
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: UmXqnLjGhA4IaSu/RZIL3/E23OHBt1Bx3w0xrN4PU7k=
Subject key identifier: 45:F2:9F:6B:5F:09:1F:F2:BA:6F:0C:F5:41:E2:EA:D1:E7:81:0B:77
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 01A17E17CF5037A2D73454620A72D1735FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 07BF
Signing time: Tue 27 Oct 2026 16:00:51 +0000
Manifest this update: Tue 27 Oct 2026 16:00:51 +0000
Manifest next update: Wed 28 Oct 2026 16:00:51 +0000
Files and hashes: 1: Bwg79WzNGXuNDZQSD0VsKUr5blo.roa (hash: /xVUo9naU8W1C7rWgQlkJRPv0Xsrg14Z0K50RIANuQ8=)
2: SoPl-FceNQvh4tMfOxE_AcHtfm8.asa (hash: cUeLaA0Vht9SwijgrX9Tc4UBzzMa5+2lTsXKWwL+29g=)
3: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: jnGq564bj30wSp0OB9qI/MqLEQ3YL/yYJDsgUNoV5V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:cf:50:37:a2:d7:34:54:62:0a:72:d1:73:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Oct 27 16:00:51 2026 GMT
Not After : Oct 28 16:00:51 2026 GMT
Subject: CN=45f29f6b5f091ff2ba6f0cf541e2ead1e7810b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:a8:4e:1e:d7:bc:7f:16:7f:d8:05:64:92:
90:8b:6b:24:69:3b:3b:40:d6:9c:35:94:86:9f:c6:
ed:05:7c:39:d6:a0:a9:78:8c:f1:db:20:57:47:3a:
0d:89:37:3c:4a:bc:4d:e4:03:55:53:b0:73:e6:74:
19:e7:10:3f:1a:ba:b9:7a:87:d4:fe:9b:fb:1d:34:
dd:4a:92:a9:60:27:6d:a6:1e:fb:ac:98:e7:48:f3:
c8:b0:a9:2b:ec:d4:33:22:36:c6:58:5d:5d:67:96:
15:d4:de:04:c7:e8:5b:cd:13:e6:61:33:00:40:eb:
f1:ab:2e:71:f7:5e:21:a7:ef:08:83:59:b0:bb:36:
00:db:bd:d3:10:4b:fd:27:6a:00:52:88:d1:e4:df:
1c:4a:40:ab:fe:1d:32:d1:a2:ff:d2:4c:1d:ce:15:
de:2f:ae:3c:fc:f8:67:ed:b1:83:66:c1:23:f0:6c:
0e:26:8f:d0:c8:cc:a7:ca:b8:73:80:a1:ad:55:7d:
0c:bd:93:6f:32:05:34:ce:e4:23:4b:48:06:71:0b:
b2:8e:6a:f2:ff:40:18:e0:38:83:b5:5b:4e:e9:88:
90:8e:d3:b2:4c:a1:c2:db:ed:69:08:d7:32:b8:da:
0b:d9:18:2c:27:da:8b:cc:22:3d:6b:70:06:86:75:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F2:9F:6B:5F:09:1F:F2:BA:6F:0C:F5:41:E2:EA:D1:E7:81:0B:77
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:91:3f:89:97:f1:99:74:a8:e4:08:c1:0d:a5:27:94:f9:3c:
5d:22:2d:c0:60:b5:38:2c:c3:3e:b8:d7:40:a2:a6:35:66:63:
fe:cc:d0:bf:fc:94:09:77:d9:00:b6:bf:ba:69:c7:d4:3b:e9:
13:2b:da:dc:9b:f8:76:6d:b9:f9:2f:fc:b6:32:86:dc:b8:59:
8c:79:1f:71:26:39:2e:87:e2:61:64:1f:0c:16:58:19:55:83:
f8:d6:58:3d:d3:a5:48:65:70:d5:86:69:75:40:6e:f9:7d:cb:
fe:57:84:b3:e3:15:09:95:8b:c3:37:7b:37:26:d7:05:f6:fd:
7d:ad:6c:69:59:25:56:1d:77:45:33:16:55:26:fc:b7:26:9c:
1f:55:e7:63:38:a7:69:06:f1:b4:76:1a:1e:b6:39:a3:0d:0b:
b1:fe:a2:75:51:bf:78:90:14:7f:f2:9b:37:1a:07:73:09:c5:
d6:40:dc:de:09:25:78:19:6d:f6:6f:af:a5:6e:51:3b:6c:de:
d9:8f:80:51:7c:5a:7c:85:a6:cb:d0:9d:3c:8a:a6:2f:4d:77:
0a:92:ee:51:88:26:ef:6f:62:cd:0c:41:ea:49:7b:ff:ca:03:
c8:d9:3d:3f:d8:f4:a5:5e:16:01:1b:7a:5a:94:ff:68:55:01:
62:ab:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:52 2026 by rpki-client