Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: +OhENFE6jnG99H4MYjwTNDsWbH9MTd64wo5PyirzP38=
Subject key identifier: 8E:08:9A:8B:D5:74:B3:AD:DC:27:E0:F8:54:EB:A6:22:ED:0F:45:CB
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019FFE3739317BCCA82D0225B6FF968B8F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 03:00:59 +0000
Manifest this update: Fri 14 Aug 2026 03:00:59 +0000
Manifest next update: Sat 15 Aug 2026 03:00:59 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: d2BS6B0c2fDgPGsEwIbyJSZvAhDlfE5PMX7c60zgITU=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:37:39:31:7b:cc:a8:2d:02:25:b6:ff:96:8b:8f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Aug 14 03:00:59 2026 GMT
Not After : Aug 15 03:00:59 2026 GMT
Subject: CN=8e089a8bd574b3addc27e0f854eba622ed0f45cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:88:40:b3:29:b2:33:5e:df:6f:36:73:c5:
99:11:b8:04:84:2b:4f:8a:da:6b:2d:ce:dc:e1:ed:
8e:26:60:08:bc:da:7b:7a:5c:92:10:b8:e8:1f:74:
a8:7b:d2:88:b3:cb:8b:3e:dc:b7:40:56:0d:bd:75:
be:2a:25:19:8d:76:a6:1e:10:93:1b:a6:56:ea:13:
cc:e4:5b:fa:f3:ce:39:5e:fb:72:d2:0c:32:2e:38:
71:a6:90:03:25:85:86:e2:14:4e:ec:41:0f:4b:e9:
0d:49:4a:2c:c9:30:97:1a:f8:0b:41:1b:5b:9e:83:
a3:b9:a9:be:75:47:08:c3:80:c4:3b:3f:aa:b2:65:
90:13:37:55:2b:b5:3c:65:dc:97:59:8f:45:8e:28:
1f:00:2e:15:92:14:53:bd:0d:1c:6f:ff:7e:f1:7e:
e4:4e:1a:da:10:71:db:ac:79:d5:f1:32:a2:3c:c2:
cc:32:ad:7e:65:ca:40:b4:90:00:fa:a0:32:d7:1c:
60:5e:7f:4d:b2:ff:60:8d:46:7f:68:29:93:6b:e1:
d8:7f:ff:df:f5:50:87:98:3b:dc:2d:c6:07:e3:2c:
ba:6b:39:2e:30:1a:16:02:9e:8f:37:b5:0d:61:2f:
e4:5b:71:8d:6c:dd:ed:3b:52:5a:2d:66:6a:d8:52:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:08:9A:8B:D5:74:B3:AD:DC:27:E0:F8:54:EB:A6:22:ED:0F:45:CB
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:f5:37:3d:b5:93:28:d6:ee:0a:3f:80:10:08:5a:9a:f5:
e3:3b:44:37:f8:af:78:73:a7:69:be:2c:93:ad:c7:9f:13:7a:
4f:7a:72:a2:a1:10:4d:99:aa:04:6b:66:49:0d:b2:4c:73:70:
3a:7c:b5:21:3b:1f:54:99:4a:f1:e5:68:55:26:ca:02:d2:43:
47:4c:60:ac:f7:88:1e:fe:2f:e8:0d:7e:8e:4c:3b:d6:8c:dd:
53:83:7f:08:89:2d:9f:3f:a7:d9:5d:2e:a8:3d:20:63:ad:5c:
22:58:1a:15:66:80:09:d3:d2:ae:2c:9d:77:33:53:5f:68:e2:
36:8d:c4:a7:71:07:d6:a6:3f:1f:62:c0:cf:50:1c:f0:fc:49:
50:89:01:8b:f6:d4:27:8f:91:1d:7c:fe:0b:c7:00:d7:06:1e:
58:47:5e:c6:29:6f:f1:e2:8d:df:40:d8:0d:85:89:a3:1e:6d:
3d:c1:35:7c:05:27:10:0e:c1:5b:ba:81:d1:30:44:77:ce:89:
da:10:32:f9:e8:0f:a6:ad:49:a6:27:f3:03:9e:f5:f4:a8:b0:
73:13:40:d6:03:db:11:c1:0c:d0:ea:b2:d1:11:f0:19:88:9d:
25:4b:18:18:5c:bf:81:dd:14:b6:a0:0e:6e:59:44:9b:fd:b1:
a5:2e:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:12:54 2026 by rpki-client