Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
File: jg0lcq37cjROrUxTtVe0Dspel6I.mft (raw, json)
Hash identifier: D0L+ANppfdhL5KC6yqKP5Bb7cwdlh25faNxP6oGf4CQ=
Subject key identifier: 9F:F0:9F:A4:85:D6:88:71:49:25:6F:54:9A:9E:B4:6F:03:65:FB:D4
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Certificate issuer: /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial: 01A0D383ADC6BCD09661F9F72B5B808FF2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
Manifest number: 0155
Signing time: Thu 24 Sep 2026 13:03:37 +0000
Manifest this update: Thu 24 Sep 2026 13:03:37 +0000
Manifest next update: Fri 25 Sep 2026 13:03:37 +0000
Files and hashes: 1: jg0lcq37cjROrUxTtVe0Dspel6I.crl (hash: 3vzZpiswLKRzJBxhNxqOP7vn5TaCJbznEJgFjTcrsmI=)
2: oGvecxChE9PvAr_dJh5s6G_15uM.roa (hash: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:ad:c6:bc:d0:96:61:f9:f7:2b:5b:80:8f:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Validity
Not Before: Sep 24 13:03:37 2026 GMT
Not After : Sep 25 13:03:37 2026 GMT
Subject: CN=9ff09fa485d6887149256f549a9eb46f0365fbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:9f:d8:e2:d8:ef:71:fc:d3:d2:12:da:86:
8c:da:14:bd:18:b1:75:b3:46:67:0f:3a:bd:40:a6:
b2:d2:fd:f2:1f:1f:b9:14:ce:af:91:0d:6b:53:5b:
61:db:c1:2f:11:52:1e:8c:48:0f:13:6d:58:79:84:
80:8b:51:53:b0:4b:af:2a:3e:b7:ae:3a:fd:9f:ff:
cf:51:24:2b:65:1a:71:ef:f2:8c:6c:49:2d:90:ef:
07:72:74:ba:8c:66:c3:eb:df:bd:29:a0:16:3f:39:
a1:6f:87:43:57:52:87:bf:fc:4b:d7:dc:e3:98:29:
49:62:3d:77:7f:ff:32:4a:c8:e2:10:91:a1:88:e4:
47:4e:e3:e4:f5:e1:81:ed:7f:42:7e:40:08:fa:e4:
a1:60:2f:d2:7a:80:90:53:f8:20:61:ea:0a:6b:f3:
5b:da:bb:2c:d9:d6:ee:dd:6e:13:e8:a2:37:b7:66:
c4:9e:00:0f:52:e6:fd:1d:b9:6f:96:61:76:d5:5e:
a2:3d:58:c8:a1:69:06:f9:18:df:8b:37:db:38:54:
ae:f6:d8:40:a5:4b:bf:da:ed:a4:f4:db:ec:de:89:
97:21:d0:b5:ca:05:f6:9b:9b:45:e9:ad:25:66:50:
6d:21:f9:86:75:ea:1e:16:9c:3d:96:46:d4:ba:42:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:9F:A4:85:D6:88:71:49:25:6F:54:9A:9E:B4:6F:03:65:FB:D4
X509v3 Authority Key Identifier:
keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d1:ce:95:a6:38:ff:9f:e2:ca:11:fe:fe:bc:12:9d:f6:1b:
e2:ba:ca:81:64:55:84:9d:cd:75:71:68:90:f9:4d:a0:62:bb:
40:82:a2:22:f0:c4:01:91:07:63:b7:dd:0e:94:92:97:b3:e2:
7a:e4:99:7b:25:79:dd:cb:14:32:d9:1f:57:67:9b:8a:80:57:
bc:bc:6b:0b:55:32:f3:62:ee:b7:86:bb:41:9c:dc:25:6c:7f:
16:00:2c:90:34:4e:fd:9f:02:e9:e2:a3:49:ca:b9:90:41:2e:
e7:05:d0:ac:ac:44:65:7c:3a:1b:f9:00:a4:c1:e3:a6:24:b5:
9a:97:dd:89:f0:11:e9:41:51:5a:b7:18:5c:52:d4:e5:fe:b1:
2c:e1:80:22:4b:d2:ac:f8:24:79:88:21:76:37:e6:d6:5d:eb:
01:0f:a6:cf:81:07:c7:ed:73:da:0d:6d:a7:8b:60:44:91:31:
b1:d1:35:8c:a5:77:01:3d:33:06:7b:fb:fd:8e:fe:f5:43:42:
c2:db:39:03:8a:f2:d0:bd:65:ef:5b:22:06:a3:4e:1c:83:75:
df:e4:77:02:f7:f0:8d:52:df:a6:83:1e:ae:fb:ed:d4:33:cc:
ad:50:70:f5:54:e4:d1:33:01:2f:3d:0f:e7:cc:51:2f:4f:46:
8c:de:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:41:10 2026 by rpki-client