Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: n4coEZ4nbBCy91S+309/7BlLHue69+eJsKxvnzPOLiM=
Subject key identifier: E3:B6:00:E0:84:A0:5D:A5:F7:32:EB:53:0A:AF:98:6E:FF:0B:CD:CC
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01A03B9535EF9E36CF7B2755671A69E6163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0717
Signing time: Wed 26 Aug 2026 01:00:29 +0000
Manifest this update: Wed 26 Aug 2026 01:00:29 +0000
Manifest next update: Thu 27 Aug 2026 01:00:29 +0000
Files and hashes: 1: MhtnbItfLmCzaCDCaCIpwP7CYj0.asa (hash: Z9SK9w4cz65U5hhOIchhgo/LJB/zpmrUHbelZFQj9A8=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: 1VxzGbSWza90hPZcXf23Hn+eRyHMMBNZGFUWvhFpNso=)
3: kiP1Rz2Pye239_k7zKt16ngvMws.roa (hash: yBmHRNv/foMNtquyhN6WcywCwjnz3nqPI2PwBXBJSX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:95:35:ef:9e:36:cf:7b:27:55:67:1a:69:e6:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Aug 26 01:00:29 2026 GMT
Not After : Aug 27 01:00:29 2026 GMT
Subject: CN=e3b600e084a05da5f732eb530aaf986eff0bcdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:00:09:9e:2f:3e:1e:a0:27:fd:93:90:3b:
27:be:3e:80:d7:c7:00:b5:8e:9d:7b:0e:47:08:fd:
c5:7a:1b:5b:cd:a8:e8:40:60:81:0d:b1:21:13:41:
6d:7d:34:e2:30:ae:88:21:ec:9a:6c:87:21:84:49:
93:0f:e9:a9:23:6a:b5:b0:0e:08:5e:99:7c:21:c5:
31:d5:a2:63:aa:3d:20:5b:9c:35:72:71:b7:fa:bf:
30:c6:74:88:e3:57:5e:9c:e4:69:6f:55:c3:97:42:
42:14:77:51:b3:90:41:86:25:9d:a8:c0:34:8c:08:
bd:88:f2:4c:84:b6:ae:c5:81:a2:e0:14:85:03:06:
cd:62:81:c4:a1:40:fe:f4:5f:f9:dc:fa:d7:15:68:
ff:f2:1c:cc:e0:7c:7a:83:33:77:fa:aa:89:88:87:
9b:33:73:b2:ff:0d:59:ca:2c:af:59:0a:21:19:1b:
5f:db:ff:d8:6f:04:02:90:e0:b9:f3:1d:63:48:eb:
25:34:90:99:3f:14:60:f6:23:5e:87:57:5f:e9:b5:
21:dc:1c:18:0b:81:a4:95:33:f4:ea:59:4f:4a:75:
5b:73:ca:c3:ca:80:91:72:5f:be:a7:89:9c:4b:b8:
6c:74:7e:85:d9:8d:51:9b:84:d4:00:78:06:dd:54:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:00:E0:84:A0:5D:A5:F7:32:EB:53:0A:AF:98:6E:FF:0B:CD:CC
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:73:91:4b:20:ab:40:a3:3d:1f:e6:20:27:c3:cb:b6:33:c4:
1d:3e:0d:27:81:3f:fc:d6:69:d1:38:57:2d:e2:82:d5:3b:6f:
02:c9:62:6c:01:57:f0:0b:37:86:82:d7:46:32:47:08:2f:9e:
16:f9:9c:80:28:8d:6a:15:ee:ae:ea:00:ba:da:44:41:8b:30:
88:7d:61:e6:7d:66:ec:98:98:60:88:b9:4d:77:b5:0c:d8:24:
fd:43:c6:8f:2c:c0:00:2a:ad:d8:a8:d2:67:93:39:f1:4b:12:
fa:e1:ae:de:f7:f4:45:eb:0e:53:ec:52:84:c6:cf:a7:80:05:
08:82:98:9f:8b:c2:bf:21:f6:5c:7f:95:db:1a:7f:91:3f:4d:
02:18:bf:46:36:42:47:ba:41:20:e7:38:3d:aa:f7:10:3e:1c:
38:82:69:95:fa:75:20:83:23:50:24:a7:04:bb:84:bc:43:ed:
01:0d:9e:56:16:8a:08:9e:89:1e:d2:8e:3b:68:1d:5a:87:99:
75:17:6e:4b:fe:a8:c8:2a:45:80:c5:5c:33:59:10:cc:d1:be:
f9:05:14:6d:4e:d1:a9:16:b4:05:fc:e1:fe:2d:a8:01:73:56:
aa:87:ea:7a:3c:02:9c:43:f3:cf:20:e0:27:80:4f:dc:f3:2b:
5a:eb:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:19:58 2026 by rpki-client