Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: zalRxhkG2vmmTFYD2k/ziwUjtRL0ee+7wXknYQWeGb0=
Subject key identifier: EF:E5:AE:7C:57:38:45:9F:4E:F0:E9:9A:26:8F:91:37:8D:25:C2:A6
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01A0E81C75FA44D24120047FF4A6E4104404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 13:02:54 +0000
Manifest this update: Mon 28 Sep 2026 13:02:54 +0000
Manifest next update: Tue 29 Sep 2026 13:02:54 +0000
Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
2: fndZHS6wausEk7LMJwg-iWqkX-c.asa (hash: wY8kQN7C6jpcyRMX1u3cHnZoIcbOK0EzmdgU7lU1Xq8=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: k9H8IrUdM5VJyBJ+0h8e7fqvxQnZpbYjWNOjaZIUsFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:75:fa:44:d2:41:20:04:7f:f4:a6:e4:10:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Sep 28 13:02:54 2026 GMT
Not After : Sep 29 13:02:54 2026 GMT
Subject: CN=efe5ae7c5738459f4ef0e99a268f91378d25c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:2c:63:ea:65:28:dc:6d:bd:61:e8:83:eb:
5b:cb:51:92:f7:33:48:f5:ad:f9:3e:9a:94:dd:61:
5c:16:42:90:d1:b3:ec:26:89:fd:ba:43:73:be:40:
6e:e9:ef:27:81:0c:b1:1c:6a:f2:31:29:fa:c3:dc:
8b:71:5d:c7:3b:63:c8:79:b9:df:bd:53:97:76:15:
94:6a:b8:22:fc:1e:c7:60:69:01:63:c1:e2:f7:ae:
5d:83:35:30:e6:21:f7:49:fd:81:15:3b:fa:25:63:
32:93:8a:95:b6:78:c0:23:9d:bf:bb:a5:5c:dd:40:
6a:8b:9b:1a:87:20:12:c5:db:16:51:1c:fa:f3:98:
ce:62:64:fe:d8:2d:76:6a:36:95:42:1a:41:0b:2e:
b0:82:e7:0c:4d:73:46:38:da:20:97:31:95:b1:bd:
b5:4b:02:ef:61:b8:fc:21:6d:31:5c:a6:a0:af:8b:
63:f1:4f:3d:1f:74:4e:22:b0:65:57:e4:36:52:58:
f8:af:87:22:7b:57:5e:28:6d:98:6c:d8:2b:2e:69:
35:1c:b7:6e:0c:a2:f8:88:3d:b5:52:16:48:1e:76:
49:ed:66:48:de:ae:b1:7c:b4:97:36:bc:56:66:07:
ac:c5:92:80:e8:da:03:c4:9f:50:7a:6f:17:ec:cc:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:AE:7C:57:38:45:9F:4E:F0:E9:9A:26:8F:91:37:8D:25:C2:A6
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:27:80:18:18:2b:93:88:5e:96:3e:c8:eb:00:50:08:d6:ac:
97:5a:94:3c:00:36:ba:f0:d9:31:3e:a1:73:0c:f5:8f:93:68:
cb:05:0c:ea:3a:ff:95:c3:6d:47:2e:ff:0f:65:33:7b:56:6c:
cc:01:8e:1c:32:d5:33:67:80:48:b4:6a:54:c5:ad:51:67:ca:
19:01:f1:1f:ea:f7:96:3a:50:86:8e:79:ce:f9:6c:1e:08:80:
a6:99:0e:f9:01:d2:3e:68:7a:50:1b:14:b7:54:b8:c8:9c:da:
e9:8f:d8:43:54:8e:aa:59:7b:bd:2d:f7:aa:20:3c:01:46:d5:
d0:95:6a:54:f6:fb:76:af:5b:f8:a3:c8:5e:44:6e:34:1a:98:
4e:8c:23:27:cf:03:e3:42:4d:6e:7b:0b:3a:d5:7b:ce:22:7a:
b9:05:e4:c9:78:e1:83:2c:57:83:80:4f:32:1e:63:00:00:47:
68:c0:01:e5:f2:fb:6b:68:8e:60:89:5d:b9:8f:c3:38:9d:30:
09:59:e8:f5:ed:06:6b:bd:34:fb:c8:67:1d:59:31:96:ee:88:
6c:71:c9:ec:3b:fd:c6:ab:d5:84:e3:54:f7:d2:ce:f1:cf:d2:
d8:52:79:66:df:4f:77:b9:43:f4:20:dc:f2:27:69:41:3c:f1:
44:c9:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:55:59 2026 by rpki-client