Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier: L2G6+sYC6htDjb/fRzF0uCER/Ern3VQ0S8wPpiaJLjI=
Subject key identifier: 0A:1D:3F:4A:2D:57:46:6E:2A:95:9C:EE:99:22:B3:5B:EB:E4:1F:55
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial: 01A1784C1128DBFFE00D42EA9B4C71303ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number: 08F9
Signing time: Mon 26 Oct 2026 13:00:13 +0000
Manifest this update: Mon 26 Oct 2026 13:00:13 +0000
Manifest next update: Tue 27 Oct 2026 13:00:13 +0000
Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: qiJVzKsy4MgzE4m2VgcmmrK4NetKuNcur77c8Vkvu+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:11:28:db:ff:e0:0d:42:ea:9b:4c:71:30:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Validity
Not Before: Oct 26 13:00:13 2026 GMT
Not After : Oct 27 13:00:13 2026 GMT
Subject: CN=0a1d3f4a2d57466e2a959cee9922b35bebe41f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:d7:49:bc:86:26:34:66:e1:aa:93:2a:dc:
2a:01:8f:fb:a9:4b:02:04:95:61:18:29:9f:96:d5:
48:8d:61:f3:42:1a:01:7d:74:26:79:44:db:f6:94:
d0:c6:58:15:9b:8b:dc:e5:36:c2:ff:dc:9c:a0:c2:
ec:b1:ea:4d:fb:cc:e5:07:ef:2f:0a:4f:08:e7:dc:
38:c7:6e:da:d4:1d:c9:3b:cb:37:21:0b:32:01:4d:
f9:f7:f8:f9:3e:0d:92:55:ea:a8:16:00:4b:d8:0b:
a1:8c:ff:12:66:d7:3e:2c:1f:28:ba:6c:3f:6c:61:
5b:6d:b0:aa:0f:31:1b:47:64:c1:d1:97:94:dc:e6:
cf:a1:fb:96:6f:c2:48:07:6e:83:93:80:31:1c:01:
45:8e:17:b3:97:64:11:4e:e1:be:e5:3a:95:5a:de:
88:d0:38:ec:c3:68:6a:d6:ba:1d:34:f4:5f:fa:88:
7a:61:f0:a8:22:55:b8:8e:45:c1:52:b7:39:b1:a7:
80:33:cf:3d:e2:8e:36:d9:96:4e:fd:0c:2d:19:68:
ad:46:f5:30:de:0d:f6:f7:67:2c:65:8a:71:04:df:
4b:74:a2:b7:ac:bc:69:2a:99:f2:72:9f:d8:e4:d4:
cd:e5:bd:98:2e:3e:d1:80:05:9a:a6:3b:c3:d5:44:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:3F:4A:2D:57:46:6E:2A:95:9C:EE:99:22:B3:5B:EB:E4:1F:55
X509v3 Authority Key Identifier:
keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:4c:ca:5b:ec:1a:5f:50:95:0b:07:79:29:ac:63:59:b2:
9d:36:33:22:05:37:64:ac:66:b5:4f:da:36:d8:b4:c9:87:fc:
a2:c6:c6:0c:6f:09:d9:3a:d9:64:dc:b1:ec:bf:ce:73:29:da:
31:6e:b3:62:11:38:43:a4:3e:72:22:23:06:d4:32:8e:35:bb:
88:dc:e4:18:6e:f1:4d:29:17:06:c7:44:03:ea:5d:7f:c9:ac:
8b:c7:8a:0d:0b:db:cc:a9:f4:22:0f:3e:fc:e3:1f:7a:f9:8f:
ef:f3:87:78:b3:03:e4:51:4a:1c:8a:25:9f:18:d1:7a:40:c8:
4a:8f:a5:c6:e8:54:af:eb:4d:20:d0:35:10:60:ae:71:69:58:
f0:30:10:49:e1:87:58:1c:f7:c4:ee:c9:09:97:18:31:a5:89:
ee:06:b6:5f:76:fc:b5:75:d7:94:58:e3:75:eb:c4:64:ee:d9:
47:0b:a5:df:1c:0a:2f:3a:9b:18:eb:1f:7b:44:dd:67:fc:d5:
ce:d7:31:28:0a:ed:57:14:14:f1:1a:ea:d4:de:02:ee:3e:0b:
62:1c:ae:36:ab:2a:55:bf:cc:87:5e:74:88:37:4f:3b:84:56:
4c:66:46:1b:59:4f:a0:2e:d4:91:d2:eb:28:ff:9b:27:f7:7c:
ac:14:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:19:42 2026 by rpki-client