Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: onOsy6tbPfsqLwBO4r9a4B8CWRPJD+77UPhJ8tv39rs=
Subject key identifier: AF:2B:2C:C7:1C:34:75:0E:92:2D:51:E3:5A:12:3F:A0:CC:56:27:FE
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 01A1705C084132A9DA0A3C96E826FFAFF600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 06AA
Signing time: Sun 25 Oct 2026 00:00:41 +0000
Manifest this update: Sun 25 Oct 2026 00:00:41 +0000
Manifest next update: Mon 26 Oct 2026 00:00:41 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: tumEGYWSYaz70IN61T5GlVlWy1/vdlgMifAIseqo5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:08:41:32:a9:da:0a:3c:96:e8:26:ff:af:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Oct 25 00:00:41 2026 GMT
Not After : Oct 26 00:00:41 2026 GMT
Subject: CN=af2b2cc71c34750e922d51e35a123fa0cc5627fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:cc:05:a3:37:fd:34:f3:f1:0a:8c:d9:5e:
f3:c1:ca:47:bc:d9:29:fd:df:f1:33:42:65:56:94:
cc:2e:71:27:69:e2:f5:97:0f:e2:b3:6e:72:46:89:
21:84:9a:ad:46:80:0f:3e:68:76:ab:45:93:23:7e:
9b:f3:65:c7:b9:55:f0:00:5a:44:7b:0f:09:e5:2f:
e7:14:f3:32:4b:b0:8c:bb:a0:fe:d2:f1:05:43:f4:
05:0e:61:77:54:12:35:28:55:83:dc:9a:5e:1f:5f:
70:58:14:cd:d3:ba:c3:9e:cd:9d:93:fd:80:2e:dc:
05:11:da:40:fc:94:0b:5b:92:ec:12:5b:c9:e2:34:
d3:ef:d5:ff:9d:f9:4f:9b:f6:e3:4a:74:27:cb:ee:
0d:34:70:cb:d7:57:bd:15:e1:c3:5e:d4:44:95:94:
18:25:6a:05:6b:d1:cb:92:f2:19:93:66:99:9c:ae:
cc:40:e9:8f:13:63:2c:ff:cb:51:d6:75:4a:54:0a:
53:c3:39:a2:a6:3c:60:fd:77:dc:e1:e0:4b:72:17:
12:79:bd:45:2f:76:4e:95:46:09:cb:6e:2f:1a:3b:
c8:23:58:79:b9:68:25:26:49:64:d2:06:82:a5:72:
b4:44:2d:d3:c7:d8:8b:84:b5:2c:b9:6f:db:47:47:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:2C:C7:1C:34:75:0E:92:2D:51:E3:5A:12:3F:A0:CC:56:27:FE
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d3:31:05:b8:07:d9:ef:2f:16:59:55:bd:3d:f8:65:b1:89:
39:99:47:d7:c1:1f:b5:33:6c:36:7a:8a:44:5d:d2:98:68:3b:
95:2e:4a:d8:e6:b1:6c:81:98:2b:09:d8:ec:3b:bb:4b:1f:56:
c7:42:fc:8f:31:73:d2:ec:a6:8c:bb:92:8b:0b:d2:0b:bf:b2:
01:1b:0a:fd:e0:c4:0b:7f:27:74:7e:ba:49:8b:41:5d:8d:8f:
52:3c:55:d4:a8:60:e1:b5:c3:bd:19:7b:e8:4b:42:4d:84:02:
57:57:98:3c:e2:9c:8d:27:fe:82:34:ff:2b:08:5c:a3:82:a7:
1b:ba:cb:3e:2d:a5:06:af:06:82:54:14:2a:86:fb:5c:d3:b6:
c7:3a:5d:0a:29:4b:dd:e9:df:f5:3b:d4:eb:5b:ff:5b:b6:fb:
ea:08:9a:a1:c6:e0:ca:e3:1f:b8:f4:23:c4:8b:ae:e0:34:98:
7a:90:d7:95:c0:d4:ba:80:46:90:d0:1b:b0:b2:63:73:36:5e:
e3:a3:45:0b:66:fe:e6:aa:e1:54:3b:5a:52:4b:8a:eb:67:ff:
5b:42:6d:37:f2:10:a8:0e:ae:79:21:f2:f3:ce:62:af:8b:f1:
b9:79:18:f5:09:74:14:0f:2e:65:b6:f1:64:c1:70:ee:e6:b4:
0e:fc:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:26:34 2026 by rpki-client