Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: T8cXU/qfNlssITCCdZM5tqVXCpxM8duwS5qo+ZYMn+I=
Subject key identifier: 7B:F8:B7:93:DD:0D:86:11:D4:F0:CC:D4:89:BF:9E:41:84:D8:C3:03
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019F83E82578ECE05E68F9F6ACAF39EC2868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0EBD
Signing time: Tue 21 Jul 2026 09:00:56 +0000
Manifest this update: Tue 21 Jul 2026 09:00:56 +0000
Manifest next update: Wed 22 Jul 2026 09:00:56 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: iH7iEScV4uterDLF2moh4QB47lPRKInt5pDxImC1rNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:25:78:ec:e0:5e:68:f9:f6:ac:af:39:ec:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jul 21 09:00:56 2026 GMT
Not After : Jul 22 09:00:56 2026 GMT
Subject: CN=7bf8b793dd0d8611d4f0ccd489bf9e4184d8c303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:f9:b0:35:07:aa:ea:af:d4:af:ed:f0:b8:
74:e2:f4:71:c9:4d:9c:94:db:ec:e4:22:cc:3a:b2:
c9:ac:76:b1:58:2b:a0:64:c4:c9:68:cd:0b:62:d6:
33:63:6d:fa:a8:ed:de:6a:72:f7:0d:87:29:67:94:
61:e3:37:a3:0f:29:8b:33:d1:4e:29:47:2e:f5:f3:
0f:5f:fa:b1:68:28:cf:24:25:e6:fa:4d:2c:c1:a9:
9f:a0:1b:4b:86:56:e8:8c:62:d0:d8:96:3d:d9:70:
00:b3:96:f6:db:67:36:1a:62:c0:44:9d:f7:b6:cb:
70:cb:40:27:c0:58:12:26:82:5c:35:a5:a9:fa:85:
34:82:bf:81:2e:4f:2b:cf:ea:26:07:62:36:c2:dd:
80:9e:22:7c:cf:9f:81:bf:db:f4:42:e5:a7:05:74:
dc:46:2a:b6:ef:2f:9f:f2:5e:de:e9:09:55:fd:79:
52:d2:07:f0:4d:01:61:61:91:73:64:cf:e3:f7:b0:
08:10:9a:71:fa:d8:22:fa:c2:54:54:b8:21:d8:af:
de:83:c6:35:0f:39:4d:51:bb:7c:1c:9f:fe:e8:8f:
56:3d:94:92:b4:6b:ba:27:a0:4e:e7:a5:34:58:c9:
f4:63:81:15:50:6d:2f:a8:f6:4b:2e:db:4a:24:74:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:B7:93:DD:0D:86:11:D4:F0:CC:D4:89:BF:9E:41:84:D8:C3:03
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:44:ad:3e:01:89:8d:8c:f8:e4:c1:a6:66:2a:f0:15:9a:45:
21:0c:d5:6a:fa:53:a9:bc:dc:c7:0e:63:1c:f7:16:0a:16:94:
1f:a9:83:88:cf:7f:92:32:4a:7d:a1:56:35:3b:4e:62:54:3b:
e9:26:e0:3b:d1:8c:30:eb:0a:50:67:9a:52:52:f2:5a:f0:eb:
dc:22:74:8c:2a:d9:db:e5:21:cb:6b:57:e5:5a:68:b4:0e:14:
01:70:3e:3d:c3:11:fd:1a:ec:57:fc:8a:ac:57:88:c6:77:5a:
2f:91:2c:7d:84:17:b1:e6:28:79:a2:c1:07:05:15:33:a1:76:
5c:8d:f7:6b:63:20:89:a0:87:76:d5:25:50:9f:6f:ae:69:23:
8c:84:6b:78:ff:8d:e7:6c:3b:a7:89:50:47:c8:ae:c1:70:85:
26:e9:ac:fd:3f:dc:a6:fc:93:b8:07:08:b2:1f:d9:40:8d:8f:
65:8b:92:8b:38:4d:f5:d5:0b:cf:1d:0d:41:f2:f7:85:ff:c5:
4a:db:58:24:87:3c:56:9f:dc:70:28:c5:7f:84:1c:16:b5:38:
04:3d:a4:ad:41:1d:12:fe:4e:d1:8e:c4:b0:9a:91:71:32:2d:
38:a5:ce:82:1a:5c:52:4f:45:94:6a:05:25:56:3f:5e:dd:63:
38:4f:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:40:44 2026 by rpki-client