Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: a8b8QoaiiEh/hltJ7LLMJ4/qzn+3Ka3r3DfkLflWxpw=
Subject key identifier: 3C:52:CB:D3:93:6C:F4:A2:F2:24:0B:C1:FC:0B:37:77:B6:22:14:4C
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 01A0F6B1BEFAC85F2119F8DB882AB35793E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 066B
Signing time: Thu 01 Oct 2026 09:00:38 +0000
Manifest this update: Thu 01 Oct 2026 09:00:38 +0000
Manifest next update: Fri 02 Oct 2026 09:00:38 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: LN1oxmMrJHHMcE19QJfIUqdYyxWff2wk2OPde/pLr3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b1:be:fa:c8:5f:21:19:f8:db:88:2a:b3:57:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Oct 1 09:00:38 2026 GMT
Not After : Oct 2 09:00:38 2026 GMT
Subject: CN=3c52cbd3936cf4a2f2240bc1fc0b3777b622144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:2d:cc:fa:f5:2e:c0:99:7a:bb:28:a6:28:
dc:49:9b:ab:0a:88:70:1f:ab:7c:9c:3c:91:b4:3c:
3d:c1:b0:cc:cc:68:7c:56:48:e6:d2:f4:cf:70:71:
04:86:f8:d5:76:15:7a:de:cd:f2:52:1a:cd:ee:db:
75:ea:1e:4f:c2:47:46:90:72:e3:7b:bb:03:77:9e:
14:7c:42:e7:a5:b0:1b:00:10:f1:2d:b6:1f:91:b0:
1c:44:5a:d4:e8:5e:cb:82:2f:fb:24:ca:6b:cb:09:
14:4a:96:30:e0:b5:72:0c:7b:32:b4:97:71:51:30:
a2:99:50:d7:37:2f:e2:45:65:93:d8:f9:fa:7f:f3:
0a:9b:b0:6f:cd:0c:85:e3:cf:00:6c:e0:9f:55:00:
4c:a8:8b:d0:04:14:7b:84:5a:d8:12:6b:7b:12:8d:
45:2d:ea:0c:3f:cf:71:bb:fd:93:6d:7c:7b:25:a5:
ce:36:51:42:3f:ec:1b:c1:d9:e7:1b:5a:6c:94:aa:
4e:87:44:dd:93:2a:e0:84:fa:fc:14:c8:67:56:fe:
29:71:98:47:19:89:7a:4a:3c:72:3a:dd:d0:0f:a8:
de:e7:b5:d3:0e:02:64:03:d7:f3:95:de:72:fc:20:
fb:58:04:ea:76:ab:a5:d2:77:a6:6d:16:24:a3:00:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:CB:D3:93:6C:F4:A2:F2:24:0B:C1:FC:0B:37:77:B6:22:14:4C
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:67:af:10:bc:89:bb:46:1e:da:e4:ad:44:a6:ba:54:01:
67:14:6d:fc:97:e7:87:33:c7:6e:9f:c0:e9:5a:f6:ec:26:3d:
63:fe:46:93:c0:90:ff:18:99:48:12:c7:f2:94:a4:90:61:3a:
71:f4:3c:95:bd:69:a9:a4:aa:6e:8c:5a:ef:dd:a8:28:fd:e1:
4d:3c:5c:4a:c0:b1:0b:d2:16:b9:af:38:9e:73:e1:05:f1:aa:
5f:79:be:99:61:23:26:06:7d:63:1a:5b:d8:23:6b:00:e2:00:
7d:82:97:30:e2:e5:36:95:3e:1f:e8:4a:0c:f5:90:1b:ba:7b:
b6:cc:43:5c:d4:a6:ee:09:d4:3c:7c:99:9e:9e:88:1f:27:74:
12:65:44:f3:74:ea:ed:11:b2:4f:54:ef:fc:9f:9d:79:a4:f1:
87:81:a8:00:34:ff:8f:4b:2e:ed:61:f4:d9:dc:fd:20:59:ad:
1a:fc:b6:44:a1:c9:81:4a:60:9d:bb:64:90:7e:36:25:08:e3:
c2:12:95:10:62:6b:87:8a:58:58:b0:df:b0:3f:29:1f:69:7b:
af:32:12:79:7f:6c:16:ab:60:b2:ce:f4:78:7a:d0:1b:bb:58:
40:d0:e1:30:2e:55:a8:b2:9c:42:6b:9f:f5:72:9b:59:85:e4:
af:bf:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:00:42 2026 by rpki-client