Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: LiLH7TWSgMSNc6ZdY7zGmQ73ChlFoGLXfQeLeo/JgtM=
Subject key identifier: BE:45:A6:1A:8E:9E:AD:93:30:5E:22:69:A4:38:25:51:6F:1E:15:A3
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01A187887CFC6BE443A8FF7D635CA268B1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0FC8
Signing time: Thu 29 Oct 2026 12:00:31 +0000
Manifest this update: Thu 29 Oct 2026 12:00:31 +0000
Manifest next update: Fri 30 Oct 2026 12:00:31 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 8HPMysOQZj89qxsNZQmJoIwC0X/NA2aZt2wRnQ6JDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:88:7c:fc:6b:e4:43:a8:ff:7d:63:5c:a2:68:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Oct 29 12:00:31 2026 GMT
Not After : Oct 30 12:00:31 2026 GMT
Subject: CN=be45a61a8e9ead93305e2269a43825516f1e15a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:59:d5:25:c8:04:67:f9:a5:41:ea:7d:e3:
18:5d:d2:4c:96:df:76:d8:85:94:cb:c4:3b:c3:37:
1e:42:31:b7:ec:cf:e0:de:70:92:87:d5:c0:52:9d:
ff:d9:91:01:31:ab:cc:46:65:2b:62:f7:06:69:36:
e8:16:b1:44:f5:32:23:ef:30:30:6c:db:70:6b:c0:
7b:6d:4d:fd:63:91:84:7c:c2:ba:95:b7:ee:2c:c1:
3b:1d:53:42:fe:e6:eb:d6:22:0e:a6:15:40:c6:eb:
af:b3:d8:fc:3b:d5:c5:8d:6a:5d:6b:a9:7d:7c:2c:
09:68:1d:37:72:b4:27:78:d2:2b:3d:ff:6d:34:a3:
28:cf:97:ac:02:4c:e6:36:b1:2c:41:4b:45:10:ec:
3b:33:7e:6f:29:31:1d:56:66:51:4b:f0:28:ab:2b:
22:28:5b:e7:2e:18:8b:8b:30:51:98:52:b1:3c:9d:
4e:ea:d9:3e:e9:6e:14:14:e1:f8:85:43:bc:9c:52:
4c:db:54:82:3a:22:ec:3f:ad:42:a4:5d:f2:5d:0a:
d7:32:2f:b4:ad:32:18:85:cf:ff:20:a4:3b:00:4c:
09:34:23:f3:da:e4:23:f1:af:23:3d:9c:67:76:c5:
25:e8:3d:fa:ab:2e:76:bf:c4:92:a2:d9:c3:32:4f:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:A6:1A:8E:9E:AD:93:30:5E:22:69:A4:38:25:51:6F:1E:15:A3
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:a8:70:d9:64:1b:61:b9:8d:33:fc:b1:4c:50:88:c6:ed:
2a:0f:57:a4:b4:63:f3:b0:eb:09:a1:55:e4:4e:47:6d:05:08:
3a:d1:d0:6f:9c:99:e6:8e:d2:d8:29:60:a5:5d:6d:b6:3a:c4:
68:e5:89:50:04:a1:7c:a7:58:77:bd:59:37:56:f2:8c:11:82:
f2:d5:69:19:1d:20:33:da:ed:e6:57:0e:ff:88:b4:a8:9c:60:
f8:85:98:65:ba:1e:2f:be:46:33:7d:4a:8a:ed:f3:42:26:58:
60:a4:5c:85:19:21:4a:88:b6:73:b2:40:76:73:bb:2f:2e:23:
77:de:09:e3:45:d4:d9:81:c0:f9:d8:c3:43:91:00:05:20:30:
3e:6c:68:43:72:74:4f:1d:8e:31:44:d9:cc:d1:33:69:74:0f:
e5:2c:d6:d3:c6:1a:e4:1c:da:7c:a0:2c:36:33:f3:c8:03:ed:
8e:3a:ff:dc:f7:e2:c1:18:70:63:7b:94:67:55:4c:ef:d9:d7:
a2:c7:3a:9d:5f:80:d2:9d:34:07:c7:77:d5:d1:1d:40:23:58:
d6:f9:2e:ce:a0:fd:32:b3:b9:4e:48:84:ff:5e:e1:8e:b6:7b:
c5:04:8d:78:bb:f2:ef:41:8b:1c:d1:12:49:52:28:65:ac:04:
fc:31:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:15 2026 by rpki-client