Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: 6x4e1tdkMk9G9LJ7oW795tqJ8jtqMqJIGjqROjhyZ4c=
Subject key identifier: 88:6C:FD:B5:94:26:9F:08:35:BF:81:02:77:40:66:A7:95:83:33:E7
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019F94371BF6159CC945361A7A966895B17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 0CB9
Signing time: Fri 24 Jul 2026 13:01:07 +0000
Manifest this update: Fri 24 Jul 2026 13:01:07 +0000
Manifest next update: Sat 25 Jul 2026 13:01:07 +0000
Files and hashes: 1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: IVSxoITikOJ+T9s2RMnAnhtXwEzhyyaxXejk6FVCeOs=)
2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1b:f6:15:9c:c9:45:36:1a:7a:96:68:95:b1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jul 24 13:01:07 2026 GMT
Not After : Jul 25 13:01:07 2026 GMT
Subject: CN=886cfdb594269f0835bf8102774066a7958333e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:b0:3c:e8:d6:4b:21:31:39:3f:10:cc:2f:
73:af:85:2e:a8:8e:64:00:08:25:18:55:92:f4:e0:
b4:4b:6c:90:d9:d4:bd:5d:19:ca:29:59:f2:db:33:
94:77:0c:cf:1c:f2:4d:63:db:bc:a2:26:34:c1:99:
71:25:fd:6f:18:f7:b7:f0:90:1d:10:a1:74:2f:d2:
87:97:b2:d7:e2:2f:32:c8:06:59:3d:e0:4c:2b:ad:
34:84:fc:d9:5f:05:00:e5:2b:7d:07:e8:26:2a:b7:
3b:54:18:17:dd:71:64:97:34:39:1b:72:88:23:19:
89:33:3a:98:ef:3b:90:4e:83:e4:d6:41:7d:52:26:
a8:22:87:e5:f0:0b:72:22:87:ee:30:49:b7:ba:21:
f8:bf:d4:a7:70:43:69:5e:f0:62:d3:15:1a:28:e4:
32:ab:e3:6e:4d:35:31:0d:01:72:43:b9:11:0f:df:
83:73:af:bf:10:3b:fe:dc:b8:12:e5:3f:b1:72:f6:
98:00:62:c4:0e:3e:7a:4c:1a:08:45:ff:9a:4d:e0:
8d:db:87:5c:21:f2:b0:6b:9b:0a:4d:85:9f:f6:4b:
64:b5:be:79:2d:7f:2b:68:70:50:70:e8:99:87:8f:
68:89:bc:ba:16:2d:48:a7:90:00:df:a9:db:05:7c:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:FD:B5:94:26:9F:08:35:BF:81:02:77:40:66:A7:95:83:33:E7
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:32:b8:b1:f7:2d:0b:61:56:be:fd:9e:cd:1f:64:bf:b5:
5c:3a:a6:3d:4b:6d:55:11:44:ba:04:42:5d:bd:56:c7:b0:2e:
cc:a3:f7:dd:fc:9f:a2:33:ce:21:d9:1f:b8:62:36:4e:9b:af:
45:ff:5c:b0:58:a0:2a:79:2d:0e:b8:a0:78:9f:a4:f0:be:e2:
af:fd:82:b5:f9:07:27:8d:87:d2:bb:96:7d:07:c8:c2:74:c6:
92:a5:cf:54:f0:ee:e4:0a:49:9d:8a:15:ba:3e:63:1b:5e:a8:
59:b6:b7:c2:cb:88:04:13:66:c8:60:a4:8e:42:60:6d:eb:79:
8d:1f:39:1f:8a:61:ec:a8:14:62:f5:fe:a5:3e:e7:77:03:5c:
c0:d4:e9:12:f9:74:fe:9a:49:b4:31:35:01:1b:e1:6c:84:63:
7f:9e:45:50:41:56:5a:c7:45:7d:c1:5e:d1:eb:63:b9:0e:7d:
e6:59:47:77:05:0b:29:0e:b6:9a:02:af:1b:08:11:be:3e:17:
20:f9:7f:3e:fc:5f:95:2e:3a:7b:a4:f0:72:83:ad:e4:94:37:
c5:54:77:f4:a5:8d:8f:9b:df:95:96:b8:a6:a8:8c:f2:58:9b:
6c:96:bf:88:01:d8:de:16:d8:21:9e:46:b1:66:b3:bc:5d:7b:
69:1f:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:13:29 2026 by rpki-client