Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: 9IFCKw6QdoD7UJ4eKPrLEqQzfLlYT74MylAVhnx3aNM=
Subject key identifier: 83:6D:B2:BB:6B:E1:B5:9F:C6:D0:7A:2E:0C:51:A3:7E:24:1B:A1:EC
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 01A17DE2079750AB95D52E30694CCE270754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:02:07 +0000
Manifest this update: Tue 27 Oct 2026 15:02:07 +0000
Manifest next update: Wed 28 Oct 2026 15:02:07 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: L0H1TkAFP+zDC9ODpbnL9oBGoSPUsvXmmXm8i4G0Neo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e2:07:97:50:ab:95:d5:2e:30:69:4c:ce:27:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Oct 27 15:02:07 2026 GMT
Not After : Oct 28 15:02:07 2026 GMT
Subject: CN=836db2bb6be1b59fc6d07a2e0c51a37e241ba1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:6d:09:c6:ad:b2:5d:9f:13:d1:3d:9c:f7:
07:a2:4a:d4:0b:48:67:1f:7d:8d:24:45:34:88:08:
1e:86:bd:1d:80:12:03:a2:52:db:2c:bf:ad:7b:5b:
d5:3f:87:e3:39:e4:a1:a5:93:ec:8b:90:dc:ca:04:
dd:ac:58:12:e3:e2:d9:68:c9:ea:ee:d3:91:bd:46:
1f:7b:58:85:9f:a1:c6:be:f0:6f:ce:17:36:ee:d6:
44:41:4e:e0:e1:94:11:fc:86:1b:53:ac:63:80:0b:
b3:54:14:63:6e:bf:cf:f6:13:29:2d:f2:0b:ec:90:
d3:c2:8e:43:2b:f2:14:a3:de:59:69:4f:a5:f1:ce:
4e:18:4c:f3:65:2c:3b:3c:05:91:52:e7:5d:f5:bd:
e6:95:98:72:f5:b9:3c:4d:7c:f7:72:e1:9d:17:24:
c6:86:bf:92:d2:ee:47:87:8b:47:cc:b1:fe:c9:c0:
64:03:c8:0a:92:4f:ea:cd:3d:38:e1:2d:44:c6:e7:
e3:f4:43:27:a7:87:2f:dd:e6:59:a5:4a:0e:18:a0:
15:9b:25:1d:c7:3b:d7:34:8f:fe:bc:ab:07:71:18:
a1:77:46:8c:7d:c2:7e:34:c4:69:c0:3d:d9:bb:bf:
31:b9:42:40:70:60:7c:12:70:24:26:5f:a0:2e:2d:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:B2:BB:6B:E1:B5:9F:C6:D0:7A:2E:0C:51:A3:7E:24:1B:A1:EC
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:68:30:35:51:e0:c5:43:6f:02:8d:ca:ac:04:a3:9e:c2:
d6:9c:5b:0f:ee:11:fe:df:ce:ae:08:4c:d1:87:40:aa:12:35:
15:aa:cd:82:20:5f:37:fe:a3:aa:d8:51:54:89:9c:0b:57:3c:
29:ff:ce:7c:f1:0c:01:da:52:24:1e:2c:6e:39:b1:c7:50:49:
67:fb:f8:e4:fb:38:78:ab:5a:80:f4:dd:64:54:f9:b0:02:f2:
2d:25:3c:e6:e0:c2:fa:a2:c4:bf:98:44:73:ae:e4:5f:14:d6:
4a:eb:7f:45:28:77:d2:05:60:0e:36:07:c4:01:2c:7c:eb:7a:
f1:6a:1b:d7:0e:ff:f7:67:3d:17:a7:f5:02:5d:8f:f1:1e:43:
dc:f0:86:2d:31:18:a2:ed:4a:33:8c:36:97:d6:b3:85:17:f2:
98:46:b4:ad:82:6d:c7:5a:44:cf:67:0c:94:28:6a:f9:3c:8d:
e0:25:2a:02:fa:a8:26:f3:d4:52:9d:96:16:32:6f:fe:3e:d6:
6d:d0:1b:db:77:1f:b9:20:bb:f0:74:84:dc:ee:a7:00:d6:3f:
ae:6c:5e:42:25:28:2a:10:2d:30:82:fb:c2:bd:03:8d:6e:e5:
30:dd:76:a2:10:09:56:56:e7:b8:82:b2:98:63:11:af:a5:ab:
3d:fc:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:25 2026 by rpki-client