
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: yX/J3OHc3neFNvUQg8JsdP1E2BCkxD+dPj70I+l/ob4=
Subject key identifier: D7:CF:B3:76:29:88:42:F7:4D:C6:AF:68:02:A7:A3:4A:44:EC:5E:3F
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 01A08C0D9D610191E051C31703768A62CF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0B67
Signing time: Thu 10 Sep 2026 16:01:37 +0000
Manifest this update: Thu 10 Sep 2026 16:01:37 +0000
Manifest next update: Fri 11 Sep 2026 16:01:37 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: h4LB2Z0x/nCwFzKOTY9r15lwHUTFdneBiJoR8THKVVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:9d:61:01:91:e0:51:c3:17:03:76:8a:62:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Sep 10 16:01:37 2026 GMT
Not After : Sep 11 16:01:37 2026 GMT
Subject: CN=d7cfb376298842f74dc6af6802a7a34a44ec5e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:80:e7:5c:00:f3:82:b0:42:f5:89:38:ae:
9f:9f:ce:82:f1:15:6a:78:9f:b7:9d:c5:09:ff:75:
9c:7d:ea:95:1a:e5:9e:1b:44:94:7d:ba:89:bc:92:
5c:03:28:e2:e1:6e:76:4d:38:79:ff:05:26:29:a5:
22:af:4e:c6:e9:8d:a7:4f:5f:93:67:98:95:dd:1d:
00:e0:92:46:16:aa:f9:58:81:c3:27:b6:89:43:60:
92:a2:81:08:1f:8d:81:9d:18:01:61:9b:74:f0:df:
96:45:b6:5b:3f:85:0a:c8:42:3e:78:0c:d9:91:1d:
df:29:49:5d:71:4c:6a:da:3a:18:a8:a8:ea:3b:23:
93:af:8e:cd:73:ee:cf:33:a8:b7:f0:3a:ac:b2:2f:
c0:e7:d9:29:6f:98:8d:db:4e:fe:08:11:c8:48:50:
cf:5b:f0:76:88:59:a2:f8:49:10:cd:17:94:6e:8f:
1f:fa:e3:9e:a0:99:51:df:21:3c:a7:e4:43:b9:6b:
8f:8b:0f:a8:e0:3d:1c:60:1f:54:6e:71:6a:22:f5:
68:f6:db:7e:0d:84:67:9f:7b:46:3e:e7:e3:d8:62:
31:98:e4:18:71:fb:a6:cc:02:dc:e4:c1:70:b7:ff:
82:23:f5:47:ae:e0:9a:bb:04:03:d7:b1:3b:7a:60:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:B3:76:29:88:42:F7:4D:C6:AF:68:02:A7:A3:4A:44:EC:5E:3F
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:53:5b:bc:3d:36:c6:04:aa:1b:18:87:70:4f:93:6d:1b:e2:
ee:dc:d7:07:97:b3:2a:af:82:c5:f4:87:4f:20:6a:0d:c7:86:
32:3e:bb:d2:13:1b:0c:96:20:59:f9:e3:59:46:95:97:fc:19:
fe:5f:0e:87:0c:44:79:17:34:e3:b6:9f:a6:d2:e6:98:1e:04:
2b:8b:f4:48:b1:f3:92:20:60:ea:b9:0e:c9:07:f7:68:ce:8f:
dd:ed:c7:ff:96:aa:49:2b:26:51:c1:c9:9a:63:b3:c9:ff:dd:
7f:58:61:4f:5f:36:61:f0:ff:e5:02:5d:fb:30:cc:e5:fd:38:
2e:f7:b1:85:71:56:cb:c4:55:d2:be:2e:69:18:0f:22:e6:30:
ee:83:60:8f:60:f6:74:4f:b9:6f:88:9a:7a:62:26:fd:e5:3d:
5f:11:b9:8f:34:2a:a2:ee:a3:09:d6:57:b8:04:ff:e2:66:a0:
32:81:25:15:4f:ca:00:15:cc:1f:c9:22:26:53:da:d8:e8:3f:
de:b2:37:42:30:ef:86:f5:0b:68:81:41:6f:df:ea:55:e2:05:
32:c1:0c:66:ff:d1:49:d5:5b:0f:6e:48:83:86:0e:3f:b9:f1:
0e:0d:55:8a:14:6c:ef:2a:38:80:5a:74:fb:4d:60:1b:2c:94:
ed:94:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:49 2026 by rpki-client