Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: G4Ku2QmgrkuGQkZ7eK/Npq49FEIpksIXaCFStPK/W4g=
Subject key identifier: EA:CA:65:97:2E:7F:DC:9F:6D:B4:03:89:EF:1F:2E:73:4C:24:EE:67
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01A0FFB5801A3EAB511B079D21ED1D42DF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 0AA5
Signing time: Sat 03 Oct 2026 03:01:19 +0000
Manifest this update: Sat 03 Oct 2026 03:01:19 +0000
Manifest next update: Sun 04 Oct 2026 03:01:19 +0000
Files and hashes: 1: Y-8wSSC2qwBNrjz_k6R_unopQh0.roa (hash: J5RiMHLKReJzZBj2iCfOky82KbJ9Kf5ES1oVIIEEkV4=)
2: a6Cny3mX123A3AxCquZv7i7YgwI.roa (hash: NeZRS1qWUp7HDB9EJfZOHg3+YtkLEv+QzjeRM9fLlTU=)
3: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: 45BkLQkg0rVTX9jTqOqI9UmmXXomGIuzyUr0wdYw8XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:80:1a:3e:ab:51:1b:07:9d:21:ed:1d:42:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Oct 3 03:01:19 2026 GMT
Not After : Oct 4 03:01:19 2026 GMT
Subject: CN=eaca65972e7fdc9f6db40389ef1f2e734c24ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:68:6b:c0:8d:af:c2:07:4a:f8:a8:b8:3a:
3a:36:a7:21:dc:48:83:9b:98:e0:0f:02:31:5e:d6:
5e:a6:df:e1:14:58:a5:4a:1b:0a:73:cc:e2:65:a3:
8e:37:08:9e:42:63:99:ba:2c:eb:f9:4d:c2:f0:7b:
62:81:0e:f9:c6:af:2b:c2:82:9a:87:28:d0:e7:da:
21:76:2c:c1:ac:7c:96:45:2d:fc:03:e1:bb:2c:38:
0c:5e:23:e2:fa:b1:b1:d3:6e:08:bf:92:6b:89:1e:
fa:5c:d1:2f:8b:97:f6:9b:80:5a:ea:7e:db:31:c2:
38:5b:2b:05:ad:d7:d8:d5:7e:20:21:52:97:6e:23:
df:07:d7:3b:1d:b0:55:94:41:fc:4b:d4:b0:1e:2f:
9d:78:ce:c8:91:ce:03:f0:e3:5d:80:a4:32:ee:2f:
29:85:9e:13:fd:ac:8f:7b:93:e1:2a:78:ed:aa:8c:
e6:94:28:94:1d:93:ae:d4:ff:73:90:95:98:9b:57:
3e:43:53:60:0a:64:05:e3:4b:1b:26:54:4a:54:60:
ed:37:4d:de:5a:e6:5c:26:61:9e:9d:18:59:c1:35:
50:36:8e:a2:00:ee:68:60:58:ec:b4:fa:de:1e:2e:
02:3d:ab:77:7f:df:59:56:0b:12:36:cf:e6:a5:d4:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:65:97:2E:7F:DC:9F:6D:B4:03:89:EF:1F:2E:73:4C:24:EE:67
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:79:3f:bf:a5:3a:c1:52:e2:9a:9a:b0:3f:cd:2b:7d:90:
ef:96:5c:dc:12:44:d7:ea:87:e0:21:02:da:d0:af:6e:e1:42:
ef:ab:da:98:d2:cc:a1:6f:61:66:0f:2f:b3:2c:64:ef:2e:4e:
85:ed:1f:1f:7d:7a:fc:ca:8d:c0:e6:1e:a5:30:00:e4:61:8b:
11:b2:eb:1a:99:56:b2:aa:2d:33:35:25:3e:86:7d:d6:90:21:
c5:1c:cf:2f:df:82:95:4d:73:da:26:fe:64:5e:b4:13:b9:96:
fb:c8:d3:c4:8e:66:f5:ad:3e:2e:32:73:cb:0f:bb:5f:ae:54:
04:23:b5:6d:c3:c9:6c:c8:74:3f:6c:b4:07:b3:14:38:05:e2:
a1:e1:06:64:6c:9d:cd:a8:26:88:81:8b:43:71:16:be:48:b3:
68:a7:98:ad:59:a1:f0:0f:8f:7d:b2:0a:9e:5f:07:90:df:c5:
00:6b:05:7e:e2:c0:80:73:39:a1:27:0a:d5:3f:e3:97:f1:2b:
f3:52:e5:d7:99:77:2f:1b:5d:f1:39:9a:e5:6c:db:88:8b:96:
eb:2c:6e:75:2d:cf:50:78:e5:59:55:1b:9d:44:35:69:3f:d6:
ed:93:b0:36:77:bf:87:1c:8e:fa:b5:c2:91:5b:13:9f:ea:0f:
6f:ee:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:25:59 2026 by rpki-client