Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: FvsnXWd+e3UvUtgsLnOTsU7TbEcpW5ZPn43cj5WUfyI=
Subject key identifier: B2:27:0D:3D:AF:D8:FD:F5:F7:2F:97:95:57:D5:39:B2:DA:CF:DD:AA
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019F935B4D5D766CF624AB8BA671F90249EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 05B3
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: JzdWVdiTvuPij9Jx7fBiOvOifaJn6nqu6HC29lDVT8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4d:5d:76:6c:f6:24:ab:8b:a6:71:f9:02:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=b2270d3dafd8fdf5f72f979557d539b2dacfddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:05:52:26:83:49:80:44:87:bf:ff:93:c8:
94:a0:67:ab:49:bb:fc:9c:e2:37:95:4f:38:d1:ab:
b5:44:f6:17:d2:43:a4:41:7f:ca:43:8f:e7:19:49:
a7:33:b5:53:ab:1e:ea:5d:83:42:9c:28:c5:53:c4:
95:45:c9:90:53:84:ae:ac:5a:53:ad:95:a7:12:4b:
6e:f0:d3:8c:50:51:9f:62:ea:41:68:ad:1a:13:84:
bd:d9:46:2c:06:a5:b3:15:ef:ad:de:35:33:42:1d:
32:76:8b:d4:be:87:07:d5:32:0d:d5:5d:b4:27:51:
64:8d:ac:11:47:01:a3:e9:ee:99:66:29:6b:64:fc:
17:85:92:a4:e5:0c:df:24:0e:24:bb:67:e2:0a:24:
23:3e:a8:2e:85:36:f2:91:a1:88:21:da:41:d3:21:
f5:9f:64:05:43:ee:78:5a:22:dc:4f:f7:f3:cb:05:
63:bc:dc:d7:df:ab:7f:24:c2:db:b4:34:af:26:ea:
0e:f5:0a:a4:db:e2:05:20:22:0a:43:c3:6e:93:75:
9f:06:12:93:49:66:9f:be:45:f5:34:c1:cd:bf:fc:
8e:e0:c8:1f:4f:b3:58:64:db:0b:be:30:62:d8:71:
08:e6:84:06:e1:84:a1:6c:0e:6d:24:21:ce:9e:e5:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:0D:3D:AF:D8:FD:F5:F7:2F:97:95:57:D5:39:B2:DA:CF:DD:AA
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:59:a1:ec:86:02:7e:97:ae:44:ac:1f:c1:0f:b1:f8:9d:
a0:d2:e9:ab:26:e3:7d:2b:76:01:8c:97:d3:30:02:3a:11:a8:
72:29:95:4f:48:00:e4:1a:7e:de:c1:2c:4f:c3:da:ea:f3:e5:
83:f9:78:99:24:cf:bf:78:de:74:29:e0:32:e6:ae:85:00:29:
1e:1c:72:27:ef:74:ea:73:a0:80:5f:fc:d2:71:e4:1b:be:ee:
30:0d:e0:cc:96:87:cd:66:56:6d:14:77:a6:92:dd:1c:60:0f:
be:d3:88:76:31:17:7c:c6:64:e5:c7:cd:9f:16:01:0f:1f:10:
6d:71:54:c4:05:3f:5f:3b:c3:4e:bc:bc:95:c4:73:d6:0f:20:
12:b5:da:6c:22:fb:d2:08:91:f9:d4:d1:06:06:d4:73:98:2d:
68:89:f1:ce:af:80:78:5f:05:61:74:0d:73:d0:19:03:5c:51:
a5:cf:98:7c:44:8f:33:91:d9:2e:84:be:b2:ea:7a:de:e3:fb:
e4:a2:e6:ab:65:0b:bb:21:83:83:93:d7:54:6f:d2:a9:63:0f:
f4:02:77:50:19:f8:20:2e:ae:b0:6d:ba:d3:6a:aa:d8:1f:a9:
5a:b8:67:c1:06:7d:39:93:1f:5e:9f:4b:f0:fc:2e:ad:78:ba:
1b:24:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:44 2026 by rpki-client