Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: 2BE3PlZatlSicytaRRyjeX5GpesA1GMWPpY7uiRNK2o=
Subject key identifier: DB:61:6F:8E:F4:CF:16:A9:76:8B:1D:B8:27:F8:A9:36:FA:98:07:A3
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01A0EDAF7952ABE8B2323BDF186065AEF663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0D4B
Signing time: Tue 29 Sep 2026 15:01:35 +0000
Manifest this update: Tue 29 Sep 2026 15:01:35 +0000
Manifest next update: Wed 30 Sep 2026 15:01:35 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: ZPLMXMvlQ3lgzO+971G55bm2OjuLp7CJvt9t6uYo/7k=)
3: qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa (hash: ja42JQwQXX8r9uYT0tonmAltBETuMJpfhq0fQEwqugU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:79:52:ab:e8:b2:32:3b:df:18:60:65:ae:f6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Sep 29 15:01:35 2026 GMT
Not After : Sep 30 15:01:35 2026 GMT
Subject: CN=db616f8ef4cf16a9768b1db827f8a936fa9807a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:96:a8:87:01:06:2c:63:29:4c:15:3f:e0:
45:c3:bc:f9:22:5e:09:b8:d3:51:b9:ea:bd:17:8d:
4c:fb:e8:1f:3c:c3:f0:b7:c3:b7:08:24:58:a3:12:
ce:7c:60:75:76:1c:35:9b:3d:03:31:0c:91:27:c0:
14:dc:47:24:a8:a1:93:18:84:f7:3f:80:33:76:c0:
4f:00:a4:96:a8:75:d9:9d:c3:15:d7:6e:b6:fd:94:
67:38:6f:29:76:9e:0f:4a:72:ec:cd:48:b8:bb:82:
86:49:fd:18:ae:d3:e4:ac:fe:45:fd:c3:21:39:b5:
d7:8d:1b:d2:84:29:c1:64:ed:c9:0a:19:66:43:56:
3a:97:8c:ce:a9:e0:6e:1c:74:70:2f:eb:9b:78:5c:
a5:9b:d8:a9:4b:e5:2b:cf:57:41:43:7d:09:79:a8:
eb:90:0f:9f:53:e8:30:7a:7f:c2:93:89:5d:eb:35:
df:2c:94:fe:07:1c:82:44:19:48:e0:72:d8:3e:d0:
f1:00:ac:31:11:6e:33:c8:b9:0d:7d:4c:c9:31:ee:
ac:0c:c3:95:09:f0:48:4c:74:bf:0f:62:ba:f6:17:
8d:ff:b2:47:31:a3:bb:9d:c7:b9:12:2c:ad:c2:14:
45:72:87:ae:af:f8:db:e1:d5:0d:c8:47:e8:91:6b:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:6F:8E:F4:CF:16:A9:76:8B:1D:B8:27:F8:A9:36:FA:98:07:A3
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2f:22:72:42:0a:ae:12:2b:f2:3e:d5:0f:cf:f2:a6:99:16:
43:42:83:2e:6e:88:58:0b:f0:02:38:c3:9a:8b:9c:bf:4d:bb:
e6:b0:8e:6c:d8:8d:8f:d9:17:62:c4:52:18:f3:4e:72:3e:28:
f1:3b:74:a5:83:aa:45:fd:61:a2:56:31:29:71:7d:15:ca:fe:
5e:28:29:f1:97:3d:5e:30:ef:64:d5:68:6a:c6:37:d9:1a:f2:
03:d8:f5:c0:7e:21:66:af:a7:aa:80:35:ed:00:3f:74:4f:ce:
20:85:2f:e2:88:59:74:a8:24:e7:b4:66:a4:bd:10:37:ce:7c:
01:a0:90:8e:46:c9:f4:b6:64:a5:20:84:54:73:2b:19:c2:bb:
49:63:2e:73:0e:c9:5c:80:6a:93:8a:f0:cf:34:10:ea:ac:97:
71:bb:59:1c:1b:57:d9:54:22:e2:b6:39:77:e7:11:3f:84:d0:
ff:16:2f:3a:b6:6f:c4:80:fd:9a:06:16:b3:06:e4:8e:ab:79:
32:ec:b0:f0:36:b6:ee:7a:5a:ff:40:02:79:20:70:41:67:ec:
ce:11:50:36:ee:b2:4a:f9:e0:35:98:bd:13:43:75:7f:b7:a2:
12:ce:79:8f:a1:dd:a1:20:f2:d9:48:b8:b2:01:e8:44:c4:dd:
52:8b:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:00:08 2026 by rpki-client