Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: 4DIa7tEFM3UHxavDvzOvvmvcv8HI5aTPpWOkbFrev3g=
Subject key identifier: 89:40:22:0B:65:E1:1A:8F:AB:1C:7F:9C:76:CE:54:D2:B5:A4:2F:7D
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 01A0F5D752FED2FDEF0C6E1C8574C25541C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1A86
Signing time: Thu 01 Oct 2026 05:02:04 +0000
Manifest this update: Thu 01 Oct 2026 05:02:04 +0000
Manifest next update: Fri 02 Oct 2026 05:02:04 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: DN7DyW8xJsdpueoFG3aNCVMNpdUyb3hzbiLBjz4czAk=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:52:fe:d2:fd:ef:0c:6e:1c:85:74:c2:55:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Oct 1 05:02:04 2026 GMT
Not After : Oct 2 05:02:04 2026 GMT
Subject: CN=8940220b65e11a8fab1c7f9c76ce54d2b5a42f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:b7:44:e6:09:f5:0e:da:72:17:1a:7b:fd:
a7:86:48:fd:3e:25:d5:f7:b8:ba:89:e1:91:93:aa:
45:9a:11:4c:78:88:d9:cc:6c:4c:f9:3a:0a:27:d8:
43:11:f0:66:27:56:d7:dc:eb:69:5a:fe:2b:37:62:
45:61:ab:d3:0a:ad:8d:6e:75:09:e5:a6:2a:8a:56:
ac:3a:b4:23:ab:d8:3a:3b:ac:0a:18:c7:44:da:07:
18:bc:79:2b:7d:62:93:27:5c:90:e0:d9:7b:1a:eb:
f2:2d:39:a1:d8:ff:73:25:2d:66:d1:87:d1:b7:03:
05:4a:51:ce:08:1f:d8:00:6c:73:8d:ba:ff:a4:68:
cd:d3:a7:99:92:99:f2:ed:0e:52:0d:80:d4:bb:d9:
c6:46:3a:27:e0:69:a8:79:8f:75:ee:57:f6:e5:fd:
85:e5:b6:81:66:48:63:af:c6:3e:ad:0d:61:d5:48:
60:d0:b2:f8:92:c1:2b:3a:e2:b3:12:af:64:4f:9c:
df:1c:61:f3:35:8e:7b:c4:8c:71:1a:e1:39:f3:e0:
a6:a0:4e:68:10:7f:00:4c:71:28:72:af:ed:b4:6a:
f3:98:b3:da:ec:15:1d:5d:3e:1b:2d:55:79:bb:2d:
7d:a9:3a:cb:e3:2b:3b:05:df:1e:59:74:ea:fe:2e:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:22:0B:65:E1:1A:8F:AB:1C:7F:9C:76:CE:54:D2:B5:A4:2F:7D
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e4:01:82:ce:40:8f:62:14:c6:3c:64:6d:82:49:9a:7c:18:
a1:08:e0:2b:8f:b1:d4:b9:dd:2a:77:a3:67:f5:bf:d3:36:65:
20:57:94:ca:80:4d:99:20:f6:b4:64:c4:3d:3b:8a:f6:44:68:
93:47:cf:70:f9:c5:bb:79:f5:2e:2e:e7:70:28:72:9d:65:6f:
f1:5b:7a:71:a6:7c:43:98:70:85:4d:e9:10:6f:15:d8:44:ec:
3d:74:cd:f1:cb:3c:54:7a:eb:cb:8f:56:17:83:98:f5:2f:e8:
4c:e9:e1:f9:08:cf:57:49:c6:6b:41:91:57:72:3d:49:3d:af:
37:09:68:fe:b5:e1:41:7d:f6:39:c1:55:f2:1c:87:4a:38:7b:
61:7c:e0:af:eb:35:c4:1d:50:ea:d1:00:19:12:fd:92:c5:d3:
fc:b2:ff:b6:d5:74:b3:b6:5a:bc:d8:d8:71:1c:cc:f2:90:ae:
38:f1:fe:f1:f1:f4:9a:b1:44:22:fe:52:97:a1:07:79:72:1e:
82:3f:db:a6:43:19:54:a0:4d:ad:17:23:1a:0e:40:73:59:36:
9d:35:67:11:a3:8c:2b:16:ad:50:d8:f2:c0:fc:85:0d:e3:c3:
99:a5:a8:89:83:3f:87:1f:85:f1:11:8b:b2:52:86:4c:3c:a7:
b8:61:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:31:40 2026 by rpki-client