Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: MJQSvxrhFLdqb00so9Wzj1lpZtAoeEIL2F831B0TBBA=
Subject key identifier: ED:C7:97:E1:1A:9E:0F:DB:09:C3:AF:08:18:A9:58:55:F3:3D:25:CF
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 01A03DBA846CB2132D46C7E76839AD928454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 134F
Signing time: Wed 26 Aug 2026 11:00:28 +0000
Manifest this update: Wed 26 Aug 2026 11:00:28 +0000
Manifest next update: Thu 27 Aug 2026 11:00:28 +0000
Files and hashes: 1: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (hash: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 3tDDNkM19DaOmoXG6x9DL6klMPt9gK8WZx45vUJJU/Y=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:ba:84:6c:b2:13:2d:46:c7:e7:68:39:ad:92:84:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Aug 26 11:00:28 2026 GMT
Not After : Aug 27 11:00:28 2026 GMT
Subject: CN=edc797e11a9e0fdb09c3af0818a95855f33d25cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:c9:ab:d5:9e:18:b5:b8:87:8b:13:8e:ed:
c3:9c:97:3d:d7:ba:6b:8f:d0:2a:95:72:5c:6e:02:
21:56:3f:a8:88:e3:f9:eb:fc:53:14:30:f5:1e:b8:
0e:59:af:6d:e8:f0:ed:11:bd:c1:bd:02:fd:df:88:
d1:e1:94:80:8e:26:e6:d9:b0:59:25:6e:06:69:d9:
8d:78:a4:5c:48:62:99:ad:88:5a:39:26:86:94:9b:
51:a6:51:f7:f2:5c:38:e2:ea:ac:30:b1:92:92:7e:
b1:d9:0c:f5:8c:91:8c:88:86:ef:92:13:96:fb:71:
81:82:dd:40:d3:75:84:7f:4a:d5:67:a7:1f:03:7c:
d5:e5:56:1f:b1:d7:87:87:ff:1d:4a:14:0a:12:c7:
d9:97:38:6f:68:ab:24:ee:e3:16:c2:17:a6:07:fb:
83:ed:eb:60:a7:03:5a:be:69:eb:53:4d:34:61:1a:
44:e3:d4:ca:da:f9:91:c3:e7:c2:8c:c3:57:b9:56:
dd:7d:06:8c:e1:cb:e6:e3:6f:86:d8:b1:c6:7a:1b:
14:cd:ff:df:be:24:fb:37:7d:13:3c:3a:0b:64:e4:
49:58:d6:56:4a:cf:6f:ad:e3:59:ae:61:46:3e:85:
86:bf:b5:2a:48:ce:43:50:b0:5d:1a:2e:68:0d:8b:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:97:E1:1A:9E:0F:DB:09:C3:AF:08:18:A9:58:55:F3:3D:25:CF
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:fd:8f:4b:bf:b4:d1:06:e0:c5:39:37:4f:81:e1:3e:6c:
47:c9:b2:ab:44:32:68:e2:a8:8a:48:31:37:42:82:85:1d:b6:
5a:7b:54:63:18:33:02:f4:30:cf:69:7e:6a:3a:f5:62:38:83:
7b:55:7a:9d:8d:4b:0b:f3:91:da:98:ad:79:24:71:22:dc:86:
34:8e:d5:a2:40:0c:d4:bc:f9:e7:c3:9a:40:e6:2c:62:e5:b8:
85:8c:68:f0:fb:92:df:f6:d6:91:b5:74:34:82:dd:1a:18:38:
75:0a:cc:87:7a:a0:46:a3:1f:26:67:9b:ff:48:28:8d:f0:2b:
21:10:12:db:a8:02:c6:af:e7:e7:af:9e:ff:18:10:5f:85:70:
90:92:90:80:23:6c:ee:74:aa:de:8d:7a:b6:af:84:ea:8b:cb:
a7:da:de:18:5e:82:99:cf:43:60:67:c6:5e:3c:e6:73:ac:0b:
bf:1a:cb:71:77:cd:a5:86:c4:19:dc:f0:22:9d:e8:24:48:8d:
fd:62:55:5c:de:41:ea:a1:44:f6:8e:c4:18:f4:f3:e8:17:39:
21:8b:80:ab:17:a2:67:62:fc:35:c2:cf:9f:84:7f:83:a3:03:
1c:1d:25:73:b4:97:29:dd:30:3f:4e:31:67:75:9e:08:1a:44:
59:fb:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:55:28 2026 by rpki-client