Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: aWlJjIVmzxRwUDIWhFlTvHS7TcWxrpAOmG3FVA/CX4w=
Subject key identifier: CB:47:AA:8B:4F:21:08:B5:3C:35:2B:ED:EA:D7:67:E7:BE:ED:A3:61
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 01A0EBC0C28BD2CDE1823717DBFB0EBCA987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0DFD
Signing time: Tue 29 Sep 2026 06:01:13 +0000
Manifest this update: Tue 29 Sep 2026 06:01:13 +0000
Manifest next update: Wed 30 Sep 2026 06:01:13 +0000
Files and hashes: 1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: rJV/VUrbJyMNH7WkWqRWcCIGUskIDlDZRrJXs5TQiTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:c2:8b:d2:cd:e1:82:37:17:db:fb:0e:bc:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Sep 29 06:01:13 2026 GMT
Not After : Sep 30 06:01:13 2026 GMT
Subject: CN=cb47aa8b4f2108b53c352bedead767e7beeda361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:25:2e:41:8d:c0:06:82:55:79:b6:ec:f3:
05:02:60:58:d7:5a:13:55:a8:cf:7d:f1:67:8d:35:
e2:91:c5:27:3e:1a:30:05:74:a3:2e:d4:9b:cc:c4:
11:27:02:7b:c6:0c:51:f1:46:5f:d9:4b:67:45:da:
51:5b:e8:08:43:a8:b2:b6:bc:1b:9b:f7:4b:5b:29:
2b:5d:b7:fc:10:03:ec:f1:aa:1c:c4:a1:9b:1a:d5:
44:08:d0:8b:c5:8e:bd:2e:d1:a2:63:02:f5:2e:75:
d5:53:f2:5b:7b:c7:27:58:97:b5:fd:2c:ed:cf:2b:
24:0b:b3:53:05:3e:69:7f:d7:16:1e:6c:7e:01:37:
db:f6:cb:f8:49:39:af:41:5b:af:a1:00:1c:1b:cc:
8a:ad:7a:b4:4f:35:02:62:22:25:36:b7:86:dd:b2:
55:f6:ff:e8:7a:75:6f:c5:0a:3d:f4:29:70:02:a3:
27:bf:28:a3:33:d6:20:e0:4c:3d:3a:61:d8:d0:c5:
13:94:9b:a7:bc:45:c9:41:0c:0b:11:df:02:93:c6:
4a:da:5b:90:27:1b:53:a1:1a:23:df:12:b3:9d:bd:
83:db:5f:07:db:ad:ad:b5:21:a0:1f:9a:00:f6:b5:
0e:51:13:5d:a0:37:61:6e:84:cb:de:90:a2:3a:c9:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:AA:8B:4F:21:08:B5:3C:35:2B:ED:EA:D7:67:E7:BE:ED:A3:61
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e1:f0:16:46:f3:5c:81:66:0d:04:a0:f7:e1:87:8c:72:0a:
ab:d4:e2:ee:5c:26:ff:e7:0a:c1:50:c3:6f:44:9e:3d:7d:b0:
36:39:bf:eb:7f:bf:47:f6:84:4a:69:6d:ef:29:8d:f9:1f:4b:
5b:d3:b1:fe:b0:a9:09:55:36:3c:f0:d3:9e:84:69:74:9f:02:
b8:b6:6d:ec:d5:c6:79:cb:7f:29:3f:7a:d1:1a:b1:b5:f0:44:
04:1f:ed:bc:76:d2:1a:ce:e1:c4:ea:0c:c0:53:df:6f:ed:f8:
af:eb:48:99:15:e1:a6:ce:8a:db:7b:67:aa:95:2c:c7:ff:b3:
76:62:19:db:1b:b5:38:1f:c5:5c:cd:fc:3c:a1:9d:85:c7:18:
32:eb:b3:20:1b:39:47:e6:ab:2b:96:a5:1d:1f:61:d1:63:31:
40:d5:c6:7e:ff:c1:ba:a6:76:8c:72:66:fc:7d:fe:5b:56:44:
e9:51:31:7f:d2:a0:74:a1:30:f2:15:52:96:26:af:56:0d:e5:
2a:30:cf:91:61:ad:97:7b:d3:a2:62:3d:79:66:4f:95:fb:f1:
7a:6c:df:66:49:7d:7f:c2:9d:70:37:a3:4f:d3:c7:14:32:b1:
98:48:e5:2c:07:f3:fb:74:a6:32:37:9d:2d:be:e6:2b:53:ce:
81:79:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:55:46 2026 by rpki-client