Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: MPsGwVAeVestjYXP/0R7SiqOvHe4zlwR9txmQ5NnY08=
Subject key identifier: A5:80:56:B5:C7:CC:75:76:B9:67:DC:ED:0C:0E:E7:72:B8:A8:5A:01
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 01A0D9BBC8941E45B97FFC0152C745B41DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 18:02:37 +0000
Manifest this update: Fri 25 Sep 2026 18:02:37 +0000
Manifest next update: Sat 26 Sep 2026 18:02:37 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: pb0ZKPOZeY7amCVSeg2LMheFu+6kPqN7ho6g/nct/90=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:c8:94:1e:45:b9:7f:fc:01:52:c7:45:b4:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Sep 25 18:02:37 2026 GMT
Not After : Sep 26 18:02:37 2026 GMT
Subject: CN=a58056b5c7cc7576b967dced0c0ee772b8a85a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:d2:94:51:24:22:a6:d4:58:fe:7f:79:d4:
2b:20:8c:81:f4:d4:b2:b0:fb:6f:c8:bb:f3:4e:62:
21:b7:79:8e:6e:43:a3:9e:7b:38:f2:75:10:80:16:
b0:07:4f:2b:ec:22:39:b3:2f:89:6f:2b:bd:f1:94:
c7:39:2e:c4:cc:fc:d0:e0:09:31:f1:5e:61:4c:4b:
09:35:03:ca:c4:95:fb:0e:8a:b2:76:48:1c:54:4c:
15:15:f7:4a:ca:d5:01:36:81:a3:3e:ca:37:17:75:
fb:09:66:b7:d9:3e:42:db:42:2b:9a:3e:c2:73:8d:
f0:2b:83:58:01:25:32:af:1d:3d:67:97:90:06:05:
2d:25:f2:6f:b3:7f:e0:4a:ef:9b:65:43:3c:df:80:
2a:a0:ae:9d:5b:d2:7a:8b:9e:cd:30:27:fb:1d:d1:
e8:95:33:03:91:32:f6:e3:db:29:4f:23:10:86:0b:
e2:4f:42:f2:82:db:2a:4f:35:2a:e5:02:39:9b:dd:
19:86:ae:64:59:0c:f2:86:69:66:72:28:56:51:dc:
45:af:db:af:73:5e:88:aa:aa:06:b0:42:22:76:d2:
8e:d5:e9:32:14:e6:b4:1d:9e:9a:7f:24:2f:ff:b7:
49:7e:4a:e5:2f:80:7d:fb:3a:82:26:46:5a:db:00:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:56:B5:C7:CC:75:76:B9:67:DC:ED:0C:0E:E7:72:B8:A8:5A:01
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:f2:58:97:09:69:69:c8:70:70:b7:82:ea:8e:5e:75:d8:
a3:66:cf:87:cc:ef:b1:b7:27:be:c5:54:df:60:e8:05:84:db:
f5:16:82:a6:47:c6:32:f0:3f:a0:b3:c9:a3:94:17:8a:a7:51:
58:55:aa:a8:1b:0c:d7:5e:ed:0d:93:74:ff:03:d6:4a:1f:87:
f1:bf:ab:b4:e2:1c:12:b7:7c:17:fc:71:50:ed:0a:03:0b:61:
9f:11:8c:06:f8:9c:38:2f:37:bb:2e:9c:e0:8d:c7:97:9f:67:
15:b2:18:72:52:00:ec:87:10:d5:f3:4d:23:dc:23:8f:50:fd:
57:32:57:49:53:9d:e4:4f:49:6d:f1:b0:02:0b:f5:55:5c:98:
ac:d7:09:e7:28:df:80:31:98:39:d8:44:f7:af:00:bf:2d:cc:
f2:06:c5:a8:c1:14:1f:f7:90:96:fc:22:72:28:0b:d3:1d:7b:
58:1d:42:5a:16:17:0f:bc:90:71:76:67:8d:d2:2d:80:2a:d5:
35:0a:cd:7c:42:90:bd:9c:70:11:bd:c4:23:4c:f5:5b:92:2b:
bc:c0:19:bc:56:b4:29:d4:d6:4a:0b:62:95:06:4a:93:89:f4:
5d:c1:09:a2:40:77:85:1b:d8:e5:96:aa:3a:f7:fd:cb:b0:cf:
54:3a:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:03:39 2026 by rpki-client