Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: nrIM0Baxv9b/tRYIHfaligMm+rHmrX4BVowvIKucc5g=
Subject key identifier: 28:29:98:4A:DE:58:F6:1F:CF:DE:48:04:28:B7:EC:60:87:34:AC:5A
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 01A106938E2AAE2492F8131DC7EAD4A7C850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 12A5
Signing time: Sun 04 Oct 2026 11:01:35 +0000
Manifest this update: Sun 04 Oct 2026 11:01:35 +0000
Manifest next update: Mon 05 Oct 2026 11:01:35 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: /66NGYWddLcKxhyl0RzrtAjHQXuF1MizeahQCLFDp9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:8e:2a:ae:24:92:f8:13:1d:c7:ea:d4:a7:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Oct 4 11:01:35 2026 GMT
Not After : Oct 5 11:01:35 2026 GMT
Subject: CN=2829984ade58f61fcfde480428b7ec608734ac5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:01:0c:51:3b:54:82:bb:1c:05:eb:8a:27:
53:a4:9e:03:ee:35:54:2d:63:ea:4a:17:93:f5:4f:
65:66:c0:c4:0c:67:8c:aa:2b:1e:07:3c:e8:d1:e7:
04:9e:bf:d7:4a:da:f7:29:8a:64:07:12:b2:e3:84:
d1:98:c5:d7:c2:94:33:5e:64:df:d8:c2:1d:3e:6a:
92:5a:0f:ff:f3:69:d0:b6:9c:d4:e7:6a:0d:d3:09:
15:bc:09:24:96:26:ff:23:ef:eb:ff:06:a4:0b:a3:
30:cd:c9:29:a3:9b:d1:ec:a4:0d:a3:7b:9d:ec:ed:
8e:27:f2:7c:dc:c9:74:22:28:c0:b8:7e:0e:2d:e0:
9e:b8:60:2d:32:27:ed:7f:b3:43:60:c4:dc:1c:d7:
56:c8:64:ae:9e:72:27:04:26:64:82:ef:f5:a6:f5:
23:fc:b7:c2:ef:81:d7:2f:f1:6f:32:54:80:c2:fe:
26:ec:6a:cd:a3:2b:b5:18:66:29:91:7f:9f:c2:0b:
f7:75:1b:56:0b:a2:99:d8:22:51:a0:30:9a:4d:e9:
02:71:28:12:20:72:69:61:45:85:99:42:d6:b9:73:
57:1b:8b:f1:87:d0:b4:6d:ae:85:e7:45:8d:58:07:
13:d8:1a:20:53:4a:bd:6d:18:d0:1f:49:25:84:cf:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:98:4A:DE:58:F6:1F:CF:DE:48:04:28:B7:EC:60:87:34:AC:5A
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:8b:43:e4:0c:87:5c:61:1d:7f:15:b2:c1:7a:0f:a8:50:
7b:03:2e:25:ac:06:60:9e:35:37:a5:fb:16:38:17:d2:75:d4:
4e:12:6d:0f:67:ee:1e:c5:ee:e9:01:d2:7e:a8:48:0a:7f:af:
b9:30:33:b5:2f:e6:7b:be:9f:92:31:cb:d3:4f:39:e6:ed:72:
9d:d7:d7:89:ee:7d:87:b5:0b:16:ae:0f:08:e4:c5:a1:36:82:
5d:ba:5d:11:64:f0:79:15:aa:e0:47:18:9e:b0:37:43:f1:8e:
08:14:3a:4a:94:33:54:b4:b4:36:c8:12:38:38:94:bb:a4:91:
84:cf:61:d2:92:cd:27:3e:9c:e4:41:cb:71:93:e6:c4:d2:39:
de:ac:86:78:f4:06:a7:c9:9b:52:6a:c8:5c:92:f6:4a:90:ad:
cf:37:23:82:c5:19:ee:82:0e:ca:f9:94:7b:c2:74:a7:10:12:
8e:94:c7:5b:73:73:e0:69:2d:c4:2d:83:1c:f4:b2:e1:58:dd:
63:a8:0d:62:67:f8:44:9e:81:77:de:4a:d9:3f:dc:ff:9b:1b:
10:74:69:2e:8b:f9:57:21:7c:56:6a:ab:5a:45:89:6f:28:06:
4f:ea:24:b8:d1:20:9c:05:51:00:f0:27:29:dd:7f:8a:ac:95:
eb:d8:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:44:33 2026 by rpki-client