
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: tNETOzv1IRKtZhJnmvqzYKXj9EjJ7JDqd4qHc5fxDTc=
Subject key identifier: 85:F2:CF:93:AB:1F:F3:62:48:59:FD:73:08:AF:A0:99:54:C5:F2:DA
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 019FAD1A608D46A8DF8E8E30B8C162DAB8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0D58
Signing time: Wed 29 Jul 2026 09:00:14 +0000
Manifest this update: Wed 29 Jul 2026 09:00:14 +0000
Manifest next update: Thu 30 Jul 2026 09:00:14 +0000
Files and hashes: 1: e29x5KQ9lUTXsNTy9Js9YJvWUiY.roa (hash: CkkrAFaQANiawRM+t6VTBnKH0rFPseRbQYjCYVGniKU=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: evuWrRdTVWd1RrTZpg/Ozv7O6FWdu9rl0Ym7IXR1T+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:60:8d:46:a8:df:8e:8e:30:b8:c1:62:da:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Jul 29 09:00:14 2026 GMT
Not After : Jul 30 09:00:14 2026 GMT
Subject: CN=85f2cf93ab1ff3624859fd7308afa09954c5f2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:65:10:b7:89:24:60:92:bd:c2:94:de:b5:
8c:4a:d2:62:69:f6:99:70:29:9b:4d:5f:69:51:7b:
8d:e6:20:40:25:bc:70:72:a5:24:2e:43:c8:be:2d:
6b:9c:04:39:b5:0f:89:dc:f4:e4:8d:87:bd:09:e8:
93:f1:e3:b9:08:ca:b3:2c:7c:c1:a2:e4:25:70:19:
5c:53:45:8c:f4:3d:f9:b1:3a:ff:43:db:cd:3e:11:
ec:e1:58:f2:7d:3f:b0:9c:7e:b8:b5:aa:98:d3:03:
17:84:ab:15:c9:b6:77:76:1d:80:ed:4a:ab:37:39:
90:3b:5f:27:41:ff:dc:60:24:ae:83:06:2c:39:a0:
55:a1:82:01:23:9e:b8:84:e5:fe:34:74:c5:32:6e:
00:79:c5:07:e8:a6:06:b8:58:25:98:8c:86:56:f3:
a0:75:fb:84:52:47:d9:1c:6d:84:eb:94:95:fe:79:
de:59:a6:80:47:74:fe:fb:2d:8d:1d:b5:1f:00:72:
83:a1:6a:86:49:4f:a3:f0:77:7c:a8:b4:35:ef:d3:
9b:85:55:ec:07:aa:fb:86:dd:9b:17:fb:59:b8:ae:
3d:eb:d2:7e:49:6c:d5:d4:df:8e:d6:f7:4d:bb:5d:
b8:05:f6:dc:6b:22:5e:67:15:b7:c0:fe:ad:76:8f:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:CF:93:AB:1F:F3:62:48:59:FD:73:08:AF:A0:99:54:C5:F2:DA
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7d:c3:10:f5:7f:15:51:02:47:b0:00:ca:69:ef:8f:41:05:
c3:1a:95:66:c2:08:9a:84:3e:0d:88:7c:cb:59:2b:38:32:8a:
ed:8f:1c:b9:73:2b:9c:c8:23:19:69:fe:be:dc:55:95:00:42:
b1:35:46:e0:5d:96:4c:04:8c:75:3e:7c:72:e0:a8:01:f8:0c:
e5:76:b6:ca:05:81:e6:54:6a:03:84:f9:eb:4f:0b:00:ca:f8:
a0:25:03:aa:3f:3c:c8:59:2f:36:7f:2a:f5:6b:b1:52:f9:43:
b6:cb:87:be:0e:57:59:f1:10:0e:90:be:43:64:72:77:1a:bf:
16:61:03:b9:ab:9e:64:94:dd:ca:40:eb:47:ce:d9:64:af:dc:
29:5c:14:5a:8b:48:c0:da:3c:26:7c:38:21:57:3f:cf:c3:e1:
09:67:f7:a9:7f:f1:11:56:b8:8d:49:dd:ae:25:17:aa:72:c8:
2c:95:b4:35:ec:be:12:93:c5:d9:e4:24:f2:88:0c:5f:14:19:
b5:88:c2:9b:8c:60:4e:e5:3d:04:e6:88:ec:d0:bb:fc:18:f9:
c8:3d:73:5e:ec:85:13:ab:41:26:d9:e0:02:69:35:a0:58:f4:
60:e9:a4:5e:aa:d3:0d:ec:35:b4:ac:ca:98:a0:46:bc:0e:bc:
97:cd:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:33 2026 by rpki-client