Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: xOJe1SCKFaHwSGCQkvoXPTf294z7c/hlpmip3W2ZTjE=
Subject key identifier: 11:35:67:19:2D:5B:FC:F2:A7:A9:4C:F8:D1:D0:BB:EA:84:5C:56:D9
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 01A08A8D6807C7CBEDDCF24189909F8314D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 0CD3
Signing time: Thu 10 Sep 2026 09:01:57 +0000
Manifest this update: Thu 10 Sep 2026 09:01:57 +0000
Manifest next update: Fri 11 Sep 2026 09:01:57 +0000
Files and hashes: 1: GyqUfMO0Omp9MapGvwm3OQxHuzY.roa (hash: eLOF15igrreolUrbJjNbYGfrAHmsABhFJ5BXUuXuCaI=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: cBn3zqoQPXrJtELppFk1/oevnXcmeIVEArcMqTOrSZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:68:07:c7:cb:ed:dc:f2:41:89:90:9f:83:14:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Sep 10 09:01:57 2026 GMT
Not After : Sep 11 09:01:57 2026 GMT
Subject: CN=113567192d5bfcf2a7a94cf8d1d0bbea845c56d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:25:b8:c7:28:33:9d:ef:4b:67:5e:43:87:
a5:0a:14:27:b9:2d:65:b1:1d:6b:00:92:f7:6a:df:
9b:98:cf:2a:c4:6c:a3:51:7a:26:c5:bd:c4:ac:ee:
24:48:17:9d:70:64:04:d9:d5:38:1f:6b:47:7d:75:
36:03:06:37:0f:92:2d:08:af:17:88:89:6f:a4:4d:
d1:c1:1a:6b:2e:1f:43:fc:00:ba:88:7a:52:0f:9d:
69:ff:a5:11:4f:32:57:5a:1c:22:e6:ad:fb:57:53:
b0:b9:a8:28:6f:56:ea:7b:19:ba:53:4d:31:22:e5:
ef:01:e4:7c:65:59:35:9c:85:64:bb:21:52:b4:12:
77:0f:9e:1d:b5:ce:27:62:a1:8f:96:20:41:f3:42:
57:a6:99:fb:47:bf:79:4d:3d:4f:18:31:b3:f4:7c:
16:03:97:45:92:a6:85:9c:bb:92:90:bc:ac:cc:57:
76:cd:6e:01:9c:4b:43:53:da:8b:20:12:ff:18:36:
e4:8f:8c:4a:ee:74:1f:c2:91:b5:7e:6c:15:03:e4:
bf:4a:bf:2a:f1:95:23:c4:0f:5c:20:32:55:9b:0b:
f6:21:98:9b:54:bb:62:9e:06:3f:af:69:46:04:57:
0c:a5:ce:a2:f2:bb:49:51:3d:80:ac:fe:0e:1f:c4:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:67:19:2D:5B:FC:F2:A7:A9:4C:F8:D1:D0:BB:EA:84:5C:56:D9
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:be:5a:97:aa:86:72:c8:04:39:0d:ec:63:50:96:24:04:
23:87:d6:d7:e4:b2:75:9a:26:41:5a:ab:71:15:50:04:ae:88:
41:72:43:c6:24:a8:e2:cb:60:55:0a:e0:c1:4e:c2:69:59:50:
95:57:77:1e:31:7b:20:7e:7e:9c:08:65:68:98:0d:7a:0e:95:
f3:9a:a2:e3:fd:e0:e2:d4:d5:32:2a:7d:f9:e6:1f:92:67:27:
8f:71:f7:d5:4f:18:75:78:18:d9:7f:a7:0d:6a:ce:4a:bb:7c:
dd:56:d0:3e:06:99:21:15:0e:0a:a5:00:85:89:6f:22:2a:c4:
6d:eb:7f:2c:20:f5:55:91:9a:3b:cc:c1:09:ce:8b:bb:92:3a:
15:fb:c9:18:62:cf:03:b0:cc:51:54:87:09:8b:99:eb:f1:fe:
2e:a5:d0:60:19:75:d8:e9:aa:29:6b:9b:b5:65:98:e2:32:e2:
59:77:8e:ba:35:93:71:14:45:b2:40:df:d4:ae:b6:6d:fd:f1:
49:c7:dd:44:8e:94:95:ed:e6:34:ca:5c:61:bb:54:3b:05:86:
ca:84:c7:33:65:ed:b3:9b:ed:ba:dc:fe:a6:08:53:3c:5e:8e:
3e:c0:9a:67:80:0c:00:00:b8:1e:fd:ad:bc:23:5e:f8:da:55:
3b:b5:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:26 2026 by rpki-client