Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: V3fHWi7ijZotsh34VzobZkLcMweTE5A5ncCeZIuCV/U=
Subject key identifier: 2F:C1:3C:4D:A0:35:B5:30:DF:CD:75:30:D2:A8:BF:29:07:E9:65:D7
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01A10BF104AD8D714FE9BC4DB9E515EE108D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0F88
Signing time: Mon 05 Oct 2026 12:01:47 +0000
Manifest this update: Mon 05 Oct 2026 12:01:47 +0000
Manifest next update: Tue 06 Oct 2026 12:01:47 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: Ew4wrm31U6RKGpELD9kcOFsXiu0N4eFfrY/jq1QCahY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f1:04:ad:8d:71:4f:e9:bc:4d:b9:e5:15:ee:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Oct 5 12:01:47 2026 GMT
Not After : Oct 6 12:01:47 2026 GMT
Subject: CN=2fc13c4da035b530dfcd7530d2a8bf2907e965d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:cf:99:5a:33:80:a1:12:6b:1c:ab:81:f6:
76:81:c3:d0:d4:e4:fa:18:ec:78:30:92:d7:79:52:
f4:25:5e:92:fc:e3:d2:cd:56:c6:63:2a:8a:6c:96:
78:b6:b2:d8:9d:79:06:9e:b2:87:3e:4d:4f:5f:45:
3f:06:74:26:01:17:90:86:e7:ed:71:25:b5:bc:77:
8f:43:4c:85:ff:91:4e:0b:b2:d6:5c:47:58:be:4f:
90:9f:ae:8e:5e:c4:c8:60:8d:d0:26:e5:b9:e2:a6:
76:ae:50:ca:00:22:a6:ea:15:58:8c:74:ae:f0:5f:
05:49:a5:db:b4:f1:85:7f:34:5c:99:b6:65:18:99:
c2:39:44:ca:c8:60:dc:60:3c:1a:ac:59:2b:06:c8:
72:36:d3:6f:d8:ed:1d:7c:49:8a:0b:96:c1:93:b4:
eb:b3:58:7a:d2:38:6e:8f:ab:28:aa:59:ae:72:59:
d6:ed:73:dd:35:d1:aa:8c:ba:22:dc:cc:a5:ee:56:
11:85:2b:38:4b:54:f1:66:e2:e7:e1:d8:eb:8b:15:
93:6a:8c:b1:f0:99:62:90:3b:61:18:67:ae:8f:b1:
db:d5:bb:7b:c0:60:0e:ef:80:ea:da:8c:22:ea:f3:
5b:11:6e:07:cf:41:c4:e9:c6:8b:eb:4f:0c:59:e7:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:3C:4D:A0:35:B5:30:DF:CD:75:30:D2:A8:BF:29:07:E9:65:D7
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:20:c3:2e:64:3c:b1:76:fa:a0:61:67:72:dc:60:e0:9e:
3d:62:5d:b6:cc:e3:fe:50:55:37:74:38:d4:46:9e:cc:09:a9:
bb:df:a2:97:4e:d0:18:dd:0b:71:8f:ed:2a:89:e5:10:dd:9b:
4a:c1:69:35:24:3b:2a:8a:6a:e1:7e:33:18:59:f9:ea:95:a9:
a5:90:97:1f:25:2d:a9:4f:28:fb:2a:c6:a7:9a:0c:7d:df:4b:
f1:8c:9a:5c:bb:a7:37:17:09:4c:17:35:ff:d9:bf:84:89:82:
3a:57:25:b2:5e:c6:ad:94:6f:02:f9:0f:b6:aa:0b:c3:ee:c1:
6a:74:93:72:5c:47:65:b2:7d:85:29:fc:f8:64:73:62:30:35:
f7:bc:8b:97:f8:d4:af:f7:14:3d:b9:ab:df:2c:d1:95:00:a5:
3c:8d:a8:a7:a9:fc:e7:9a:cb:5e:d4:9f:da:8c:a6:38:9e:d1:
80:52:9b:e7:29:55:51:44:e9:95:75:77:48:24:c9:8f:83:69:
d0:6b:a3:79:68:6a:61:7f:40:cc:23:4e:05:51:cf:0d:4f:a0:
46:71:0f:b2:e2:a6:7b:76:bf:28:37:55:60:82:7e:a4:b8:e3:
50:f3:ef:24:d1:a4:17:12:07:29:e0:61:d9:73:05:fe:78:83:
1c:82:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:47:09 2026 by rpki-client