Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: Xxn4dZMX0UWoo10JYkGawHKLDt7ooOyjjM34iZIOO64=
Subject key identifier: B4:79:A9:B5:46:F3:FD:41:B4:34:92:93:DD:7E:66:06:9C:04:35:B2
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 01A089B077FDD1166DE1D6C9C0ADA655413B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 04FA
Signing time: Thu 10 Sep 2026 05:00:38 +0000
Manifest this update: Thu 10 Sep 2026 05:00:38 +0000
Manifest next update: Fri 11 Sep 2026 05:00:38 +0000
Files and hashes: 1: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: WfAxRNzhV5E+Sux1ynMDQV29zN2kqanW9Loyg8LVPmc=)
2: q2iMHMpPinukFM5Qhc4ZwsftRx0.roa (hash: +p+ImNbpg+AUu5Y3P8c/ugT7MQsuGHh+4k2E8cJ52tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:77:fd:d1:16:6d:e1:d6:c9:c0:ad:a6:55:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Sep 10 05:00:38 2026 GMT
Not After : Sep 11 05:00:38 2026 GMT
Subject: CN=b479a9b546f3fd41b4349293dd7e66069c0435b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:c5:4a:10:73:84:78:aa:2e:29:d8:cd:b4:
04:72:bb:79:b1:67:cf:5d:75:8e:99:c8:9d:a3:3a:
58:c4:96:0c:68:80:0d:4a:a1:48:b4:29:ba:db:43:
4c:dc:de:1b:e8:72:a0:1c:5a:57:ef:96:f3:99:cf:
c9:60:7e:2e:11:1a:7e:30:5f:e2:d1:3f:96:6b:37:
97:c3:9a:9e:60:90:c2:13:4c:e1:e7:fe:d5:f4:b8:
f6:8e:73:ab:4a:75:c8:a3:49:29:a8:21:b8:8b:ba:
a8:14:31:09:57:57:52:3d:5f:f1:81:1a:34:9c:a8:
89:83:cb:7a:42:4f:14:14:f8:82:f3:85:21:2c:69:
65:3e:43:e5:b1:5a:08:03:9f:13:5e:dc:d8:fb:f0:
c1:a2:2b:26:67:eb:22:3f:88:85:e1:c7:d8:aa:9d:
9a:07:84:73:ed:77:e9:b2:73:42:27:ad:46:40:67:
44:0e:05:23:12:35:a3:2c:35:8a:d8:bd:25:7e:1c:
49:fa:0b:4a:82:e2:7c:0c:a1:c8:b2:7c:98:21:40:
68:b0:15:eb:ea:ae:4f:6f:17:87:88:5f:1f:94:66:
76:7c:b1:b4:2c:1d:be:11:60:fb:b4:f4:09:6b:9f:
e3:e9:35:76:33:9c:15:d1:dd:df:ff:47:fd:b1:1a:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:A9:B5:46:F3:FD:41:B4:34:92:93:DD:7E:66:06:9C:04:35:B2
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6d:f8:63:a9:c2:e9:be:f9:4a:7b:c7:a0:b0:74:6b:81:75:
11:01:63:86:84:1b:9b:00:64:8b:aa:f5:99:a4:d4:34:68:e8:
c2:be:20:7e:b3:31:21:36:ac:f6:f0:4d:1c:be:05:f0:a0:9f:
1f:eb:32:2d:15:cd:63:35:1b:6a:d6:20:c9:95:4f:2e:52:9e:
81:e3:39:bd:fb:b6:3e:88:35:b1:4c:26:95:50:ed:8e:82:6f:
31:09:15:94:59:05:0c:60:bc:bf:cf:62:f3:5f:f5:45:f5:30:
ba:5e:1f:98:90:10:13:1e:2b:a6:95:51:a7:59:8b:94:fe:5f:
b9:53:a4:d6:bc:0d:8f:c3:58:3f:32:63:74:54:ab:4d:3e:3d:
6a:ea:33:9e:02:56:e1:f1:e8:0b:a9:63:f9:93:f6:bf:21:b3:
55:0d:d4:df:f1:9f:df:cc:c0:88:21:54:fe:b8:08:f4:75:23:
88:d4:ef:e3:6e:ad:73:08:3e:81:8f:b4:c4:77:54:db:ef:67:
52:09:2c:32:de:a0:98:aa:bd:55:17:ce:d1:69:31:2b:63:2c:
da:49:1c:24:a5:46:fd:fa:38:3f:f0:af:b3:5e:59:62:20:90:
9e:73:a6:40:16:26:19:3c:4e:0a:c7:ac:3b:4a:46:7f:89:c8:
a3:06:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:27:33 2026 by rpki-client