Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: i9ROY37LrkPjaa3++6kD7pNI9E5Zt+fiXhWwQs38iu0=
Subject key identifier: 89:EF:DE:7F:30:97:74:02:BB:9C:D3:C5:F1:4B:62:D7:79:AF:84:C4
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 019DD12C9F2386B335E44F55C083FAB00D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 09A4
Signing time: Mon 27 Apr 2026 23:00:55 +0000
Manifest this update: Mon 27 Apr 2026 23:00:55 +0000
Manifest next update: Tue 28 Apr 2026 23:00:55 +0000
Files and hashes: 1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: N7woqYl9xEvpflktMS9O3GvmVWIe0LcMj2gYrGXNZXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:9f:23:86:b3:35:e4:4f:55:c0:83:fa:b0:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Apr 27 23:00:55 2026 GMT
Not After : Apr 28 23:00:55 2026 GMT
Subject: CN=89efde7f30977402bb9cd3c5f14b62d779af84c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:8e:2d:bd:29:a6:db:2a:4a:3a:fc:bd:02:
d4:1e:1c:38:4d:75:0e:fe:a6:88:ad:ed:85:a4:28:
bf:4d:28:da:38:ea:b4:38:5e:7a:0d:e6:0f:49:92:
f4:ea:30:94:23:4f:45:9a:0d:69:82:a5:35:f8:2f:
1f:55:8e:c3:05:bd:e1:34:01:bd:e3:b0:c6:2e:1a:
9c:f5:b7:a5:c7:2d:3f:12:de:00:8a:27:52:6c:2e:
a2:a3:09:9c:a8:a3:63:43:96:c9:31:3c:8a:97:de:
2c:62:34:b4:b2:b2:3b:7e:28:4c:08:4c:0d:1e:f7:
26:4b:2e:1d:31:e1:da:10:be:1b:52:8b:e6:f9:c5:
ef:50:f5:d0:3a:cf:4b:2a:81:0d:9f:78:cc:e6:e8:
2d:51:34:e8:b1:6e:f5:2e:c4:b8:5b:13:9a:81:e3:
e2:1d:9e:c1:64:1e:47:42:c3:01:33:b1:17:2f:1a:
0a:65:c4:e5:4a:cb:80:45:3e:72:6e:ea:09:45:e3:
1b:08:7e:13:84:4d:0f:5f:9b:aa:a3:ac:43:a8:35:
80:cb:7d:f6:1e:1a:f4:d6:68:5d:c4:b1:b9:3c:95:
67:78:0b:55:a5:68:4b:dc:fe:66:85:78:a9:e4:1a:
ba:1c:35:99:9a:bd:31:64:ec:e9:01:1c:69:ea:cc:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:DE:7F:30:97:74:02:BB:9C:D3:C5:F1:4B:62:D7:79:AF:84:C4
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:d9:74:3c:15:39:27:35:56:45:f5:eb:d2:c7:fa:bd:e5:
5b:2c:44:61:4b:73:59:ce:62:89:ae:49:a3:07:73:06:0d:f8:
a2:c4:49:6d:c8:45:c9:5b:fd:7a:03:bb:35:ff:1f:7e:e3:cd:
60:b4:a8:9f:ac:99:f5:7b:a7:40:08:bd:e9:cc:36:d1:75:da:
03:0e:6c:e5:02:e0:e0:6d:44:78:7d:e5:5d:96:9e:8e:54:45:
8a:31:0a:d8:86:d4:8b:f1:a9:46:b0:57:06:37:83:39:c3:b7:
f8:c8:94:41:17:c6:89:5f:1b:3b:2a:a6:d1:8c:d3:9c:48:7b:
14:66:9c:d0:58:f2:b9:1d:f7:b0:85:cc:c6:95:ec:7b:2f:90:
b2:9e:3e:37:4a:9c:7f:0d:db:ee:3a:0d:5a:f0:99:a5:95:02:
c8:06:ea:c4:bb:b0:f7:7d:5c:86:87:9a:02:c7:d0:27:33:64:
f5:fa:9c:6e:ab:2d:95:fc:9c:ee:9a:2e:e2:2c:36:64:1d:f1:
6e:bf:a5:70:e1:22:62:5e:ca:6c:c0:37:31:d4:53:a2:f8:9c:
ec:57:42:5f:94:bd:e4:9c:fb:75:6b:fb:a0:aa:6f:11:eb:bd:
67:53:cf:5d:b5:bb:3d:e1:0c:2f:ab:81:23:00:6b:c0:af:43:
24:16:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:47:55 2026 by rpki-client