Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: uwXJdHuXc3u6aF4SQBH8fzOgmqRa0L7n5G0kpIzIwEw=
Subject key identifier: EB:BF:8E:9E:6F:2B:42:11:3B:F6:39:BC:91:CC:D5:A7:11:A6:3E:3C
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01A0D615073A974592009459E7C03FF86B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 177F
Signing time: Fri 25 Sep 2026 01:01:37 +0000
Manifest this update: Fri 25 Sep 2026 01:01:37 +0000
Manifest next update: Sat 26 Sep 2026 01:01:37 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: itkPumFlntFq/UQ8C3Qvv+K2BxMJgtTAexfDHMRKsds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:07:3a:97:45:92:00:94:59:e7:c0:3f:f8:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Sep 25 01:01:37 2026 GMT
Not After : Sep 26 01:01:37 2026 GMT
Subject: CN=ebbf8e9e6f2b42113bf639bc91ccd5a711a63e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:95:9a:12:e7:bf:52:0b:4a:70:d1:5d:a9:
7e:d6:86:f3:0e:7e:f2:a4:a6:1d:b7:1a:23:78:60:
7e:9a:b4:21:5d:7c:8f:5e:f8:32:88:08:d3:68:3a:
b9:db:6c:fa:9e:9b:a0:4f:04:4c:3e:5f:9d:cf:60:
ed:5e:a1:29:ac:31:5a:ab:6e:ec:15:b8:5d:2b:13:
1f:ac:1e:e1:03:4b:b9:0d:99:7f:fa:77:9d:8c:fb:
f3:f2:ee:ae:e1:9d:8d:f1:0a:a8:76:24:c3:1b:ba:
ac:69:99:84:d5:de:fb:8a:38:44:2e:28:d3:4a:af:
15:4f:72:78:fb:20:7b:d0:f6:c5:81:fa:7e:2d:d9:
f2:9c:84:10:24:74:a5:0b:3d:eb:d5:d0:75:a0:5b:
80:77:a8:65:ec:ca:42:f3:2c:ac:d6:fb:ab:5a:bd:
7e:5b:0a:34:70:02:a3:88:bb:d7:03:58:5f:4b:64:
f5:e5:b7:d1:7c:82:bb:2c:83:bb:cd:d2:19:72:c0:
07:5e:f2:3d:47:52:f9:ec:32:c9:85:6a:bd:40:3d:
00:24:56:12:84:5e:4a:35:2e:9f:cb:4a:b7:da:34:
a5:8f:c1:46:9e:f1:82:0b:ec:4a:b1:e4:27:66:4e:
8f:27:30:1c:79:c8:a4:84:59:89:0f:62:e2:4d:7f:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:8E:9E:6F:2B:42:11:3B:F6:39:BC:91:CC:D5:A7:11:A6:3E:3C
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:08:cd:29:ba:f9:d0:5f:93:18:91:64:02:8b:04:d8:41:
c7:21:1f:e9:f6:d0:e3:f2:d4:47:54:01:b3:14:44:8b:a5:ca:
af:7d:fd:60:b7:3d:f6:e5:0b:b7:a1:92:91:92:75:71:cf:8f:
15:62:fa:cf:e5:71:33:bf:7a:46:ee:8a:65:bc:21:a6:5c:2a:
fb:9e:a6:95:4e:2d:5a:27:b6:6b:b1:1e:61:8a:80:03:8d:98:
ab:be:68:86:8f:da:2b:06:99:36:cd:8d:c3:1f:0e:f1:dc:b7:
87:da:66:3f:16:bf:b8:f8:90:37:65:42:79:55:80:51:81:39:
ad:cd:0c:ff:0e:73:13:0c:ef:32:9d:80:30:69:11:97:65:6c:
b8:2d:a3:d0:2d:a7:07:61:0d:6b:11:73:40:e3:22:a7:15:ce:
9b:18:7e:5e:e9:38:fe:ac:50:3b:ea:4c:aa:10:af:29:1d:82:
0a:5a:ad:0f:36:d2:09:9d:87:8c:3e:e0:7a:8d:43:70:f9:c4:
8d:1c:fd:1d:21:47:b1:84:35:73:0c:45:45:8b:e2:c5:1f:eb:
3d:3d:6f:f5:d5:12:6f:c2:f7:e7:50:33:54:b1:c3:52:88:b9:
f9:65:36:3c:13:7d:8b:be:ab:c1:f9:2c:07:51:0f:3c:a3:4f:
9b:5b:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:37:38 2026 by rpki-client