Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: Er6QuNrYSjRb7OQ0VpfHBncPZU0ChcejAs4wRru0iQY=
Subject key identifier: 6D:11:9A:4A:19:BC:74:38:53:3E:B4:C0:7A:6E:B2:DA:A3:3B:24:9B
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 01A08C7BF5D49851EC4B2DA3704302FB9AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 18:02:09 +0000
Manifest this update: Thu 10 Sep 2026 18:02:09 +0000
Manifest next update: Fri 11 Sep 2026 18:02:09 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: qp6FX9OUtaWTI3V5bJMFh3cttqF6XbIyyMUo/Ya/iQg=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:f5:d4:98:51:ec:4b:2d:a3:70:43:02:fb:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Sep 10 18:02:09 2026 GMT
Not After : Sep 11 18:02:09 2026 GMT
Subject: CN=6d119a4a19bc7438533eb4c07a6eb2daa33b249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:a3:8c:98:19:03:3c:cc:56:b3:29:93:4b:
cf:f7:40:37:1a:2c:f2:bb:97:b1:ac:93:da:b8:ff:
cf:69:2a:31:51:be:fa:21:d5:6f:31:c0:3d:e9:a9:
cd:d1:1c:cc:bb:9b:52:3a:f0:68:fa:ac:78:b4:3b:
08:16:54:3d:38:a8:d4:dc:2a:62:47:bd:6f:21:a3:
4a:c4:54:01:14:c4:4b:7d:15:b5:63:c9:86:d1:47:
16:52:9c:35:48:d0:c3:86:4d:51:aa:cd:67:65:90:
8a:8a:5b:f1:7c:f0:25:63:0c:28:0b:da:94:6b:ed:
f9:7d:ac:9e:31:9f:8d:c5:e6:15:be:89:66:68:a5:
c7:09:47:84:c2:0f:34:6e:2a:a9:cc:93:d2:8d:7e:
48:68:67:b9:a7:bb:31:e9:ff:c5:3a:43:fc:6a:ca:
8d:51:e4:4e:34:21:bb:5a:d2:7d:a6:03:f7:aa:c0:
ab:15:7b:6a:83:01:dd:c7:eb:82:f0:31:84:a6:07:
77:94:12:b6:44:71:cc:55:f6:03:c2:b4:51:d8:fa:
a8:d1:6d:61:db:55:21:ff:69:ef:a4:f2:57:a6:a6:
c9:51:96:70:b8:ca:77:5d:c7:05:33:28:30:df:aa:
0f:e9:18:b8:43:ab:bd:01:33:83:91:36:4a:c4:8f:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:9A:4A:19:BC:74:38:53:3E:B4:C0:7A:6E:B2:DA:A3:3B:24:9B
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:97:a2:1e:b2:67:24:17:c1:5c:4a:64:d6:3b:d5:4c:b8:c7:
1a:95:11:e9:d1:7f:af:48:ff:0e:3f:04:96:ee:4a:70:93:26:
c8:82:c1:cd:9a:3a:db:d1:d4:fa:dc:07:0f:8b:44:57:12:bb:
6d:17:99:c4:d9:50:d7:6f:c6:65:44:ab:ca:30:d1:90:17:3d:
43:d4:0d:ff:3e:10:86:0e:57:08:1b:d5:a7:71:ea:f3:e9:43:
5b:ce:68:4a:f5:b5:c6:11:f3:ed:56:73:20:a8:99:86:85:af:
92:5d:e7:70:e8:57:9f:30:23:b9:aa:14:a0:3a:46:02:e3:62:
30:e0:18:e0:c2:84:57:07:8b:70:db:a1:29:c2:69:04:4f:48:
71:00:d3:3d:db:3e:da:9d:31:c3:a4:a9:29:a6:8f:f0:72:44:
53:4e:20:80:55:46:ed:d6:54:e4:a1:50:65:c1:05:35:98:92:
b5:7d:33:88:60:8d:ff:44:d2:53:7f:ee:47:cd:f2:c9:f3:86:
0c:ce:c5:c7:50:27:5e:ce:e1:bc:4f:ec:c4:ab:a1:ae:72:6b:
ff:40:8f:60:c2:45:bf:33:ca:04:92:b8:99:e2:75:f7:a0:f5:
c7:21:3e:7d:61:75:f2:66:08:24:7f:f2:44:52:7e:f3:05:86:
0e:50:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:24 2026 by rpki-client