Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: qkJdBwTh7Q9fELA2xx98bJQ1/P7nOZxj65JvPaRdjZ4=
Subject key identifier: 10:3F:0F:8A:3A:3E:5D:D7:E1:78:B8:11:A8:37:6D:89:78:52:08:BE
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 01A0878C39F344F5764D5F4C194C66F8069C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 155B
Signing time: Wed 09 Sep 2026 19:01:48 +0000
Manifest this update: Wed 09 Sep 2026 19:01:48 +0000
Manifest next update: Thu 10 Sep 2026 19:01:48 +0000
Files and hashes: 1: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (hash: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc=)
2: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: c+nTJjFK2IvkdfpIlEkqGQUildsvdpeaxJ7poFMZJ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:8c:39:f3:44:f5:76:4d:5f:4c:19:4c:66:f8:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Sep 9 19:01:48 2026 GMT
Not After : Sep 10 19:01:48 2026 GMT
Subject: CN=103f0f8a3a3e5dd7e178b811a8376d89785208be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:19:21:77:62:2d:06:cf:12:da:e6:09:ff:
57:da:96:0e:8d:95:20:6f:26:6b:f5:2a:d4:c0:7e:
b2:00:c7:cd:c0:97:13:1c:bd:13:31:1f:16:b7:8c:
62:52:44:ab:ca:f2:12:4d:83:7f:60:cb:6d:66:1a:
41:86:e7:2d:a2:5d:c9:e6:22:52:63:b5:f4:23:16:
cb:34:04:35:7c:e7:72:08:44:84:ba:9e:b5:3d:76:
2f:bf:53:b4:58:67:f6:b9:45:bf:96:96:53:d9:77:
30:8b:e6:47:35:d2:50:65:bf:16:d6:82:bc:6e:e9:
7b:83:4f:a0:f6:be:4a:ae:96:56:c2:e0:e0:b0:2a:
d3:73:a6:8b:a7:f0:dd:44:e5:b5:75:70:e2:b2:ca:
5f:e5:e9:d8:f0:fd:73:0e:09:a1:da:f2:e9:50:cb:
99:ec:65:31:f2:c2:2a:3b:a2:f7:27:e8:15:01:2d:
24:06:53:0d:02:62:07:6a:c4:66:75:aa:50:ed:16:
9e:18:a9:52:5d:6d:69:8d:2c:70:d8:ce:e4:d1:56:
1b:f0:49:cb:2b:ec:59:a7:55:19:23:14:cf:c5:68:
e1:1a:5e:fa:75:07:c3:5c:68:fb:28:f7:22:62:7b:
00:7b:a6:bf:8a:c6:ee:92:35:32:ff:4a:46:0c:17:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:0F:8A:3A:3E:5D:D7:E1:78:B8:11:A8:37:6D:89:78:52:08:BE
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:e1:98:06:fd:77:45:d3:71:29:78:01:50:86:54:c8:66:
84:9c:2a:9b:99:ee:d3:6c:a4:9c:0b:ac:2a:8e:ef:64:2f:49:
30:60:af:27:74:70:c3:43:76:f1:b6:48:2b:2f:30:c1:18:92:
b6:16:72:39:4f:3d:57:3a:4e:6c:3e:6e:b2:d9:83:0d:8f:c8:
73:05:ea:d6:86:0a:85:3c:cb:41:13:f7:ab:2e:b8:8d:d7:22:
ee:7f:73:74:c1:d1:cf:50:9a:8a:0d:c7:7a:0d:db:d2:e1:f0:
43:3f:67:19:e7:8e:17:8c:de:0e:9e:1d:5c:08:b0:72:91:f5:
61:5b:3b:16:06:8a:6f:72:94:f0:7d:ed:03:9a:67:b3:ea:d3:
e6:41:dc:49:ad:23:09:56:ea:4a:02:9f:33:68:d4:99:88:17:
bc:ab:fb:53:50:1a:53:d1:e8:f2:94:fa:33:38:f1:07:8f:e6:
71:09:b6:5a:91:66:c8:95:33:9f:dd:28:d0:4a:8d:d4:e9:3d:
67:b9:aa:dd:af:ab:ae:9c:5e:68:da:6d:f9:00:5c:44:b6:a2:
32:41:61:d5:99:b6:7d:3e:b2:3a:b6:bb:3b:5a:dc:fc:21:26:
fd:01:ff:90:f3:61:17:39:f9:b7:02:7e:28:bd:6a:66:8c:c5:
6d:44:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:04:18 2026 by rpki-client