Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: IJaYiK/EX/XrdsPWv/WtS+BtNl/Zeqgf/R631CG3RnY=
Subject key identifier: BA:11:B1:00:54:41:C2:2C:32:38:33:73:EE:CD:E4:C6:DF:99:D5:43
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 01A08D564C8934D430627492EF6E0F4F0E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 03DE
Signing time: Thu 10 Sep 2026 22:00:38 +0000
Manifest this update: Thu 10 Sep 2026 22:00:38 +0000
Manifest next update: Fri 11 Sep 2026 22:00:38 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: 72Eu0kevyBkvhdw1Z5xzjblyxWLhGjtqzVXHPKWXurU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:4c:89:34:d4:30:62:74:92:ef:6e:0f:4f:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Sep 10 22:00:38 2026 GMT
Not After : Sep 11 22:00:38 2026 GMT
Subject: CN=ba11b1005441c22c32383373eecde4c6df99d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:6a:18:dc:ef:7e:87:93:e3:de:d6:3b:45:
f8:55:54:68:c8:cb:3d:96:72:e2:f0:8c:f9:6c:15:
f7:d0:57:19:95:98:c2:ae:97:cc:b0:d6:36:3e:68:
80:23:3d:2c:49:d8:37:a8:4f:5b:1b:22:d9:8e:03:
77:be:52:6c:bb:f7:14:39:c8:06:e2:75:8a:6c:38:
92:85:3b:c2:4f:70:48:ab:5d:f3:d9:82:c0:eb:13:
95:ec:30:7f:f9:9f:82:3c:b4:aa:77:10:38:4b:8f:
b1:34:97:5d:81:c2:3c:c9:f8:71:18:e8:91:02:7d:
9a:c3:f8:9c:65:f8:af:80:f0:01:76:b2:07:d3:31:
e5:16:d7:c1:94:17:36:a2:59:9d:9f:28:d8:23:fc:
89:a5:4a:7e:98:49:ed:68:c0:3f:08:cf:1a:b7:33:
37:ce:52:5f:30:a1:fa:7e:18:f5:2d:6e:67:73:07:
79:55:e7:bf:4f:4e:01:f3:db:01:df:0e:b8:5d:37:
66:a7:d7:71:82:90:0f:1f:b7:5d:13:57:75:bc:69:
b2:0a:a1:d4:3c:0d:2b:b2:95:10:b2:ae:62:3a:f0:
ef:d6:83:a5:a2:6a:e8:d8:17:53:ae:9a:55:c1:c1:
c2:93:30:04:e5:ab:9e:3d:62:f1:dd:f7:4e:9c:11:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:B1:00:54:41:C2:2C:32:38:33:73:EE:CD:E4:C6:DF:99:D5:43
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:ae:31:b4:5d:32:16:56:c9:a1:11:34:08:30:a6:f6:60:
2f:04:98:87:30:13:72:46:3e:ce:39:02:da:c2:be:4c:b1:40:
93:84:1e:07:f6:4c:82:f6:78:a5:80:58:c1:e1:a4:f6:55:42:
b4:a2:fd:88:2e:49:b2:02:bc:49:50:42:aa:5f:63:0a:97:a4:
e5:57:84:eb:23:30:2b:fc:65:87:a9:31:04:6e:79:d2:e8:6e:
f5:a7:67:44:9e:86:c9:35:9a:98:a2:aa:c9:34:de:bc:79:35:
b4:d3:86:6d:ff:ba:12:ba:26:39:fa:f6:f7:26:75:90:79:2b:
74:16:c8:73:24:53:48:6c:de:6f:33:be:4c:04:2d:98:56:91:
7c:68:e5:fb:30:8b:38:26:7d:66:ef:ec:04:c1:53:58:55:51:
c1:55:f5:73:71:1e:10:0b:d2:9f:2b:a3:51:2b:8d:73:11:2b:
33:a0:e8:e3:c1:7a:ed:09:26:3f:15:a2:1f:73:fc:60:fc:90:
40:c0:b7:f8:0d:a3:5f:e8:e9:c7:f8:78:ea:eb:a5:8e:32:1a:
ec:05:9c:24:46:3c:55:49:23:5a:c5:4d:9b:89:dc:68:c8:5a:
08:b5:07:23:55:7d:b2:60:70:4a:f0:89:19:ba:8f:16:ab:14:
45:91:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:47 2026 by rpki-client