Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: CULwQ7QFDbUq34YX2/HsyNiXsAvmrzt6A9ElHDjE7Yg=
Subject key identifier: F9:F8:DF:7B:E5:F2:90:3B:6E:DC:D5:FE:38:FE:5C:3F:73:AB:F8:5E
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01A0D6B9469321C7BBEDCF7039D8CD431CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0657
Signing time: Fri 25 Sep 2026 04:01:01 +0000
Manifest this update: Fri 25 Sep 2026 04:01:01 +0000
Manifest next update: Sat 26 Sep 2026 04:01:01 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: iqvd4D4fQ/8Qe0L3D9r/j6ug0/xcWzf/2DeHYayfUMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:46:93:21:c7:bb:ed:cf:70:39:d8:cd:43:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Sep 25 04:01:01 2026 GMT
Not After : Sep 26 04:01:01 2026 GMT
Subject: CN=f9f8df7be5f2903b6edcd5fe38fe5c3f73abf85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:71:c8:15:f0:4e:1a:d7:6a:d7:53:d3:b3:
3e:fa:cf:00:56:5d:58:07:64:4e:08:fb:41:c9:8e:
ce:cb:92:5a:4e:9e:bb:cf:b3:b1:2d:64:da:eb:17:
da:bd:5e:90:e0:8f:b7:b5:16:8e:e6:2e:64:38:02:
17:61:73:a7:2f:61:31:b7:41:48:ec:11:63:10:d6:
39:88:b6:6c:84:7f:0c:a7:07:31:02:18:4b:51:ac:
b6:04:42:df:68:22:02:18:5d:ce:1a:ce:70:69:60:
b3:eb:2e:d9:da:8d:49:06:b9:f7:76:2e:df:48:c9:
d5:b1:b8:f8:e8:59:ff:87:e0:92:38:3e:12:a2:20:
51:22:35:8a:0f:57:58:fc:29:4f:f4:e2:81:4e:2c:
67:d5:95:d9:66:c3:9e:e6:a8:4f:2b:01:a4:73:c4:
9a:c4:44:53:fb:fc:e9:b8:9a:b6:f8:91:83:d2:2c:
ec:96:04:96:5e:fb:1e:6e:46:89:a1:d2:12:e5:e3:
fb:84:f9:c3:38:53:f4:f8:ee:e1:d1:bf:50:3f:29:
54:8c:0a:ad:f2:27:5c:df:d4:f9:fb:ca:36:6e:c1:
d3:82:9b:dd:5d:56:45:17:6a:6a:50:96:62:f5:59:
f1:d8:5d:91:15:5e:94:8f:55:30:d4:01:66:02:d5:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:DF:7B:E5:F2:90:3B:6E:DC:D5:FE:38:FE:5C:3F:73:AB:F8:5E
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:f7:b7:4a:8d:a8:22:4c:8b:48:80:58:ba:86:e1:62:cb:
b4:81:57:bb:c3:63:9c:8b:bc:4d:ab:9f:4e:34:ac:0f:57:9e:
61:ad:13:06:a3:a9:28:5f:31:28:84:23:0c:df:cd:32:e1:e7:
3d:e7:45:90:9d:6f:95:c5:b5:0c:47:60:12:c6:cb:8f:91:40:
e9:b1:3d:68:75:68:e5:cd:1c:b4:56:f3:20:c0:74:c7:43:18:
29:43:a4:ef:9d:87:9b:5f:82:ae:59:f4:63:ca:f0:b5:01:b1:
5e:05:dd:c9:9b:4d:1b:7f:10:83:d6:18:c3:62:fd:38:05:60:
cf:a0:4f:02:e8:43:e4:3e:98:8c:6c:34:9e:80:35:71:17:57:
53:80:d3:be:8f:d0:42:59:e1:19:38:7b:25:08:fe:1a:86:d7:
ef:0d:7d:b5:aa:7c:85:89:c1:82:77:59:53:fe:f0:48:49:4f:
9e:28:36:b2:58:37:74:46:c7:1f:59:48:1f:0c:96:61:1b:83:
32:c1:78:66:60:d0:a4:a1:32:a6:90:4a:50:b0:a6:3b:d3:8b:
f7:60:41:0e:05:a8:71:5e:c5:09:5e:4b:16:b4:54:9c:f7:2e:
da:cf:55:3a:53:2c:a4:27:a9:9b:92:55:40:73:7d:09:d4:dd:
01:46:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:11:53 2026 by rpki-client