e:05:
b0:ef:9a:59:a1:a0:12:40:53:ee:40:c7:11:5a:57:
e9:7e:54:cf:8c:80:32:eb:20:96:f2:8c:75:4c:00:
4a:7a:e3:86:4f:ed:44:7b:3c:f8:69:01:ac:25:3e:
a0:47:7f:62:45:c3:f1:eb:99:6a:c8:ad:91:01:ec:
ab:9b:91:4b:6f:dc:5e:f2:68:1e:fb:36:eb:df:3e:
48:c8:28:18:25:5d:6e:7e:22:da:57:5a:ce:31:e3:
e6:d7:9d:9f:74:90:b7:81:c3:60:c9:09:62:cd:a2:
87:9f:90:23:b6:c6:c6:eb:42:75:27:2c:6c:ca:82:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:60:FF:DB:54:E8:1B:2E:41:9F:A2:6B:36:62:0F:F8:81:45:B5
X509v3 Authority Key Identifier:
keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:83:24:c4:0e:e9:28:81:44:8b:74:28:de:88:e5:7f:17:
7e:bc:01:3b:44:29:c5:f6:09:1a:1d:b4:d1:b1:21:ba:94:84:
6f:a5:0e:b2:de:a4:55:6f:9a:dc:0a:f4:73:01:26:1b:02:6a:
38:b3:30:cd:aa:8b:d0:8b:57:7e:07:ea:8e:97:1f:28:5b:d5:
86:0e:7a:9b:1c:62:c6:c7:ab:10:f0:c4:8d:3e:30:b4:c1:54:
46:16:52:b1:6b:17:69:33:15:1c:fc:e7:fd:b5:b9:d3:45:3d:
1b:5b:15:27:49:3d:2e:80:e6:c8:f2:0b:42:fa:1e:ac:cc:a4:
84:6d:86:5c:23:5a:94:06:fd:19:c6:27:54:ec:08:47:22:63:
29:9d:7a:cf:40:a7:6f:6c:b7:b9:33:4a:01:41:b0:21:58:22:
09:24:e8:9d:7f:d3:4e:6c:5e:1e:09:44:af:4b:2b:53:bd:ea:
64:d8:53:10:ab:c1:5f:97:36:2d:ae:3d:e1:73:25:3f:9b:80:
62:22:98:f3:f3:53:86:2d:d8:e6:5e:05:a4:9f:91:48:4c:ec:
e2:b3:87:1b:a8:ba:b4:30:9b:cc:85:ce:42:dc:5d:38:a1:75:
db:79:cc:51:ee:64:af:17:69:20:03:30:40:0b:bf:e9:24:cc:
42:ac:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:19 2026 by rpki-client