Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: 9oVHKOA2kUEM0z6lJ5j+8zHDqDy9t1ocsxCNzcjS8t8=
Subject key identifier: A9:26:29:19:6E:36:B8:6F:5D:29:4A:09:0D:67:22:CE:80:69:03:1D
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 019F939200B31DA41F5580E2FCB9FC5A9925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 09E3
Signing time: Fri 24 Jul 2026 10:00:46 +0000
Manifest this update: Fri 24 Jul 2026 10:00:46 +0000
Manifest next update: Sat 25 Jul 2026 10:00:46 +0000
Files and hashes: 1: gKVhxqv4c6TYFCTlETWXlilzluc.roa (hash: +yP4tQ6wyJ6Np/Xh+2U7DdYNmw4DRvDRrRoSP9Pt0e8=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: /b9kV1UEtQ2ht6lq3Paz6hB78leJdQqLtQKxph0Kg2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:00:b3:1d:a4:1f:55:80:e2:fc:b9:fc:5a:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jul 24 10:00:46 2026 GMT
Not After : Jul 25 10:00:46 2026 GMT
Subject: CN=a92629196e36b86f5d294a090d6722ce8069031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:ab:34:e3:57:c0:bd:8c:86:fa:57:a8:7b:
da:91:a4:c3:dd:99:cf:64:40:09:93:8e:89:a1:d5:
80:06:0c:f6:b4:07:17:a0:a8:2d:66:bd:98:95:67:
0b:bc:3f:dc:51:81:aa:57:d9:51:fb:cd:c9:89:05:
2a:2f:2d:cd:0f:0a:b9:95:ba:6d:52:bb:5b:ed:53:
a9:db:71:38:30:da:60:b4:2d:60:50:3b:cd:b6:7b:
28:25:4d:a4:9d:4c:9b:b1:22:f9:d3:94:fc:5e:9e:
b4:23:32:18:27:e0:a6:be:dd:5c:2c:a2:c4:1f:14:
d8:84:a8:d4:16:62:1d:64:2f:94:07:f9:2c:9b:4e:
38:f8:c9:bb:2a:92:e1:c1:4e:87:a9:00:02:41:d1:
b3:60:90:1b:5f:bf:ac:84:63:dc:77:c4:17:9b:46:
5f:ea:72:ee:3c:5d:c9:fe:12:0e:3a:5d:1f:4b:d2:
0d:28:26:34:9a:16:0d:02:22:f0:dd:e3:ad:41:98:
80:2a:8b:91:4e:34:73:da:e5:cb:c6:70:e0:7e:97:
22:c9:ce:c7:b2:4c:f9:47:c4:46:0d:ac:20:85:d2:
ec:7b:da:93:eb:a5:8e:ad:04:59:b4:9b:5f:ee:d4:
5a:a8:bc:ce:da:1c:41:45:8a:58:2a:5d:5f:0c:50:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:29:19:6E:36:B8:6F:5D:29:4A:09:0D:67:22:CE:80:69:03:1D
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:88:16:48:2f:d5:95:b8:2c:55:4e:5d:ac:e2:d3:81:45:30:
ca:86:2e:45:74:ba:03:21:51:11:6f:9d:94:08:44:58:11:b3:
9c:16:4d:53:cd:b7:1e:58:84:ff:92:fb:8d:f2:04:42:98:65:
a1:a6:66:11:fa:f7:98:ae:e7:7c:d3:4d:e1:19:cb:d9:6b:81:
b4:3e:a5:ad:47:a7:55:14:eb:08:09:3a:7f:c5:07:b6:2d:a0:
a3:81:01:e3:38:22:35:d4:42:d6:f0:87:3b:2b:c4:b8:38:08:
b1:65:0e:aa:c7:01:5c:68:14:ae:96:2a:1a:e4:53:8d:ed:dc:
96:a1:f1:e8:d9:1d:2c:e5:c9:a7:56:0d:83:cc:25:c3:74:77:
6e:db:99:f2:bd:d7:c3:ca:da:e6:9c:f1:de:2e:c5:58:5e:aa:
6e:c0:fe:cd:5b:a0:ca:bc:37:8b:1c:2e:02:d9:34:10:ca:72:
15:a3:83:dd:44:ff:ea:a2:98:a6:3d:d0:3d:b0:6e:1f:47:60:
30:e7:b8:85:4b:b6:1f:a5:6f:15:ea:7a:9a:5d:2b:0a:55:d4:
bb:db:42:ed:83:3a:35:b3:3d:8d:5a:39:28:0d:ed:cf:cf:57:
f8:2a:0c:95:7b:46:86:ef:3d:a9:1a:8c:9c:87:32:4f:09:25:
51:b7:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:30 2026 by rpki-client