Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: Hiz4fl0xcmnL/I/iKpEeXWbljkb+eMFu+NfJXA1loqA=
Subject key identifier: B1:6E:8D:6A:DD:4F:64:0D:1C:5A:59:34:44:73:F2:F2:AD:AC:9E:9B
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 01A0DC84A7B4622FF7AE16964A57E8269B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 0280
Signing time: Sat 26 Sep 2026 07:01:16 +0000
Manifest this update: Sat 26 Sep 2026 07:01:16 +0000
Manifest next update: Sun 27 Sep 2026 07:01:16 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: xZHc4Iq0k/108tIIPzDvobQv9j9gtWMiTj8isNQrVVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:a7:b4:62:2f:f7:ae:16:96:4a:57:e8:26:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Sep 26 07:01:16 2026 GMT
Not After : Sep 27 07:01:16 2026 GMT
Subject: CN=b16e8d6add4f640d1c5a59344473f2f2adac9e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:49:46:d6:3a:ee:46:e5:cc:65:4c:ad:56:
e4:e8:75:08:13:e7:f0:e3:5e:af:cf:03:bf:97:5f:
33:ca:a0:ed:95:d5:b5:b3:66:b8:ed:69:31:90:8f:
9e:93:e3:08:fb:45:fc:2a:89:86:9d:77:87:3f:fb:
3e:43:9b:bf:6e:d8:a2:09:bb:1a:b6:c4:8a:50:01:
a4:c3:8c:59:e3:80:cd:6a:ee:8b:47:ac:3d:c4:bd:
96:4e:0d:16:f2:5c:b5:5b:30:a3:9a:66:1d:b8:f0:
0b:a8:be:e0:c8:de:88:a2:dc:82:2c:f9:91:6e:e6:
ba:f4:44:5f:18:f6:23:23:7a:c5:f8:f1:94:5d:1d:
db:2f:bf:aa:78:24:4d:21:e1:af:f4:04:cf:45:63:
e1:8a:b9:ca:de:6e:68:b2:94:9f:33:e8:94:52:34:
b6:07:2f:46:8c:39:b3:c5:ff:d7:78:5c:32:77:8c:
05:88:08:20:cd:31:dd:63:dc:63:fe:33:3d:7e:a8:
56:75:bf:20:85:b0:82:db:8c:e2:88:e2:fe:06:a8:
e4:0f:db:f0:06:6a:2d:f1:44:15:fb:60:66:14:54:
b2:10:89:30:74:10:57:dc:cd:4c:e9:0d:66:c7:a6:
24:7c:1f:3f:42:6d:99:94:f8:ac:37:01:78:1b:7b:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:8D:6A:DD:4F:64:0D:1C:5A:59:34:44:73:F2:F2:AD:AC:9E:9B
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:6a:98:f6:5c:3f:5c:2e:43:8c:ab:f0:3f:04:58:aa:6f:
0e:62:24:c0:25:cb:16:37:c3:11:cc:c7:b8:5a:32:5f:c4:30:
20:51:82:fa:02:b5:ed:6f:47:1d:f2:36:32:78:d4:25:fb:31:
55:e2:0f:2f:0b:1e:09:d3:07:69:db:88:dc:47:16:c1:79:5b:
99:a1:32:ae:00:7f:ef:eb:5c:99:10:18:9d:cf:ac:b4:eb:b3:
ad:b8:83:49:88:97:e7:1f:1a:d0:c9:51:4b:8a:f8:e9:ea:6d:
2b:c2:70:34:09:36:e2:c0:ef:c4:3f:37:79:7d:fb:be:ed:44:
1b:9e:89:30:2f:b8:1d:f5:34:c8:35:b1:b6:6e:7e:dc:e0:87:
d1:62:3b:4e:fa:b1:ad:37:94:b7:a0:e3:bd:3b:9e:73:b1:54:
08:f8:18:76:61:2b:bf:1e:63:a7:5e:b0:8f:6a:1d:80:a3:26:
0b:70:8b:7d:5e:c5:6c:93:e6:eb:f2:66:a7:49:a8:f6:3d:76:
5f:66:ea:f0:44:8b:84:3a:32:4c:fc:95:f9:fd:aa:1c:94:4f:
94:db:b7:0a:40:3d:f4:0a:52:ee:6e:c9:66:f7:de:ce:e1:23:
96:33:75:2b:18:bb:6a:25:07:82:e8:1b:db:d9:95:70:19:57:
4f:37:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:16 2026 by rpki-client