Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
File: jbK0TyPcypwGBL7WkPKKatkBeZk.mft (raw, json)
Hash identifier: /5yGno70uiWcz7175PR+ly51bi8uGiJww8Iu+UE1My0=
Subject key identifier: AF:7F:A4:82:94:BA:D1:5F:81:1B:87:26:EE:8D:26:1A:8E:47:86:C5
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 01A0E73F4388094ED0FF9E117AEEE40741AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
Manifest number: 0358
Signing time: Mon 28 Sep 2026 09:01:17 +0000
Manifest this update: Mon 28 Sep 2026 09:01:17 +0000
Manifest next update: Tue 29 Sep 2026 09:01:17 +0000
Files and hashes: 1: H60TaHzgzIDq5bEuHBb2yyowYNw.roa (hash: MUV9kznaIpAsdXMNwJm4Ji4yLC8b4zqE7vuFtiUPGnQ=)
2: jbK0TyPcypwGBL7WkPKKatkBeZk.crl (hash: Gc/32+CZyNjcNrq/cXVxFyWeXByhqlIriambPqz59es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:43:88:09:4e:d0:ff:9e:11:7a:ee:e4:07:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Sep 28 09:01:17 2026 GMT
Not After : Sep 29 09:01:17 2026 GMT
Subject: CN=af7fa48294bad15f811b8726ee8d261a8e4786c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:3a:fe:62:ab:3f:f2:69:08:9c:29:66:d5:
a6:be:49:90:03:b4:95:13:ae:f5:b0:fa:bb:a5:0e:
96:22:6e:e6:29:a0:d9:84:ef:1c:f0:49:55:ef:03:
01:44:48:84:78:53:b0:c6:b8:84:a5:37:0a:c2:00:
93:54:f9:8a:73:89:3c:be:49:94:84:5a:63:b1:bf:
39:a1:ad:2d:a8:b4:4a:32:05:58:56:97:65:27:d6:
7c:92:1b:b5:e2:00:a5:25:ef:e0:9f:ce:2d:46:f9:
68:24:c5:1e:14:c1:a8:55:ed:f8:11:90:8f:e6:8f:
91:f5:bb:2d:02:ba:c1:48:5d:46:09:3e:cb:f9:05:
d7:94:8d:21:d7:b8:15:15:9d:02:a9:55:4b:b5:9e:
15:1a:61:e3:48:5f:e4:90:95:8b:29:bd:06:13:96:
82:37:2f:73:c2:4a:a6:85:98:4d:25:02:d5:5a:b3:
cc:bf:a5:2c:a2:5e:67:28:ed:47:ee:b8:0a:d0:64:
a6:e9:d9:49:3c:66:1e:7c:d5:cf:7a:b2:5e:54:80:
d5:67:ad:ab:16:e4:05:66:71:38:64:c3:af:8e:85:
b3:0b:c3:4e:1c:e3:5a:f0:71:cd:42:46:2e:d1:ae:
84:8f:c3:87:4d:a1:0d:62:3e:98:d7:33:61:4d:ae:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:A4:82:94:BA:D1:5F:81:1B:87:26:EE:8D:26:1A:8E:47:86:C5
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3f:b5:6d:3d:0b:d4:60:6d:46:5f:50:74:a2:5b:3d:03:be:
8a:4c:ec:b0:9f:fd:55:16:99:32:4f:44:fa:fa:15:39:40:42:
96:80:a6:8b:90:9f:1d:f4:7c:bf:33:23:65:f9:0d:d4:e4:de:
56:64:69:ed:c9:77:85:37:71:f0:a7:64:5b:00:45:6f:d4:5c:
7e:b1:63:c3:a2:85:ef:a3:b7:72:36:1a:64:17:aa:8b:50:36:
74:54:ae:68:4e:1d:60:c3:75:29:dd:0a:57:b7:b0:0f:ed:7c:
3d:ca:64:0d:08:76:11:04:6c:d6:a4:28:f7:d2:9e:4b:9f:88:
3b:e3:dc:d4:80:d7:46:4d:51:9e:c0:fb:10:f5:da:f2:dd:e4:
fc:8e:ba:52:f9:48:d4:77:ef:e5:b6:fc:ca:91:9c:7e:3f:37:
9c:b4:0c:32:08:91:83:15:36:5c:31:f5:ed:22:98:5b:95:d2:
d2:25:24:62:b0:67:c1:1b:02:3b:96:3b:82:96:e4:09:a1:95:
48:ca:bc:b2:23:b4:97:11:d6:ff:c9:72:71:e9:16:91:ca:32:
84:c3:8b:ca:b9:74:f1:3d:45:0a:bc:13:33:c6:f4:9e:91:79:
35:68:7b:1e:89:0c:cd:5c:36:6c:a9:cd:5d:d9:79:ff:a9:81:
a2:bf:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:57:16 2026 by rpki-client