Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: YQA5UyhUacY4q4PVONNGAWnZ3OF5vlWdE7D1m7Iayd0=
Subject key identifier: 9B:B7:6E:5C:7A:9A:91:CE:F2:2F:E7:1F:03:A5:62:6B:24:F4:76:6F
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 019FDCF5624F56A579E1315F881C7DC3AA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0A09
Signing time: Fri 07 Aug 2026 16:01:36 +0000
Manifest this update: Fri 07 Aug 2026 16:01:36 +0000
Manifest next update: Sat 08 Aug 2026 16:01:36 +0000
Files and hashes: 1: gKVhxqv4c6TYFCTlETWXlilzluc.roa (hash: +yP4tQ6wyJ6Np/Xh+2U7DdYNmw4DRvDRrRoSP9Pt0e8=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: im976Mo084OIFBHK1NltaVk0fviAW22LiSVb3n8AAN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:f5:62:4f:56:a5:79:e1:31:5f:88:1c:7d:c3:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Aug 7 16:01:36 2026 GMT
Not After : Aug 8 16:01:36 2026 GMT
Subject: CN=9bb76e5c7a9a91cef22fe71f03a5626b24f4766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:cd:18:39:33:78:b5:54:91:24:3b:63:6b:
34:ff:5b:a2:c4:07:69:34:28:99:d7:b3:92:c3:94:
e8:63:46:63:54:5e:8a:93:b8:a9:99:68:3f:9c:05:
2a:bf:c9:54:4f:ca:b8:f7:9f:f4:09:52:5b:d0:b6:
62:da:89:c3:f5:5d:f5:fb:b0:2e:be:f4:71:b4:e7:
0a:92:bc:65:2e:f0:1e:db:a1:7d:ab:ab:2f:0e:ed:
2f:ab:94:e1:47:87:34:ac:64:e3:20:48:68:74:b0:
ad:9a:b3:52:e5:f4:93:dc:27:e7:14:3e:f9:0c:2a:
91:f9:45:d2:86:1a:ed:fc:01:d2:91:7f:74:58:f8:
4a:27:9c:ad:b2:a6:96:2e:03:ae:ab:0e:05:c9:02:
b8:10:17:d5:9f:59:bc:c9:59:c4:a6:7d:60:de:2c:
dd:f7:46:8a:ad:02:cf:bb:5c:16:19:95:02:f2:a4:
81:36:53:34:72:b4:ff:5c:c6:d5:5f:98:98:87:21:
f4:55:8c:32:e7:87:f4:34:7a:91:08:9a:be:0a:b4:
8c:c2:db:93:02:be:9d:de:38:4c:c0:5d:f2:f1:09:
25:9e:5b:10:3e:8c:e2:ab:30:2a:ae:7e:82:6a:b3:
aa:50:46:88:cd:95:5b:13:59:6d:8c:f2:16:17:92:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:6E:5C:7A:9A:91:CE:F2:2F:E7:1F:03:A5:62:6B:24:F4:76:6F
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:12:d8:19:f4:65:0f:8a:8b:81:44:32:f4:f4:bc:d5:e1:
72:ca:17:25:97:8b:4c:b0:bf:1f:5e:c3:47:09:c2:d2:f9:c9:
16:08:74:a9:33:a7:cc:3d:da:c1:63:0c:d0:10:61:61:8f:27:
28:8b:18:b9:23:1d:37:81:b9:9d:8a:8b:7c:be:18:44:0e:40:
92:36:e3:78:b6:1a:89:cf:ff:f8:05:8d:cb:b0:45:4b:af:74:
13:c1:22:ae:98:77:f4:ce:a0:a8:17:38:bd:d8:d2:4b:74:ea:
aa:48:5f:c9:52:56:36:63:fb:f0:65:6a:28:9e:5e:bb:85:4b:
f9:f5:8f:fb:ab:cc:56:eb:dd:2f:6e:88:bb:70:da:cd:51:03:
6f:e5:89:0b:d7:04:79:a4:3b:a8:b5:d8:3f:53:bf:61:66:20:
82:ca:20:84:aa:36:5e:f3:0a:5e:24:1c:a9:94:35:e9:b3:c5:
8d:1e:24:42:97:37:ac:b8:e9:63:a8:74:ea:b4:02:c7:9e:53:
2b:ee:dd:fb:a7:99:89:83:75:93:43:42:28:94:91:88:38:f5:
b2:cb:b1:87:99:f2:a4:a4:42:22:68:19:45:de:b7:85:45:6d:
f5:76:8a:82:29:57:da:8d:75:b0:2d:7a:01:05:5c:2e:c6:f7:
7a:23:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 01:13:48 2026 by rpki-client