Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
File: jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json)
Hash identifier: vG7+zrQJ6vjxjirC4X1lWkYv8kQm0EpxJHiVlVll9XE=
Subject key identifier: 12:43:46:26:E0:94:36:40:A1:3D:B9:17:81:4A:5A:75:65:11:52:28
Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
Certificate issuer: /CN=8d7b242cc7406235382324058c91dafc63990026
Certificate serial: 01A03970C26077955CB0AFB29B5DEB8927E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
Manifest number: 02B6
Signing time: Tue 25 Aug 2026 15:01:26 +0000
Manifest this update: Tue 25 Aug 2026 15:01:26 +0000
Manifest next update: Wed 26 Aug 2026 15:01:26 +0000
Files and hashes: 1: ViAGgGMP8tjX4dX7fa8-4EuXDPI.asa (hash: iudEKv9JULJb4ZORQPgBjMDE7t10hoMYz/3tClWkHX4=)
2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: xOhzacxq0O3qaA+ku/5tlYxS+hVr7JpE86cnnZex/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:70:c2:60:77:95:5c:b0:af:b2:9b:5d:eb:89:27:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7b242cc7406235382324058c91dafc63990026
Validity
Not Before: Aug 25 15:01:26 2026 GMT
Not After : Aug 26 15:01:26 2026 GMT
Subject: CN=12434626e0943640a13db917814a5a7565115228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:b6:27:ac:24:d0:85:a2:e5:32:f5:34:00:
0d:e1:da:97:a4:33:8a:5d:a4:2d:63:03:57:8b:b5:
f8:90:d2:25:18:a8:26:e4:32:e6:16:03:97:f3:6c:
4b:40:f0:a7:1a:b3:bc:5e:ca:8b:5c:38:8b:9b:82:
64:c5:11:b6:f2:45:97:14:77:52:a6:82:82:33:d3:
44:12:d2:c9:78:0a:19:66:25:8b:b3:44:c4:23:27:
33:80:3e:ec:02:58:5f:45:9f:84:5a:b8:1e:89:09:
42:62:52:ad:18:10:2a:6e:ce:f5:69:e2:b9:b2:96:
8d:2a:7d:f7:cd:d9:d3:0e:7a:34:64:ce:af:02:4f:
05:53:2a:ca:0d:be:5d:29:cd:88:e4:69:37:77:10:
4d:33:71:8d:ec:46:e0:72:ed:1d:77:d2:d6:1b:3f:
cc:31:cb:90:e4:47:33:b4:3e:34:67:b3:dc:a8:df:
1a:83:28:7e:47:c0:8e:79:59:1e:d0:d3:b8:42:22:
2e:f6:97:cc:4b:ae:b7:51:34:4b:92:a6:93:b0:e7:
bb:21:5f:f4:3f:01:02:ad:0f:da:73:b2:88:9b:39:
9c:f3:e7:ca:d8:5d:79:90:0d:dd:59:2e:ba:55:12:
c8:d1:64:a5:82:87:9b:70:7b:3d:1d:ce:c0:16:ef:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:46:26:E0:94:36:40:A1:3D:B9:17:81:4A:5A:75:65:11:52:28
X509v3 Authority Key Identifier:
keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ae:3e:8c:3e:9b:50:9a:70:01:ec:11:f5:9d:73:db:59:9b:
31:5e:ac:7f:4b:9c:18:60:5e:dc:95:1b:6f:88:d5:b4:8e:c3:
b6:ef:dd:41:d7:8e:13:3c:74:c0:c1:6d:f1:a7:85:35:03:b9:
e8:69:b4:d5:07:05:58:bc:1d:87:9c:15:3f:dd:e5:23:6d:52:
a8:72:f4:46:50:45:8e:ac:4f:f6:ce:d7:68:b8:ae:eb:4c:c3:
b3:ae:72:c5:2a:ee:9b:cc:a7:49:bc:e3:41:28:81:9e:f6:0b:
f5:41:b6:6f:be:03:d6:39:34:25:59:cd:50:ab:9c:04:a0:d0:
67:cf:0f:9b:1b:42:98:c9:e0:48:cc:e5:d6:51:e9:3c:e4:3f:
5f:58:86:9a:a3:fd:34:df:34:2f:63:e7:ba:b2:d5:f5:88:64:
38:c9:80:37:db:1a:f9:0d:e7:8d:82:dd:61:0c:42:f5:02:b0:
78:0d:c9:c1:12:31:57:f3:50:45:83:fa:65:b0:39:e4:82:f6:
f5:06:f8:1f:6b:79:7b:9e:1b:04:36:72:76:47:41:e8:a0:bc:
f6:95:19:14:53:4b:16:f5:44:11:ec:dc:26:9d:46:cb:f4:d5:
f8:67:9b:8b:f2:17:21:1c:f8:de:2f:ff:64:6f:55:cc:37:7e:
9f:8f:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:45 2026 by rpki-client