Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: a0zzAlecfErsAEAfbRXIOeS9Mh2SLLTACWeARNifUws=
Subject key identifier: 40:F2:78:82:4E:A0:E5:BB:C9:0A:31:49:E4:64:3F:4C:69:09:1D:C5
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 01A03C3A36FAB325673F071DBA067DD27E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 07D1
Signing time: Wed 26 Aug 2026 04:00:43 +0000
Manifest this update: Wed 26 Aug 2026 04:00:43 +0000
Manifest next update: Thu 27 Aug 2026 04:00:43 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: bc/gPhGq5hcjKGMIFRjH3xUH8yn/WNwkOx/vYV3MD+8=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:36:fa:b3:25:67:3f:07:1d:ba:06:7d:d2:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Aug 26 04:00:43 2026 GMT
Not After : Aug 27 04:00:43 2026 GMT
Subject: CN=40f278824ea0e5bbc90a3149e4643f4c69091dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:5b:29:ec:3e:e2:9f:52:03:fd:1a:40:40:
8c:40:5e:6d:05:48:a2:c2:51:ea:dd:ee:0f:6e:a0:
0f:b6:b9:5b:e7:b1:0e:26:a9:e0:d5:57:e7:35:95:
4d:73:b6:b7:89:64:41:66:e4:77:f4:09:ba:3c:b3:
c8:ad:8d:40:30:47:3e:69:03:6d:e8:5e:de:2e:ba:
d5:40:54:a0:05:14:84:5b:eb:d5:0a:ac:70:5e:52:
67:c8:b0:a0:30:6b:d3:37:14:ed:e4:c8:79:31:4e:
61:d5:59:e1:28:ae:3e:5c:79:46:58:da:35:1f:e7:
f0:ae:21:9c:da:a5:94:c3:0e:98:22:fa:08:1b:3b:
bf:68:3f:40:d0:59:8d:fd:1d:9b:90:54:51:34:c9:
eb:e2:75:2e:5b:2e:16:28:6f:c6:89:2f:00:29:2a:
19:ca:4f:9e:67:bf:d5:eb:64:7f:04:70:57:16:ef:
40:22:e4:2e:53:ff:34:65:ef:3d:11:70:75:8b:08:
d0:cf:b1:6e:1e:b1:9f:22:20:19:d1:cc:fc:8f:df:
59:6a:0e:42:11:c2:3f:f7:5f:e9:70:4a:eb:77:ae:
6c:77:3f:3a:02:ed:cc:81:85:85:0b:1e:cc:33:01:
94:8d:47:33:5c:d1:28:66:8c:d7:a2:f6:65:be:30:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:78:82:4E:A0:E5:BB:C9:0A:31:49:E4:64:3F:4C:69:09:1D:C5
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:00:dd:45:25:fc:18:51:39:f2:ba:a3:f4:f1:0d:b5:9c:a4:
18:07:16:ab:5a:f3:3a:97:47:ea:cd:aa:6e:47:4d:b7:2e:53:
9a:2d:49:8a:a4:8f:f9:ee:f6:32:a3:a2:c2:c4:45:9f:05:40:
9d:21:67:e7:14:c6:b6:64:cd:03:b3:3c:3f:7f:35:4e:b6:1c:
eb:94:de:f1:c7:9c:2c:d9:e0:0f:b4:30:c2:8e:d2:76:b0:1f:
bb:5a:6f:3b:35:7b:6f:96:1d:61:62:02:f0:1f:bf:03:72:82:
ca:e4:b2:e1:38:36:c8:15:fb:86:a3:87:12:8f:22:1c:3e:67:
17:0a:e7:20:78:a3:90:50:ef:ff:53:a8:98:3b:ca:cc:39:7d:
67:07:1f:13:40:0e:d8:3f:48:15:85:16:f6:18:6b:db:bf:b0:
26:6c:57:5e:4b:aa:05:10:21:29:6a:ac:13:b9:2b:99:d4:28:
58:f3:5c:df:a0:d2:69:35:06:4c:ac:0d:38:f6:54:f2:9b:31:
20:1d:fd:12:c6:bf:eb:58:10:18:4a:ae:1f:fc:f6:d7:b7:bf:
08:f5:6b:8b:c6:5f:42:fe:34:b4:f5:bc:e8:44:32:d1:00:b9:
6c:42:19:b3:84:14:6b:85:c2:e3:ea:fe:25:34:f0:65:de:8e:
b2:7f:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:41 2026 by rpki-client