Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: Z/yl/r/jFSWZEVhxS7gxyOdsFJOlzMIYLHwk1OpoX+A=
Subject key identifier: 85:95:D0:68:C7:C5:2D:3C:CC:91:A4:1A:C9:6F:E9:3B:E6:45:CE:06
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 01A17882F8971E8AEAA156A93183DB4C68CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 12E0
Signing time: Mon 26 Oct 2026 14:00:11 +0000
Manifest this update: Mon 26 Oct 2026 14:00:11 +0000
Manifest next update: Tue 27 Oct 2026 14:00:11 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: BK1EDPYo6W/fsN0BYWjn14095VnLMhkIy/Eyf+keNC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:82:f8:97:1e:8a:ea:a1:56:a9:31:83:db:4c:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Oct 26 14:00:11 2026 GMT
Not After : Oct 27 14:00:11 2026 GMT
Subject: CN=8595d068c7c52d3ccc91a41ac96fe93be645ce06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:e2:60:8c:11:bd:8b:c4:0c:08:9d:d8:f3:
ff:a2:2d:39:9e:13:d1:4b:f5:8e:9c:5d:4d:20:50:
e0:07:99:4f:49:49:16:1c:36:ea:9d:b8:a3:90:c0:
20:4d:e1:87:d0:de:9e:7d:f2:8f:e2:fb:a6:83:03:
25:ef:de:b7:c7:e5:47:6f:90:86:9b:c8:38:fa:f8:
9f:6b:a0:c2:be:f9:c7:8f:ff:39:65:2d:23:fb:46:
48:d9:bb:79:89:80:e0:79:a3:61:ae:f1:34:28:ee:
a3:56:3f:1c:20:e2:86:a6:7f:80:78:3c:bf:c2:55:
24:f4:af:3b:32:ff:46:6d:44:c9:ca:3a:99:fd:db:
93:c4:92:5c:fc:8f:07:b8:b5:8f:2c:89:93:d3:82:
f3:9b:01:31:2e:08:41:b2:39:69:3d:a7:f7:a6:b4:
85:07:39:3a:46:df:6e:20:9f:97:6c:05:73:97:1a:
36:cd:93:17:bd:5a:ad:7d:ed:4a:77:25:46:cc:79:
1e:9c:a7:78:19:d5:d3:9a:3e:d4:26:d3:19:f0:6c:
9d:fc:9f:38:22:0b:ab:17:ed:62:2e:93:7e:c6:41:
a1:6b:b4:d5:4c:ff:7f:c2:98:80:26:32:6b:c6:9e:
ac:38:67:94:71:a9:3b:d5:8b:b2:24:05:9d:2c:d8:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:95:D0:68:C7:C5:2D:3C:CC:91:A4:1A:C9:6F:E9:3B:E6:45:CE:06
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:67:8a:07:6d:da:a0:f9:fc:e4:58:5a:6c:1e:b8:3e:3e:
22:3e:1b:4b:f4:ad:b8:8a:54:4c:2c:f8:de:40:9b:be:a6:42:
4d:2b:5f:5b:4c:18:7c:13:ed:c8:23:f1:87:7e:2c:6e:1e:b5:
dc:29:cd:42:51:41:b7:7b:27:78:50:3e:19:0a:d2:52:89:4c:
f5:ad:bb:8d:f3:fd:64:83:f2:d0:ca:24:55:4b:53:76:3a:d5:
85:44:29:01:bb:6c:77:33:36:69:52:5c:5c:78:dd:72:bd:a2:
8a:f4:cc:0a:d0:3a:20:62:13:fe:90:60:4b:ed:d3:3a:d2:f4:
cf:7f:d3:87:0e:f6:30:45:0c:54:ce:a3:c0:90:95:b1:65:0d:
d4:57:09:9f:06:48:2a:3a:d6:7a:22:30:c2:06:40:e2:64:57:
96:61:5a:11:11:75:c1:61:de:84:fa:db:43:9c:8d:1b:9e:2f:
ef:18:e5:18:43:1a:3a:5d:b9:0f:c7:f8:d6:42:8c:9d:0a:2b:
21:3b:83:78:88:2a:67:c2:68:3d:e2:aa:4d:49:8a:79:8a:80:
9f:41:0c:4f:e7:f0:1b:e9:a5:c0:38:7b:0d:03:39:d2:8d:9a:
84:93:fb:e6:61:7b:60:26:fe:3c:e4:96:ab:dc:5a:9b:42:00:
1c:84:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:23:29 2026 by rpki-client