Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: sY3sNj8kkZGXyi5YFc0+qrvyTXwUbUW/yHYC6lnWWng=
Subject key identifier: DC:B2:89:02:22:2E:58:52:D4:7D:24:90:11:01:71:F0:A6:A4:DC:29
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01A0E1E28C4AAF8254FBD82A2E81BEED4670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0FA5
Signing time: Sun 27 Sep 2026 08:01:55 +0000
Manifest this update: Sun 27 Sep 2026 08:01:55 +0000
Manifest next update: Mon 28 Sep 2026 08:01:55 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: rGyCVuyxH5YObucWAlW3+5DWgcBob5zsjLw5p9FoUEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:8c:4a:af:82:54:fb:d8:2a:2e:81:be:ed:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Sep 27 08:01:55 2026 GMT
Not After : Sep 28 08:01:55 2026 GMT
Subject: CN=dcb28902222e5852d47d2490110171f0a6a4dc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:f3:8d:10:7c:ee:0e:f8:63:12:01:84:6f:
a3:a7:c0:dd:95:02:57:bf:83:c5:08:01:82:ca:0b:
a1:80:a2:14:50:bc:36:76:86:43:e3:f3:92:38:4a:
a9:11:0f:7f:05:9a:b1:fc:3d:08:c7:87:6c:61:63:
7d:ed:26:1f:2c:42:90:82:45:27:49:1d:db:27:15:
a8:4f:28:8b:09:5d:af:5c:91:2b:18:3d:10:34:35:
67:75:c3:9c:3b:8c:72:99:de:c3:fd:4b:df:8d:de:
bb:e5:e0:3e:e9:7f:92:63:8d:f0:ae:7f:85:28:ea:
73:29:62:64:27:a2:0b:83:09:3b:c1:35:bf:26:d8:
05:52:87:50:d6:4e:d9:4d:a1:d3:cd:ae:40:ce:cd:
43:22:65:43:8a:0b:c7:38:71:77:ce:f1:b4:23:59:
50:53:5c:1a:9b:92:9a:e3:8d:7b:13:e7:16:c7:03:
d9:6d:f2:14:13:d4:39:1e:1d:7f:bb:5a:a9:ec:34:
0c:20:1e:45:eb:39:24:7a:b6:5d:a6:17:d2:44:50:
33:26:2b:ac:ed:f6:e5:4f:b7:cf:99:2c:c3:d3:57:
95:a6:34:28:5b:db:61:62:a1:a5:94:9b:cc:8a:8f:
b8:9d:e6:8d:55:14:7a:34:4a:3d:df:97:87:84:88:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:89:02:22:2E:58:52:D4:7D:24:90:11:01:71:F0:A6:A4:DC:29
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:56:02:8b:2d:8d:8a:c1:2c:fd:89:21:32:5f:99:36:ae:cf:
99:77:2b:b8:d0:3f:fc:a4:1e:ed:95:61:74:b2:2f:a0:2b:86:
da:df:83:3b:49:32:6b:91:ab:e8:fb:eb:d9:03:a6:3b:f3:c0:
b4:44:08:fa:de:b4:c2:74:79:6f:ab:11:e3:f1:b9:14:f0:d6:
f6:cc:4f:76:7c:85:b7:ff:f3:53:fa:3a:da:d0:0a:95:3e:46:
bd:b7:0f:d8:ee:d9:60:0f:13:49:8d:7f:65:9a:19:1e:fb:46:
ec:8e:b1:fd:cb:c6:2f:9f:c6:52:6e:c1:d9:8a:c0:57:bd:9a:
21:79:e8:49:87:eb:53:5f:c2:72:ac:42:f8:6c:c0:21:85:f0:
e5:01:85:c1:1d:4e:b7:78:c3:54:72:30:3c:51:78:8c:48:86:
54:98:1b:31:db:81:fb:ab:76:0f:4c:0b:a6:25:97:d0:b4:e5:
2d:04:ed:ee:41:03:7c:10:c4:92:21:fa:fc:1a:34:fc:d0:94:
e3:58:ff:34:10:d7:a2:13:8b:dd:e3:f7:1f:d9:90:4f:86:9b:
d0:06:f2:f5:0c:7e:e4:cb:1b:b9:3f:94:33:ac:1d:2b:03:a2:
92:ac:0a:1f:4f:6f:89:ba:e6:31:e8:e7:73:40:05:57:c3:13:
1a:37:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:12:28 2026 by rpki-client