Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: L4TIZ9sO9yutiqZQWExJxXw79IULTJAasEe/kl+8h3s=
Subject key identifier: 9A:4A:0A:06:1E:C8:20:91:8D:0E:B4:4B:43:69:25:FE:4C:82:DA:DD
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019F954A655F343246ADB15587184B8B0E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0EC6
Signing time: Fri 24 Jul 2026 18:01:48 +0000
Manifest this update: Fri 24 Jul 2026 18:01:48 +0000
Manifest next update: Sat 25 Jul 2026 18:01:48 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: yCh6abasJGPoYS14wrcpo7m97c474OzTZfqETlYYMUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:65:5f:34:32:46:ad:b1:55:87:18:4b:8b:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jul 24 18:01:48 2026 GMT
Not After : Jul 25 18:01:48 2026 GMT
Subject: CN=9a4a0a061ec820918d0eb44b436925fe4c82dadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:28:74:3a:51:82:25:41:75:25:9e:d4:46:
0d:8a:71:87:33:53:b2:00:df:78:ef:6d:78:f6:cd:
a7:d8:ab:28:34:83:6d:e3:b0:7b:95:77:c4:04:56:
12:8e:40:23:a5:e8:26:6c:b6:b1:5d:bd:fa:46:46:
86:ca:e5:d1:96:65:75:57:a7:fb:0f:74:4b:31:45:
c3:14:d7:9c:69:51:db:23:0a:9c:07:61:8c:36:08:
72:8f:ba:ee:f4:15:19:9e:69:38:7a:99:5c:9c:48:
d8:9c:bf:dd:dd:05:b2:3a:fb:b8:77:2f:ea:59:99:
f8:32:bf:f1:0b:4c:3e:e7:5f:1e:66:31:5b:d0:8b:
0b:06:84:09:00:00:8f:0f:ba:72:79:8e:f8:6a:10:
1a:72:06:c0:43:60:e5:b4:37:a2:93:88:28:8d:91:
a3:d2:ef:e4:ac:95:3c:db:9c:46:45:36:90:04:27:
44:8d:f4:82:5b:05:06:67:22:fb:fd:bc:c8:69:f2:
91:b9:de:c6:f0:ca:e7:ca:af:04:98:9a:1e:de:99:
a0:8a:18:ed:9e:88:6e:84:64:ed:16:e9:39:34:ae:
d4:ba:9c:2c:0a:c2:f6:77:d1:6c:e4:ee:85:7d:ae:
49:de:b6:92:bd:63:a8:cb:51:f1:30:70:d9:82:bc:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:0A:06:1E:C8:20:91:8D:0E:B4:4B:43:69:25:FE:4C:82:DA:DD
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ad:d5:46:49:79:3b:cf:a1:07:73:f2:3e:9e:20:63:54:ba:
a5:34:5b:8b:9a:59:8f:2c:21:77:8b:8f:8d:b9:08:e1:0d:7f:
7d:ae:93:b5:9a:23:eb:9e:5e:e4:0b:a6:5f:7b:ef:cb:1c:77:
82:77:9d:b4:26:12:ce:19:ec:d4:78:7d:9d:9d:78:81:e1:43:
5a:8f:3d:4b:e1:d0:1f:65:a3:bc:35:81:95:7d:cd:3d:38:95:
a4:ea:9e:dd:4e:36:ed:25:a5:c2:fb:3a:65:b2:5a:83:6f:f7:
cd:a1:d8:56:2e:51:6f:35:9a:c9:64:b6:c7:76:5f:84:23:71:
f2:1d:04:41:83:e7:41:6a:d9:1b:21:37:82:9b:ae:64:b8:02:
dc:83:ea:8b:68:32:ed:f9:b4:79:40:74:7c:f1:83:58:2b:73:
a8:fd:a8:42:4d:d0:6c:c8:e0:66:fa:91:94:eb:05:e6:8a:f1:
de:0b:3a:56:20:05:3b:60:33:d3:07:41:76:c5:92:fb:59:e6:
27:fe:50:bc:f7:a5:55:ad:db:2a:59:05:20:8e:fa:67:b5:4b:
f8:28:00:aa:84:6b:68:0a:a5:63:81:4d:89:82:79:54:b9:79:
c6:fc:b7:3f:04:59:46:b0:03:fb:24:82:16:1d:70:3d:7a:e3:
30:14:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:15:52 2026 by rpki-client