Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: fFtQzP43SlwRiOaqtRoX8sUDf2lzJIlYiwC9/WNzmSo=
Subject key identifier: CD:E7:72:79:CB:C6:9E:9C:9F:1D:17:53:17:5B:E5:F9:B8:99:A9:2F
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 01A0F1C2BC2BF6B571B0BB4E5D348410CD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 0412
Signing time: Wed 30 Sep 2026 10:01:06 +0000
Manifest this update: Wed 30 Sep 2026 10:01:06 +0000
Manifest next update: Thu 01 Oct 2026 10:01:06 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: KPQj1fmFMxLit1nqFYfdUOPEmD/wrYfZC5tqmUNt16k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c2:bc:2b:f6:b5:71:b0:bb:4e:5d:34:84:10:cd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Sep 30 10:01:06 2026 GMT
Not After : Oct 1 10:01:06 2026 GMT
Subject: CN=cde77279cbc69e9c9f1d1753175be5f9b899a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:ff:d2:0f:7a:71:c1:2f:8f:11:16:56:e5:
3d:d1:9c:8c:24:c1:06:88:ab:08:21:b7:f7:de:ea:
9f:07:46:01:a4:b4:86:75:c0:0d:ef:41:b9:91:d1:
54:3f:68:a1:59:08:60:6f:86:8f:5a:46:b2:28:72:
5f:2d:4b:81:ee:fa:1e:29:59:95:e6:97:16:d3:07:
48:c9:68:0e:79:b7:f8:6d:9d:e1:8c:d6:a2:77:ac:
a1:cf:54:01:43:cd:f2:4e:3f:47:45:f2:fc:8d:8c:
bd:44:58:a5:f0:21:75:d0:70:08:fb:9e:7e:15:c0:
75:84:a7:d4:cb:5d:5c:07:42:98:59:6c:cb:9d:99:
70:67:ee:47:61:a1:22:82:cd:ae:0d:58:6c:fc:5d:
5f:cf:5f:53:50:ea:88:04:7f:6b:41:73:c3:47:3b:
1e:56:ac:e3:e2:d9:fb:4b:aa:30:64:91:d9:1f:1c:
27:ef:aa:21:18:f2:16:1a:bc:41:d2:9f:6f:9d:f2:
14:fb:5b:8d:fe:67:01:21:0f:4f:7b:cb:98:c8:95:
d9:a2:b7:5d:26:07:29:ca:8b:bd:8d:41:60:0b:55:
29:a8:87:3f:42:c2:6d:5b:8f:a0:57:f6:e4:80:28:
80:16:fa:8c:c4:89:72:5f:68:d6:04:c6:2c:e8:58:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:72:79:CB:C6:9E:9C:9F:1D:17:53:17:5B:E5:F9:B8:99:A9:2F
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:e4:40:58:2a:8a:0e:43:2d:df:05:e4:fe:f6:8e:ca:65:
ff:59:b4:74:f3:8a:e6:f3:de:dd:7a:63:5a:ca:df:7d:e0:4c:
9b:1e:e7:61:fa:71:c3:24:d3:4e:d7:d6:f5:5a:4e:c1:71:52:
5d:ac:e3:d0:02:47:2e:07:bc:a5:47:b9:43:da:2a:33:36:01:
65:5b:77:b9:a6:c1:09:ab:a5:1d:ac:4b:a1:fb:2f:af:c0:1f:
3c:84:4f:e3:6c:24:ef:90:d1:0d:7b:11:4e:6b:80:b1:60:49:
ff:e1:5d:c5:aa:29:f3:42:14:16:54:ee:96:28:1a:6e:40:40:
97:07:f2:2f:2a:38:7e:a6:de:a5:ac:88:e1:b8:f6:d1:2b:55:
e9:41:4a:bc:51:75:6f:64:f3:1d:3c:ec:8e:b7:b7:0e:11:44:
bb:05:23:e2:4f:26:b7:5f:56:28:30:01:5e:ad:dd:f5:86:5c:
9f:26:24:5c:2f:2b:08:43:bf:d1:75:fd:1e:f8:97:ee:47:af:
51:84:17:70:74:4a:12:b7:56:f3:24:2d:95:88:82:a8:d6:e0:
cc:c4:af:72:d9:ab:d7:79:6d:f9:b6:b8:d5:29:97:60:27:4a:
e2:51:5c:c8:13:12:ff:32:d3:b3:41:e6:5b:c5:ab:98:ea:26:
68:e4:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:11:47 2026 by rpki-client