Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: 5WRrrQ/nDBUPKvFLUdBO5sgyfrGSFIQulBH5l6OBJB0=
Subject key identifier: 44:26:33:5F:C2:43:A6:47:65:A2:98:4A:DF:2B:AF:4B:27:21:8E:4F
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 01A06D9596B704947326E1DA96720320D221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:54 +0000
Manifest this update: Fri 04 Sep 2026 18:01:54 +0000
Manifest next update: Sat 05 Sep 2026 18:01:54 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: smGd0530C6PMJQ3Fcvm/VkNViXzL8q58TQrFevg9J1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:96:b7:04:94:73:26:e1:da:96:72:03:20:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Sep 4 18:01:54 2026 GMT
Not After : Sep 5 18:01:54 2026 GMT
Subject: CN=4426335fc243a64765a2984adf2baf4b27218e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:f0:7c:00:a6:8f:66:ac:27:f9:4f:d0:e5:
fa:ab:ed:36:9a:76:95:e7:44:db:ae:d5:1a:e2:4d:
80:12:c6:78:49:ee:c5:a9:46:6d:0f:0b:ab:ff:47:
f2:aa:ec:7d:8b:e8:6a:94:1f:dd:77:7f:c9:f7:a7:
6e:79:e1:7a:d4:50:1e:c9:ec:a1:6d:90:0f:90:a7:
6e:44:e8:84:79:45:cd:60:ed:f3:de:01:99:de:90:
26:2a:0e:5d:a3:98:9b:ad:fd:f6:e2:ff:4b:e0:ca:
79:40:26:f0:70:d2:c2:a5:f0:16:52:a1:01:1f:f5:
b6:71:e1:63:c4:e6:01:88:44:ee:a7:b5:08:54:5b:
8a:81:17:2f:be:70:1f:31:72:f4:9a:31:3c:2f:0e:
92:f4:61:e8:be:16:ef:71:99:7e:1b:26:c1:0c:24:
dd:59:3a:42:fd:0b:f7:78:87:81:cc:68:f8:f1:6e:
bb:ec:5e:0d:0a:69:53:48:4c:67:24:a6:81:b1:e2:
5d:75:d6:d3:0d:75:20:9f:fe:f9:0e:1c:80:b5:5b:
be:ca:2b:19:6e:65:78:1f:21:bb:12:ad:5c:56:94:
4e:8a:7e:38:1a:38:c8:e6:26:c3:a7:44:01:76:d3:
d4:02:cb:1e:1e:33:ba:ca:c7:f8:d5:0b:42:91:b3:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:33:5F:C2:43:A6:47:65:A2:98:4A:DF:2B:AF:4B:27:21:8E:4F
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:7d:d2:67:65:98:4b:9b:0b:70:64:7d:68:60:3d:b3:27:
23:89:c8:e3:5a:93:46:49:de:84:b8:84:ae:b7:d1:6f:fc:19:
a2:eb:3f:96:53:6b:ed:ab:bf:3f:bc:8d:dd:59:a9:76:8a:d0:
35:58:73:08:fd:dc:93:7d:b0:49:cb:10:35:43:d7:26:c8:29:
41:19:6e:4a:9a:f8:e0:ca:6b:b7:f9:f4:92:16:32:90:4c:31:
b8:7e:88:9c:4e:78:5e:b8:e8:ac:ec:d7:16:b5:74:f9:2b:dd:
be:52:08:52:6a:d1:5b:b5:f8:7c:9d:2b:92:7c:60:3c:a8:b7:
88:c0:20:34:9b:2b:5e:7d:e0:b8:37:af:8f:39:f1:5d:73:41:
f8:3f:e5:49:cd:1c:f1:b6:3e:03:25:08:66:b8:9b:97:a3:2e:
06:fb:92:ad:f1:e2:c0:23:1e:27:18:c7:9a:db:61:ea:55:83:
15:c9:47:3e:1b:6f:e5:49:f0:97:bf:cc:c0:63:12:87:5d:52:
b2:f7:96:7c:dc:1f:43:20:8b:47:12:c9:0d:07:74:1b:0f:c8:
06:3b:c9:27:e6:d6:f2:a8:7d:23:c6:56:ee:e1:61:9f:0c:d4:
c3:33:fd:3b:eb:c1:28:40:ff:57:a3:41:f6:39:b9:61:29:f6:
ff:53:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:17 2026 by rpki-client