Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: rWDbjKdCvhYUDygg04YGx0BX62VwVuT19UuymQ5zKT0=
Subject key identifier: BD:F4:1C:05:46:47:97:7F:78:EA:0F:87:88:34:36:F2:A3:AE:AD:FA
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01A0D6B9B1B1926A52189F7F9F5F3514CBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 04:01:28 +0000
Manifest this update: Fri 25 Sep 2026 04:01:28 +0000
Manifest next update: Sat 26 Sep 2026 04:01:28 +0000
Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
2: fndZHS6wausEk7LMJwg-iWqkX-c.asa (hash: wY8kQN7C6jpcyRMX1u3cHnZoIcbOK0EzmdgU7lU1Xq8=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: YEu72s1vgY4cLFneEn4QIrLS/CRUdqgOn3urt+aQ+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:b1:b1:92:6a:52:18:9f:7f:9f:5f:35:14:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Sep 25 04:01:28 2026 GMT
Not After : Sep 26 04:01:28 2026 GMT
Subject: CN=bdf41c054647977f78ea0f87883436f2a3aeadfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:48:79:8c:84:30:0e:b9:cf:a3:c3:6c:01:
18:3c:ff:9c:b9:01:56:02:63:f8:d3:64:16:e3:40:
b7:de:7f:f9:1d:14:27:0d:56:46:56:e7:73:08:a9:
23:31:35:e2:09:38:ff:5f:66:8a:5f:85:fe:1a:54:
45:a7:e8:f7:66:4f:c5:2f:61:6d:e4:d5:4a:8f:32:
01:9c:8d:fd:4d:e9:d7:f1:d8:0e:75:32:51:d1:ef:
1f:ad:9c:ac:07:bd:87:3f:e9:13:83:6a:6d:f6:97:
f1:44:af:3f:60:87:91:70:7b:21:e5:90:7a:a7:ff:
0f:e3:ae:2b:d9:f0:04:a4:55:a0:48:e5:97:32:97:
f4:2b:ca:c1:64:0a:3a:61:2b:6a:cf:b4:6f:43:ec:
23:73:06:30:02:b0:b4:30:0b:81:4e:47:28:f8:3f:
b2:71:ad:a0:76:c8:ee:9e:75:da:5b:ef:38:56:1e:
de:78:d7:a3:19:2c:0e:88:0f:da:70:58:50:95:2b:
8b:50:e6:28:51:c0:3e:ef:1e:70:72:95:76:21:8c:
24:b8:2c:95:03:36:d9:96:f8:64:5f:26:1e:7f:b6:
2d:bf:37:56:5f:50:84:15:6b:cf:25:3c:a1:3e:01:
44:04:bb:5f:62:8f:2f:ea:b1:1f:b9:8e:5d:a2:a6:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:1C:05:46:47:97:7F:78:EA:0F:87:88:34:36:F2:A3:AE:AD:FA
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:be:42:d6:70:77:53:00:6c:2e:28:3b:3f:e5:46:62:dc:
77:b1:81:70:2e:cd:b4:bd:a5:93:c2:87:48:76:7f:69:34:e4:
96:55:e3:0f:cd:4f:77:39:15:9a:87:05:2c:4f:42:0c:37:78:
1c:5b:f1:a0:9d:b8:71:16:dd:e2:8f:f6:6f:9c:90:8f:bb:cd:
a0:ad:10:e6:02:0b:32:46:38:e3:17:3c:fe:31:f3:69:7f:65:
34:94:fa:89:d0:2e:c4:d0:83:c9:ea:e4:cc:f9:d8:66:fb:52:
60:c9:ec:03:09:b6:03:97:d7:67:54:a6:49:9d:bd:dc:41:c5:
9b:80:cf:38:8d:e7:0e:4a:cb:7a:fd:fb:05:53:6d:94:23:3e:
92:15:bf:e9:7d:cd:e9:92:b5:fa:8b:39:05:e9:c3:42:ee:68:
99:06:e2:a2:51:d5:aa:23:0f:2d:5d:3c:39:29:0b:83:ae:55:
45:ff:1b:70:2c:ac:a2:d6:9a:ea:87:03:19:14:69:55:3a:5d:
48:19:75:b3:14:83:5b:48:bf:5a:99:ec:1a:3a:bf:50:6d:09:
e5:30:f6:63:7f:b6:d5:ab:03:9c:79:14:a6:67:eb:ea:21:fd:
43:9d:88:38:7c:ff:4a:d7:4c:f6:95:fc:0a:27:1c:4d:21:d0:
c3:b9:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:27:00 2026 by rpki-client