Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: 9kaW/4E22bpIkJJrTPXqh6/vqjj27ytR8al06q6hPzs=
Subject key identifier: E7:A7:7A:12:D4:8F:7E:95:37:88:74:B6:5A:B0:F4:AA:6D:09:6C:19
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01A17BBB15DAEDE8A4B61B9D3D4185A9D122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 1015
Signing time: Tue 27 Oct 2026 05:00:20 +0000
Manifest this update: Tue 27 Oct 2026 05:00:20 +0000
Manifest next update: Wed 28 Oct 2026 05:00:20 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: m5dPzHZkTnL1N1M5XUmDzGaFIo/ZfbQo7UFBJEDV1RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:15:da:ed:e8:a4:b6:1b:9d:3d:41:85:a9:d1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Oct 27 05:00:20 2026 GMT
Not After : Oct 28 05:00:20 2026 GMT
Subject: CN=e7a77a12d48f7e95378874b65ab0f4aa6d096c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:cd:d8:38:d8:53:ce:72:c4:ce:e9:ee:14:
9f:89:73:45:80:94:e4:83:5b:80:87:e4:ae:77:4d:
f3:63:21:45:a0:d2:6b:b2:e6:9a:3f:69:a3:d2:3a:
43:ff:47:c4:d1:cb:f4:43:a7:8b:83:77:da:a6:5b:
d8:d9:3c:76:f0:e0:df:3d:3e:fc:ca:ae:39:1a:70:
8d:32:21:dc:0f:76:c7:96:f4:39:88:3d:7b:6c:22:
76:0a:e3:b9:73:9a:ec:a1:f7:23:ba:5f:21:76:fb:
45:eb:64:cb:bc:3b:17:e4:94:2a:2a:32:8a:0c:59:
c7:8a:81:b0:6e:9c:1b:53:ce:99:66:f5:5e:56:98:
8c:bd:bc:f7:23:85:a9:77:3b:b8:58:5e:de:8b:3d:
98:6e:e4:f8:86:bf:a7:2c:cc:b0:7e:44:2c:76:36:
d5:21:e3:87:8f:ce:f3:d7:d0:4e:05:8f:c1:64:33:
ca:5d:13:41:8d:16:8f:2c:f3:63:82:b7:d3:16:b4:
e1:3d:c8:6a:f4:c0:e8:d9:30:f7:ae:47:64:36:c0:
ab:46:3a:6a:7f:12:37:35:a7:fa:7c:ab:a6:20:11:
9d:a5:a8:fa:d7:ec:1e:e8:15:26:53:17:e4:ad:cc:
25:25:bc:8f:4d:35:b0:3b:dc:71:9e:58:f1:96:52:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:7A:12:D4:8F:7E:95:37:88:74:B6:5A:B0:F4:AA:6D:09:6C:19
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:15:48:4b:82:bf:4b:fe:9e:05:cc:e3:b5:16:5d:34:a0:
17:b4:52:d0:96:cb:a9:14:69:96:f8:fd:d3:2a:34:e2:fe:ca:
c7:e5:a3:59:87:65:c8:fc:12:5a:ea:64:95:2c:5f:4d:5c:ff:
80:cd:30:cf:44:61:70:b2:94:e5:82:30:50:2a:14:5d:fb:de:
9c:26:e6:80:3b:7f:d8:70:01:45:ae:02:82:ed:f9:09:56:92:
d7:73:b7:5a:b9:e3:45:c0:f9:39:12:43:0d:bb:ef:98:2d:33:
2c:e8:6f:47:28:3b:e6:09:59:45:5c:df:b2:09:97:e8:eb:e9:
03:6d:70:33:a7:1e:f0:5a:ec:a3:72:c0:fa:31:e0:6f:3b:31:
00:05:d0:ea:1c:3b:ea:45:45:84:90:65:9c:fb:0a:f8:98:1b:
36:e6:7f:62:8f:c3:6e:d4:b5:53:73:30:c8:c0:77:c4:61:24:
d4:f8:f6:4e:b1:3f:2e:12:e9:93:20:ae:72:da:f9:6d:ea:df:
7e:ff:6e:bc:03:ea:2e:7e:49:ec:9f:56:04:2e:0e:b4:fa:b8:
2a:0c:41:59:bd:e2:fc:b5:81:34:a2:bc:d4:22:67:d4:7f:6d:
09:b6:08:99:de:a0:85:06:24:e7:e9:b4:fe:d7:33:e5:56:a6:
ed:50:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:53 2026 by rpki-client