Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
File: jFh6LAkWf52nMnTSmPmf210od3s.mft (raw, json)
Hash identifier: sESfJMBSzhSrRmcP/vjvw/u58yuC9nHsEhgWh9lQG2Y=
Subject key identifier: 8D:B0:3A:27:81:AA:1B:C9:8F:F8:8F:2B:F5:C4:A3:BD:92:F5:96:B8
Authority key identifier: 8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
Certificate issuer: /CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Certificate serial: 01A0E43EB31F9763377BA24C0BDFB3B007AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
Manifest number: 0127
Signing time: Sun 27 Sep 2026 19:01:49 +0000
Manifest this update: Sun 27 Sep 2026 19:01:49 +0000
Manifest next update: Mon 28 Sep 2026 19:01:49 +0000
Files and hashes: 1: IeUZpA_cRarzmmAKl1mTNeS2w6Q.roa (hash: Zxv/aB//3mF6nuzItLAr8aMXf7kFc9bokYqKElvga2c=)
2: jFh6LAkWf52nMnTSmPmf210od3s.crl (hash: oCbD2cm1PCJTebAlKd1iuLmUGT1Yw/hEdvrrfMNS+dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:b3:1f:97:63:37:7b:a2:4c:0b:df:b3:b0:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c587a2c09167f9da73274d298f99fdb5d28777b
Validity
Not Before: Sep 27 19:01:49 2026 GMT
Not After : Sep 28 19:01:49 2026 GMT
Subject: CN=8db03a2781aa1bc98ff88f2bf5c4a3bd92f596b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:a2:f8:ab:b5:9a:00:d5:26:3c:6a:6c:03:
12:8a:16:71:92:73:57:82:8a:ce:81:92:7b:1b:3b:
a2:25:50:c0:73:34:7e:8d:a6:34:40:b2:05:0c:33:
2a:6e:11:71:b9:3c:53:ec:5e:c6:8d:45:b3:c7:f5:
e7:20:01:f7:10:aa:42:60:39:09:0e:46:29:9a:a1:
cc:6e:ab:e1:16:7c:e1:5c:6e:e3:e3:de:62:1c:59:
73:dd:a2:d7:e8:9e:32:af:e4:8e:82:59:63:ff:39:
f3:2a:74:65:79:06:38:79:25:83:23:4d:b2:c9:5a:
b2:9b:a4:c9:c4:83:38:5f:5d:3b:4a:43:01:fe:50:
da:7d:6f:74:84:1d:bf:22:57:64:3e:4c:13:af:5c:
dc:41:12:14:de:ca:dd:00:38:89:c9:9a:29:50:b3:
33:07:36:33:32:5f:eb:96:5a:51:3b:aa:d6:db:8c:
7a:bd:4f:29:ca:7f:52:37:91:89:42:1e:83:15:1f:
95:9e:fd:f0:63:62:33:4c:1c:75:09:64:49:89:1a:
71:ce:60:95:61:31:96:f2:1f:70:c0:52:bb:f8:4a:
72:27:f6:b6:0f:d5:72:c5:97:a5:bc:0b:e2:82:61:
a6:ce:fa:80:13:04:ea:2b:8c:a5:ab:a9:7d:a0:e3:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:3A:27:81:AA:1B:C9:8F:F8:8F:2B:F5:C4:A3:BD:92:F5:96:B8
X509v3 Authority Key Identifier:
keyid:8C:58:7A:2C:09:16:7F:9D:A7:32:74:D2:98:F9:9F:DB:5D:28:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFh6LAkWf52nMnTSmPmf210od3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a2c2b4-2fc9-45d7-af48-3564bab220ea/1/jFh6LAkWf52nMnTSmPmf210od3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:24:57:b0:eb:89:e7:67:f4:f9:b0:32:a8:9c:e8:e7:5c:d8:
e0:df:cd:b7:bb:2f:1f:a4:e7:0e:86:00:e2:21:5e:f9:d0:02:
2d:8f:43:9c:17:8e:97:4f:d5:24:08:1f:ba:2c:6d:dd:66:bc:
7d:5c:cd:58:92:98:40:f7:fe:0f:f9:86:ff:1b:6e:d2:5d:1d:
d5:22:10:68:93:a1:48:5b:3e:90:f4:3d:3e:1a:9c:22:b1:62:
b4:37:10:99:72:13:b5:4c:94:b5:ad:c3:23:cc:42:05:b4:c2:
63:e9:eb:77:ae:5d:c1:b0:cd:a8:c2:91:9f:c7:23:6a:95:7d:
79:8d:a0:95:7e:86:80:12:86:50:22:55:16:7f:99:3b:9e:97:
72:21:9a:ae:ec:1e:5d:4d:4c:90:da:7b:e1:44:06:fb:43:a3:
46:b7:85:9a:0f:5a:5e:18:71:1f:ce:04:93:aa:ac:0f:46:be:
63:0e:7b:0e:74:8c:70:38:a9:6a:b5:e4:76:a6:0e:02:48:04:
ac:79:33:8e:e5:f6:9e:f8:14:fe:24:c5:36:b1:9d:39:f2:42:
18:6a:47:20:c0:a5:26:de:98:da:33:ee:b3:87:0e:b3:59:c1:
0d:94:5e:c8:dd:d8:8a:24:41:dd:33:f3:be:2a:c4:40:6f:06:
c8:a6:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:19 2026 by rpki-client