Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: ljLAVCoyGbN8xjNG/hWPZ7v2TxRICRP+6uYjEiJlrAk=
Subject key identifier: 6D:61:60:28:C0:AF:C7:83:3A:2B:2C:3C:0A:01:E1:04:4C:61:B2:7D
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 01A18186CE995D7F2818AED1FEF8C17D453C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 0B8D
Signing time: Wed 28 Oct 2026 08:00:57 +0000
Manifest this update: Wed 28 Oct 2026 08:00:57 +0000
Manifest next update: Thu 29 Oct 2026 08:00:57 +0000
Files and hashes: 1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: 7QMug9ZJ9EuJaRi+sw8rih7URZUYVeAFvzoeKeJMA/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:ce:99:5d:7f:28:18:ae:d1:fe:f8:c1:7d:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Oct 28 08:00:57 2026 GMT
Not After : Oct 29 08:00:57 2026 GMT
Subject: CN=6d616028c0afc7833a2b2c3c0a01e1044c61b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:66:6c:68:5a:d4:9c:ff:32:d4:8f:97:9d:
09:0e:30:54:43:f5:9b:bb:50:d3:54:f2:77:1b:1b:
99:62:ab:15:40:33:e1:b8:a3:ec:6c:9e:60:76:e9:
3c:23:1d:5d:7f:bf:77:4a:54:13:63:92:04:df:1e:
83:d5:e0:86:f2:79:6f:2e:4c:77:b6:b8:28:f3:73:
96:46:a5:a7:20:a4:44:8d:65:1b:f4:96:c6:b2:9c:
cc:3d:a8:fd:07:39:2c:5a:39:ea:7d:09:1b:d0:7c:
dd:ff:46:32:48:ab:5a:aa:88:e3:5b:14:d0:46:98:
f5:99:f6:4c:f6:4c:3a:5b:c5:04:9d:29:9e:c1:51:
57:34:f7:73:20:49:a7:05:84:22:84:27:65:a0:02:
a0:d3:aa:85:9f:5e:5b:49:72:8d:f5:7f:f0:3f:fb:
72:4e:fb:51:bc:98:b3:b9:d3:ce:90:71:2e:a4:6b:
69:af:ae:bf:36:57:95:44:86:e9:bd:d4:f4:a0:a7:
ee:24:71:ed:2b:31:72:3a:51:49:3f:85:ac:d3:6b:
64:0a:27:dd:6e:65:84:4c:59:1d:ac:bd:8f:5e:42:
36:19:1c:12:c0:09:95:32:5c:30:73:c8:0a:af:72:
83:a8:7f:af:00:af:3c:64:3e:91:6e:8a:8b:ac:5e:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:60:28:C0:AF:C7:83:3A:2B:2C:3C:0A:01:E1:04:4C:61:B2:7D
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:78:86:e1:0a:06:cb:f4:9a:5b:8e:d7:8d:90:e3:ce:e1:
47:44:02:47:de:cb:03:bf:c6:9e:eb:34:ea:46:c5:d1:2d:f6:
59:18:0a:ed:3e:1a:04:a7:77:c6:36:52:20:bc:c4:bd:3c:44:
f2:61:fc:83:41:f3:8b:e3:e8:0e:00:0c:76:fc:89:3e:6b:57:
b3:95:0e:3d:00:f7:f5:e6:54:61:0d:12:ba:b3:4c:c9:9c:33:
fa:e2:22:7c:b6:e7:bd:39:8f:b6:6b:bf:be:5b:17:f8:4b:3f:
4e:50:51:3e:34:e8:90:55:20:96:03:c7:8d:fe:74:e0:a8:5d:
83:a4:75:f6:c2:ae:77:13:33:ba:bf:c3:ef:7f:9a:6a:ff:a1:
7d:d0:f4:af:0f:af:09:40:1e:b8:7d:11:b9:c6:7a:dd:f3:75:
a8:86:c7:26:41:00:c1:07:4b:06:0c:dc:81:32:2e:d1:02:99:
85:f1:94:cf:02:ec:e3:4e:c6:50:88:aa:d0:95:40:70:0f:a4:
f6:8c:53:8d:a1:0e:d5:e1:a7:8d:c0:84:d5:82:c5:ba:62:13:
ee:ac:53:99:9c:9d:9a:8d:b5:5d:e0:b5:4f:e4:68:ea:94:4e:
1b:ce:02:dd:3c:23:b1:3b:cf:30:07:b2:c0:c1:65:c9:89:e5:
6c:ec:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:15:52 2026 by rpki-client