Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: Yq5t5YDIYR/F6aq73aupv6fazgkxjXX64FvlFw1iTNU=
Subject key identifier: 0E:64:53:FE:15:29:F5:45:29:6D:7F:97:6F:C0:7E:E5:D3:48:7C:A5
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019F91A393EAD1D8F49D42D745831C875597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 16D7
Signing time: Fri 24 Jul 2026 01:00:44 +0000
Manifest this update: Fri 24 Jul 2026 01:00:44 +0000
Manifest next update: Sat 25 Jul 2026 01:00:44 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: /S9mcs1TKb3Sk3jP7w6r+zzhD/c5wp/aUhpZafVZYpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:93:ea:d1:d8:f4:9d:42:d7:45:83:1c:87:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jul 24 01:00:44 2026 GMT
Not After : Jul 25 01:00:44 2026 GMT
Subject: CN=0e6453fe1529f545296d7f976fc07ee5d3487ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:2b:18:6e:d2:54:79:7d:1d:a8:e3:7c:e3:
fe:6e:a7:b7:5c:52:8d:1a:f0:73:59:36:4b:64:88:
ba:68:6b:6e:4a:ad:d1:0c:a7:a2:43:6d:70:9e:1a:
70:53:be:70:83:b2:50:6c:fc:47:78:7d:ab:b0:df:
6f:d4:45:79:c8:0a:ed:7b:9d:37:ad:07:31:40:6c:
ff:18:cd:0f:3d:1d:d9:d5:90:69:56:b6:d5:ce:61:
fe:ff:3e:70:8a:73:0b:9e:a7:5b:d0:9b:fd:ab:60:
20:cb:f3:5a:5c:09:53:aa:72:b2:83:00:85:a6:5d:
bf:ee:90:7e:f8:b7:de:e5:af:8a:1b:28:34:7a:bf:
4c:b2:97:df:ba:b5:cf:7a:df:a0:4e:33:2d:3b:67:
28:e9:e1:c1:03:73:10:53:8e:25:25:7c:cb:22:8b:
bb:2d:a6:63:3c:f0:be:53:f0:0e:d7:64:00:1a:61:
04:99:d6:fb:71:e4:50:f9:7d:23:a1:e3:39:7f:77:
a9:4d:f5:f1:89:6a:d5:02:0b:3a:b0:74:1c:0e:2e:
95:cb:67:0e:db:90:f6:c2:39:a9:96:a0:dc:5e:aa:
77:a6:1e:4e:fa:c7:b6:8c:da:93:77:79:35:43:2f:
38:10:b6:ae:0a:f2:cd:e9:83:1d:20:27:9e:72:c6:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:53:FE:15:29:F5:45:29:6D:7F:97:6F:C0:7E:E5:D3:48:7C:A5
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5a:01:df:7a:0a:08:dc:6f:dc:bd:a8:62:c2:03:7e:02:ba:
b9:8d:6b:cb:2b:ba:be:b2:53:25:39:c9:d4:1a:6e:c7:6d:5e:
a4:0d:63:50:89:c5:09:83:35:7c:af:64:e6:3e:c1:6a:bd:c3:
7c:33:a8:8a:d4:08:91:eb:88:e6:81:25:ef:b8:30:c9:60:35:
7e:9f:8c:fb:99:1a:7e:69:f0:db:a8:24:b9:9a:b6:21:1c:31:
66:1a:24:ac:0c:f0:41:0b:90:82:2a:91:f6:09:29:af:80:22:
66:3e:67:aa:a5:c4:01:0f:63:d1:4b:64:4d:00:86:a4:cf:64:
3d:da:84:cd:63:1d:b2:9f:1a:dc:21:80:66:7a:59:64:1b:ea:
18:58:d9:8a:72:28:82:9a:c6:5c:bf:35:8f:cd:28:d4:ad:17:
e9:78:37:52:7e:d8:07:85:3e:d7:f9:2e:7a:bd:78:c4:d7:ae:
b6:f9:3d:45:37:6a:33:5a:61:35:66:05:28:d5:c6:35:85:90:
6b:bb:49:a0:f4:f2:1d:bf:a7:14:e0:a7:30:aa:f0:8c:5e:38:
ba:02:f8:77:04:6c:be:c2:0f:83:f0:dd:36:69:4b:4f:92:ad:
60:fc:0b:86:1f:fb:e6:9b:12:c4:24:e9:c7:54:e6:ed:f3:f1:
4c:b8:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:15 2026 by rpki-client