Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: wUEKeyLKptVSKAKHXLQCUI464O9hbuLe/QZxvpLLik0=
Subject key identifier: 20:8A:01:62:04:21:B2:64:BA:85:93:6C:F7:45:2E:4C:AA:ED:DD:22
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 01A0E098BF11A63A193721190F55DE41B7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0827
Signing time: Sun 27 Sep 2026 02:01:41 +0000
Manifest this update: Sun 27 Sep 2026 02:01:41 +0000
Manifest next update: Mon 28 Sep 2026 02:01:41 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: U9dpamPlXFGPVwyxa7ZIjQCVXbM.roa (hash: NpMd/z8Tkr9WOq97vd7su+5I1m9lCbB+kCkvJo6LpzM=)
3: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: lDgbLYmlMuzSfC4Tz9er9+VduzA/bjxYDBUT26k98LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:bf:11:a6:3a:19:37:21:19:0f:55:de:41:b7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Sep 27 02:01:41 2026 GMT
Not After : Sep 28 02:01:41 2026 GMT
Subject: CN=208a01620421b264ba85936cf7452e4caaeddd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:2b:08:cf:e5:13:d8:b8:bc:b9:4b:4f:c2:
ac:f0:03:a9:8e:85:30:c7:13:b7:b2:a5:96:5a:6b:
5d:1c:1e:dc:67:07:e4:36:fa:f5:d0:b3:42:4f:bc:
dd:01:b2:dd:b7:e7:7a:6a:51:69:0b:26:12:1f:61:
b5:4e:cb:cf:8f:2a:ad:0a:02:c2:ed:4b:d8:ec:f1:
b5:90:f0:8e:04:b8:1c:7e:2b:c6:ce:dc:1b:22:48:
15:d9:fc:70:32:a0:a9:db:f4:9e:1a:68:11:ae:3e:
83:43:20:fe:be:b4:84:cc:bf:84:cb:07:1e:e5:15:
54:b5:6d:9b:fa:7f:eb:9b:fa:91:03:15:41:f9:9e:
43:55:f3:34:6a:dc:97:0e:55:81:bc:56:0e:b1:e1:
ec:34:35:f3:af:14:83:73:1a:6d:97:bd:e5:ca:78:
ca:ab:41:28:02:20:88:6e:53:4b:6d:76:87:d0:4b:
ff:93:74:8f:11:ed:ea:71:38:e6:71:bb:64:9b:bf:
9c:1b:1e:f5:ad:74:e1:ca:16:11:b0:2f:7e:52:fd:
f5:8a:47:0f:9f:cf:2a:94:1a:66:f9:d6:64:df:d6:
56:01:58:08:20:6c:94:cc:1d:4c:03:28:35:7c:83:
da:5e:dd:b9:03:82:c4:b5:fb:d6:95:aa:96:59:46:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8A:01:62:04:21:B2:64:BA:85:93:6C:F7:45:2E:4C:AA:ED:DD:22
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:d0:d3:95:eb:f9:9a:e2:62:72:ba:bc:88:75:a6:fa:79:
17:b5:23:69:1f:f4:62:a3:16:6a:14:e2:f9:41:8d:00:04:7f:
2b:6a:c7:97:85:4a:db:3d:4b:4a:e4:b5:a1:99:c3:2b:23:b5:
3a:d4:33:86:9b:fd:e7:a1:84:20:8a:f5:d7:73:a6:81:ec:c7:
b1:8e:d9:5f:c2:2e:c9:1e:1c:22:a1:85:2b:71:9b:4b:38:50:
4b:e5:ce:dc:0b:b7:2a:b8:3e:55:cc:88:bb:74:4f:58:4c:d5:
dd:0a:b9:27:33:d1:a6:ca:9e:bc:a2:47:f1:b4:55:7d:51:e6:
ba:8a:67:3b:a2:16:1b:74:eb:db:88:9f:65:c8:5f:78:0a:e6:
1e:28:2f:18:c3:54:79:62:b7:d3:94:0f:5f:8f:87:e8:dd:1c:
69:2c:e5:56:18:b6:c9:e7:42:cd:86:88:f6:ae:d4:78:16:f5:
8f:e5:a7:04:73:b2:5e:68:e2:71:f7:91:81:21:73:95:98:61:
a7:95:96:12:e1:ca:85:45:a6:c1:36:06:e8:23:2a:0b:60:9b:
58:95:80:3b:5f:94:bd:02:99:4e:93:78:32:cc:39:b5:1a:23:
a8:b2:ea:91:d0:c6:6e:c7:88:56:57:de:ad:8b:d3:3e:a9:55:
49:51:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:25:23 2026 by rpki-client