Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: iONm68vR2cvnWvM4EZWinKexCmIpIZcAdOe+ZapMXno=
Subject key identifier: 59:30:3C:B6:24:EE:5C:D7:80:BB:5F:8A:8F:52:15:0E:96:7F:39:1E
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01A10512EDBC5192AF186EB9FE4A3F423D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 157B
Signing time: Sun 04 Oct 2026 04:01:28 +0000
Manifest this update: Sun 04 Oct 2026 04:01:28 +0000
Manifest next update: Mon 05 Oct 2026 04:01:28 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: AuUdQzIU9a0Zx1NbX26Lpj6eL+N/Lj/wJSck5atDKEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:ed:bc:51:92:af:18:6e:b9:fe:4a:3f:42:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Oct 4 04:01:28 2026 GMT
Not After : Oct 5 04:01:28 2026 GMT
Subject: CN=59303cb624ee5cd780bb5f8a8f52150e967f391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:f2:f2:92:eb:3f:8f:e8:73:2d:b3:18:70:
40:0f:08:d6:fd:68:16:9a:3e:74:d9:9c:a8:52:67:
df:60:75:9e:c5:61:e4:45:2f:6c:7c:fc:46:1a:8d:
e5:35:c2:17:6c:45:86:89:cc:78:d4:c7:d6:9c:bd:
d4:a8:f4:f9:07:8e:d3:0a:ad:31:dd:c3:ad:fd:35:
31:55:07:ae:5c:5f:60:5b:43:57:9a:ab:2d:1c:8b:
f9:98:6f:e6:05:7d:d9:2c:db:a7:94:d5:63:eb:32:
c1:78:d5:92:86:76:cd:84:42:0d:1b:63:c0:03:dd:
12:e7:f4:a6:5a:df:25:8a:d5:28:67:61:b9:6b:f9:
53:d6:54:dc:f8:08:8a:c9:2d:57:67:60:96:ac:76:
15:e6:4e:8e:8e:58:5c:c2:a5:1d:a6:65:14:a4:45:
f8:00:23:29:96:42:ae:bd:e4:78:2f:ac:79:1f:5a:
6b:b1:aa:83:97:14:b4:32:5b:7e:20:3c:61:3a:87:
e1:db:d0:7f:ad:84:fa:d5:16:61:5b:bb:c8:10:50:
24:60:49:a3:02:5b:9d:02:13:9a:15:bb:9f:44:5b:
eb:63:2b:1c:3d:ad:10:ed:35:49:96:0a:9f:a8:de:
58:c0:af:61:b6:03:a4:c3:98:67:0d:e4:7e:8e:95:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:3C:B6:24:EE:5C:D7:80:BB:5F:8A:8F:52:15:0E:96:7F:39:1E
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bd:60:34:21:9d:d9:7e:c8:0e:a9:c3:45:f2:72:9b:2c:e6:
17:f5:5d:1b:85:e3:55:87:40:e1:52:0e:05:f6:a5:58:4a:43:
57:2c:d6:92:71:fd:d7:2f:07:54:5f:0c:22:d6:4f:34:4f:56:
79:e6:0b:42:b0:da:26:dc:10:12:ad:df:44:05:21:b4:0e:2d:
e9:b4:92:b7:9f:d9:5a:d6:f9:75:2e:e1:8e:64:64:3b:1b:40:
7b:13:38:10:8f:d1:7b:ce:7e:17:18:3d:84:a2:3c:ef:83:32:
55:e7:7a:fb:c6:0f:4c:af:22:69:ad:2b:5d:fa:31:f6:14:ff:
08:d9:c8:8a:d0:47:81:63:ce:bc:24:8b:d8:97:64:a3:c1:11:
4a:5a:56:a1:2c:37:ae:8a:91:c6:07:e0:15:c1:94:5a:1c:7f:
5c:84:06:ed:67:b8:58:bf:2d:59:1e:c2:2c:58:3c:98:fa:89:
57:20:d0:d5:bf:0f:8a:76:27:9b:66:98:4b:a5:85:39:03:3c:
9e:4a:52:17:e3:08:8d:9e:15:27:1b:a3:f7:90:3f:74:d3:1b:
65:ee:ba:3b:50:41:90:ec:cb:14:61:97:cc:fb:57:b0:8b:62:
a5:d8:bf:b1:a9:af:be:cb:99:7f:ad:b0:40:31:f7:90:67:51:
f6:ac:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:58:33 2026 by rpki-client