Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File: jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier: HCbYqgIrryBO8SiHlffxLIl2HKZm21PSlrSGfCIQZ3E=
Subject key identifier: 83:BE:B0:86:A6:3F:19:17:38:FD:88:DB:78:80:C7:06:C4:72:F6:BE
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial: 01A0D2DE34257A76CF9BB6A5F1CA0FDE4915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number: 027B
Signing time: Thu 24 Sep 2026 10:02:52 +0000
Manifest this update: Thu 24 Sep 2026 10:02:52 +0000
Manifest next update: Fri 25 Sep 2026 10:02:52 +0000
Files and hashes: 1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: 3h7rhhpW40FwFICxQE7HbAHv6HM1dB/zhc/DwKnfZxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:34:25:7a:76:cf:9b:b6:a5:f1:ca:0f:de:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Validity
Not Before: Sep 24 10:02:52 2026 GMT
Not After : Sep 25 10:02:52 2026 GMT
Subject: CN=83beb086a63f191738fd88db7880c706c472f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:16:1c:76:f6:8a:c1:97:ef:b4:3c:c7:01:
ce:2d:bb:ce:5d:44:f3:db:01:8e:4f:44:cd:10:72:
49:1f:77:d4:5b:f9:fe:9c:29:54:25:d4:c6:02:5d:
9c:80:78:b4:18:77:66:75:c9:b7:b3:a2:f0:55:5b:
26:31:65:af:2b:d6:42:d5:9b:69:3d:a4:c6:f5:96:
c4:60:7c:fd:41:95:3c:78:2c:fd:cf:44:9c:ec:47:
b1:c6:63:24:d6:62:41:d9:c1:57:56:24:b2:fc:08:
4b:d1:1c:51:55:11:fe:27:87:b3:7e:0d:3b:0d:74:
1d:eb:a0:80:aa:cd:f0:9c:b7:d8:dc:51:56:5c:f5:
af:2b:9d:1a:a1:c9:a0:63:3b:e5:e3:a7:40:aa:44:
c9:bb:60:13:4b:4c:01:9d:24:13:db:da:fa:2e:96:
07:ed:94:1e:80:0c:86:50:76:3d:84:e1:d7:e1:8d:
1d:9e:8d:41:04:0e:00:2b:04:87:8f:ad:97:f5:a2:
d6:83:9e:91:f8:91:56:2c:1b:5c:2d:29:b4:2b:99:
21:1b:9f:12:21:12:25:ba:d2:5b:ec:05:1d:17:9d:
95:1f:7e:52:c7:3e:67:13:11:df:dc:a0:98:06:4e:
7d:ed:6d:b3:91:e2:6a:bd:f6:71:e0:5f:69:fa:dc:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BE:B0:86:A6:3F:19:17:38:FD:88:DB:78:80:C7:06:C4:72:F6:BE
X509v3 Authority Key Identifier:
keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:2a:b5:db:67:fd:8e:7a:4b:54:a6:ea:ac:40:a3:a8:ae:
05:f8:c2:b3:ef:09:7b:d3:ff:2b:8c:67:05:96:df:e0:5b:7d:
bc:4f:df:07:d1:65:29:30:9c:b1:fd:a0:ec:cf:b2:9b:d3:5b:
df:10:71:a0:dc:fa:99:66:08:1f:8c:35:c5:36:37:63:65:62:
99:81:18:41:c4:2e:00:b1:c4:68:94:d7:56:65:6c:93:f1:7c:
98:3c:fb:e8:3f:c4:55:c6:99:65:bf:f8:3c:cf:ed:5e:ec:29:
c7:46:9b:05:95:01:f7:6d:8d:3a:35:0d:9e:ac:dc:a6:5c:b7:
d8:72:30:57:2f:1d:b9:06:3c:26:e5:8f:07:74:31:81:39:7d:
9c:36:db:52:4a:23:1e:9a:73:d0:50:03:13:57:90:04:7b:6e:
dd:8a:f6:66:a9:26:7d:9b:07:f9:a2:23:9d:27:16:98:c7:8e:
05:52:93:10:e1:cd:2d:8f:7d:49:49:05:a2:25:dd:19:20:37:
45:fc:07:66:ae:39:21:48:69:16:00:e1:b9:94:c3:6a:c9:e5:
e2:6a:c2:13:ab:72:7f:ea:1d:f3:3e:11:7c:c0:c0:f6:ee:d8:
21:00:91:c3:53:6d:9f:49:22:ae:cf:45:45:9a:6d:60:f6:22:
4d:cc:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:40:14 2026 by rpki-client