Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: NwnGgi5dKZjzl5xl37+DlgFaJd6SkMY1ykN/+mJQXO4=
Subject key identifier: DE:56:30:D2:B5:9C:4D:55:F9:96:2F:02:7A:B2:56:81:C8:75:01:B9
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 01A08C43823BFE59D2E8A065507925CD7791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0AA6
Signing time: Thu 10 Sep 2026 17:00:29 +0000
Manifest this update: Thu 10 Sep 2026 17:00:29 +0000
Manifest next update: Fri 11 Sep 2026 17:00:29 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: GGfNYGI9DXjcmxaV+JWjNfZoimTP5/SiV8yEXAzp/RM=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:82:3b:fe:59:d2:e8:a0:65:50:79:25:cd:77:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Sep 10 17:00:29 2026 GMT
Not After : Sep 11 17:00:29 2026 GMT
Subject: CN=de5630d2b59c4d55f9962f027ab25681c87501b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:a7:3d:c4:af:93:44:49:9f:c0:0b:b6:c6:
85:76:f2:66:0e:c2:30:71:99:5e:52:d3:34:0f:2b:
87:0a:bc:c5:51:4a:2f:6e:db:6a:e9:75:91:89:67:
02:0d:58:07:af:c6:1e:b6:2f:9c:80:0a:d9:ee:bb:
01:f5:74:fa:cd:1e:00:85:d0:c2:22:b4:2c:0d:b3:
bb:b0:f7:73:3f:26:e6:b7:28:9f:2a:f6:96:c0:d0:
7f:7e:48:f6:c3:41:59:43:9b:da:f1:b6:b4:3f:21:
5c:07:38:31:b9:42:ba:eb:9f:68:2d:68:96:a9:59:
29:cb:b7:43:38:8c:a2:75:cc:fd:59:bc:94:96:33:
08:f8:e3:c5:af:9d:27:d4:f6:e1:b6:59:20:d9:6f:
80:11:df:80:40:f3:0c:80:e9:26:08:24:9d:e6:b8:
4f:90:ba:cb:76:4c:6c:ac:be:c8:69:26:23:d2:58:
da:5c:b0:a9:25:21:c9:8b:60:27:f7:58:fc:c2:82:
61:17:9a:ca:b1:bf:53:d0:57:9a:11:dc:84:95:63:
fe:b7:bd:9d:2c:85:38:db:4d:ed:d4:a3:b5:fa:6f:
b9:d8:06:fb:a9:9f:46:96:a2:ff:7d:74:4e:8d:e0:
65:ff:90:9f:68:90:5f:5d:08:91:c3:87:ee:48:cf:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:30:D2:B5:9C:4D:55:F9:96:2F:02:7A:B2:56:81:C8:75:01:B9
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:51:c6:02:5c:f5:12:84:0a:f2:9f:58:75:93:fd:ec:a9:
83:39:09:ba:7e:19:96:01:e9:91:9e:fd:97:3d:f3:d3:7e:ae:
91:db:ab:00:25:31:fc:f7:7a:c7:ca:92:b8:1d:fd:3f:08:50:
65:8f:40:b8:97:b5:63:b2:ca:9d:e8:44:f8:75:76:db:c9:6a:
da:71:75:62:ff:1f:3b:6c:2f:12:96:38:6f:15:fd:b9:a5:b1:
68:1d:5a:b5:6a:bf:67:fc:4e:d7:bf:0e:5a:6a:76:16:b8:f2:
4c:4a:5b:1b:15:10:3d:6c:77:b9:0c:3a:3d:e4:3b:83:18:d2:
a9:6d:5e:e6:75:87:ac:ce:00:99:8d:8a:48:03:2f:26:b5:a8:
1d:4a:f7:09:97:95:d1:5e:7c:7d:7b:59:fa:74:7d:09:29:ba:
c9:06:2f:51:48:9e:e2:95:26:7c:e7:40:d4:6e:fd:7a:4c:ab:
10:49:e9:19:ba:98:aa:c4:f1:c6:e5:5e:b7:17:d9:c4:7c:1e:
7b:14:90:0e:58:bb:ad:10:16:33:93:8e:26:29:7c:dd:93:99:
d1:67:b8:06:29:67:d5:83:6b:e7:07:4f:6b:88:d2:12:55:56:
77:d1:c9:d4:ce:46:30:8c:4b:8e:64:45:50:a3:ef:cb:5c:cb:
cd:a4:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:14 2026 by rpki-client