Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: 35yEJgfzhVJoFufv+vx7Me3AxGh01QwXtfC+b3tUf7M=
Subject key identifier: 33:09:D8:66:77:E1:FE:F9:88:68:E9:F4:6F:82:8D:F1:0E:4F:DC:AA
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01A105EE2BCA31A876D6E5138D1795190568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0FD8
Signing time: Sun 04 Oct 2026 08:00:57 +0000
Manifest this update: Sun 04 Oct 2026 08:00:57 +0000
Manifest next update: Mon 05 Oct 2026 08:00:57 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: /tp5r1IGpWsyw7SsnFdKEN+6rukSJEN4WsORAZJQaoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:2b:ca:31:a8:76:d6:e5:13:8d:17:95:19:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Oct 4 08:00:57 2026 GMT
Not After : Oct 5 08:00:57 2026 GMT
Subject: CN=3309d86677e1fef98868e9f46f828df10e4fdcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:8b:d1:56:fe:4f:dc:18:28:84:01:f4:32:
fd:be:8f:a9:d9:f5:18:c7:d4:61:ab:81:16:3d:2a:
2b:74:f1:9d:4c:21:59:95:ed:2b:53:cd:3b:6e:6d:
9b:ee:ea:84:aa:30:01:fc:92:88:7a:b4:d7:cb:89:
8b:c8:ed:5f:16:51:f2:60:b8:34:b8:04:67:f9:8b:
7c:9a:28:af:54:e0:a0:ad:2c:75:83:7c:54:95:68:
f2:9b:f9:b5:07:3b:d3:1f:7e:5a:2b:04:bd:6f:7b:
ca:c4:d0:b3:25:72:a0:25:58:04:32:95:06:df:2d:
03:06:73:87:e3:01:e3:f4:33:37:58:46:ac:b4:bd:
0d:c9:ed:b3:fe:af:b0:ec:25:5f:c8:43:e3:bf:f5:
46:4f:05:17:20:39:a8:1c:c0:b9:09:56:74:b2:8c:
57:00:df:32:c3:81:d5:38:fb:79:f3:a9:8a:14:86:
b7:ba:f2:5b:1e:b9:37:0e:0f:75:0b:f4:80:a1:56:
6c:53:bc:0a:b5:cf:8e:9f:c6:94:c2:5a:64:1c:58:
9a:41:88:17:d8:a0:ee:00:8b:dc:8b:bd:3c:00:6d:
fc:d7:1b:32:4b:f3:92:1a:22:ce:0e:1c:d9:8e:01:
f8:e6:a3:f0:8f:8a:1f:59:a6:43:57:2c:d4:eb:2e:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:D8:66:77:E1:FE:F9:88:68:E9:F4:6F:82:8D:F1:0E:4F:DC:AA
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:90:b6:f5:c5:f9:e6:45:b7:4d:08:cb:69:cf:21:00:8a:4b:
c7:83:91:a2:85:77:91:d7:96:a5:5e:5b:da:f6:39:30:ed:01:
bb:2a:ce:5e:fe:f4:93:aa:c0:09:76:06:3d:39:69:9b:09:c5:
66:35:c6:b7:64:46:75:24:b0:db:7c:d0:d3:ee:4d:41:1e:2e:
7c:60:45:fa:9b:78:3f:80:11:eb:75:70:2f:fa:25:ce:50:b5:
14:e7:10:ae:b5:62:b0:39:77:bd:a5:26:3c:66:d9:fb:17:f9:
d2:ee:ed:4a:b3:49:21:39:af:8a:ea:04:59:40:ba:88:0a:38:
e3:d8:2b:37:71:9d:9a:84:f1:11:c6:6b:a9:27:3b:f1:9a:2f:
95:78:e2:69:60:09:99:04:74:38:77:f2:97:b2:a8:bf:a9:35:
73:9f:41:3f:71:c0:2a:c5:dc:a2:cd:3f:e7:ce:f2:67:bd:19:
8f:c5:96:5c:4d:21:8b:71:ae:56:ee:47:d6:7a:cd:91:aa:0e:
50:3e:72:50:ae:56:4c:43:f7:b1:b6:ec:52:ff:90:00:b1:68:
7f:ea:c7:ba:f9:15:53:6f:15:4b:9b:c2:80:1c:69:51:bf:1b:
4e:2c:4d:6e:43:47:65:1d:d5:0a:eb:18:1a:b8:83:b1:d5:1a:
bf:f8:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:38:42 2026 by rpki-client