Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: UzajM1rhpSgZoRwxaktFroc7FckJ7HbYCsVbCTbXR+A=
Subject key identifier: E8:30:18:D6:0B:16:2C:B8:A8:25:FB:35:E5:72:26:9B:EF:DD:1B:8E
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01A0FD59CF396CBF373EB71AAEF7973E4C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 17CF
Signing time: Fri 02 Oct 2026 16:01:56 +0000
Manifest this update: Fri 02 Oct 2026 16:01:56 +0000
Manifest next update: Sat 03 Oct 2026 16:01:56 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: KHE87Ows8kPp3I9Hg9VdU+4Xj7D9stK8IxT/9Yee+NU=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 16:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:59:cf:39:6c:bf:37:3e:b7:1a:ae:f7:97:3e:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Oct 2 16:01:56 2026 GMT
Not After : Oct 3 16:01:56 2026 GMT
Subject: CN=e83018d60b162cb8a825fb35e572269befdd1b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:21:59:a7:67:fc:ed:98:00:98:5b:d4:b2:
89:3e:31:ee:8c:32:2d:ac:8f:ef:6c:3a:e9:40:59:
0c:7d:d7:87:5b:cc:73:8b:42:0b:44:0e:dc:78:ab:
7b:6d:29:2b:cc:a7:01:82:09:9c:3b:ea:9c:89:dc:
95:5d:22:f1:8e:2b:1d:1c:36:c2:dd:a8:36:19:35:
50:dd:5f:c2:26:88:4f:d7:1d:42:a1:09:35:d3:2b:
83:58:c5:fa:9e:a2:c1:97:6f:ea:8b:6d:5b:78:c3:
de:36:82:76:54:7a:55:d4:ab:85:26:1e:76:fb:ea:
33:c1:76:7a:26:30:6e:9a:da:56:17:16:98:87:02:
f8:1a:42:56:19:91:7a:ca:76:dc:35:d4:42:e9:91:
5a:40:bb:73:42:e6:4f:00:16:bb:f1:f7:fe:08:54:
57:fa:5b:f8:5d:34:fd:ba:94:9a:c2:fc:fb:b9:65:
57:d5:44:b0:23:17:3c:d9:c7:80:b6:fb:71:d6:da:
55:eb:b7:c2:4e:c7:ad:cf:08:3a:c3:3e:30:1f:62:
ba:ea:e0:31:db:26:32:62:65:f2:72:09:3c:fc:27:
2e:c0:b4:b9:39:72:7a:f0:e5:27:d3:0b:b5:fa:40:
02:1e:f4:66:28:44:e4:1f:0d:2d:66:8e:b3:ce:7b:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:18:D6:0B:16:2C:B8:A8:25:FB:35:E5:72:26:9B:EF:DD:1B:8E
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:ee:48:07:11:2b:e4:b3:a3:f5:40:70:1f:86:33:fd:f1:
68:ad:92:fd:27:fc:7b:46:b9:25:ea:65:a3:d4:0f:53:88:8d:
60:63:7d:19:c4:d3:dd:82:10:67:4c:d4:52:6d:4c:09:ef:34:
c7:60:29:d6:97:d1:66:c8:07:be:e9:72:ff:9b:19:a5:4f:8a:
e1:d1:07:87:b9:52:10:e9:ce:48:b8:8c:b9:b2:37:aa:e1:86:
96:95:89:60:27:58:0f:8e:80:69:8b:db:b1:f3:c2:49:d9:40:
dd:7a:bd:b0:e5:54:c9:4a:51:e7:4f:0e:c4:c9:ff:4b:27:e4:
7d:28:c6:d0:f2:aa:18:8c:46:7c:9c:38:61:9a:82:8e:70:4b:
59:e6:c3:c8:f0:82:1f:70:8f:db:3b:e0:12:43:72:2c:1c:fc:
9b:84:b2:26:d3:f5:48:98:76:ad:03:49:ce:23:03:bd:46:e5:
6e:ed:3a:c7:42:f5:cc:36:03:56:a1:5a:dc:69:98:bd:08:08:
d3:73:5d:f2:25:c8:10:89:8f:bf:3f:92:90:c9:f3:6c:dd:09:
d5:10:25:9a:0b:a4:5f:30:7c:3a:f1:64:5b:96:27:31:3e:f4:
c3:d9:70:bd:ec:e1:40:76:81:45:6a:76:6b:b2:d6:a1:47:fb:
28:73:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:18:43 2026 by rpki-client