Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: tWzH0zdWOWhzk3EvIAwZz5qUKB/GQ7LjhuY7m+SO1l0=
Subject key identifier: 47:DB:BB:D5:FF:AE:91:6B:1D:3F:05:8E:9E:CE:17:39:1E:68:14:00
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01A0C96B3DF993AF5BDDCF022527DAE9B7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 168F
Signing time: Tue 22 Sep 2026 14:00:43 +0000
Manifest this update: Tue 22 Sep 2026 14:00:43 +0000
Manifest next update: Wed 23 Sep 2026 14:00:43 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: xGOS+TN3xyFmt6ub0l0/2rfZzZBEhQYabZUfxRfyibs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:3d:f9:93:af:5b:dd:cf:02:25:27:da:e9:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Sep 22 14:00:43 2026 GMT
Not After : Sep 23 14:00:43 2026 GMT
Subject: CN=47dbbbd5ffae916b1d3f058e9ece17391e681400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:8c:ba:da:df:bf:68:3f:ff:bc:5d:a3:08:
0f:fb:db:6e:18:88:b1:c1:aa:83:83:9c:7d:12:fb:
cf:f7:43:9f:fa:be:82:f8:62:1c:c9:6e:f2:e6:75:
d1:fb:f0:84:c2:b9:f6:e9:ea:d4:0f:3d:8e:1c:35:
9e:3b:8a:41:08:57:11:aa:9b:98:a3:0c:19:98:b6:
3e:ed:43:5b:ab:bd:05:97:6c:b5:d7:71:31:c3:ad:
e3:05:d6:34:37:ec:d7:3e:28:63:ae:79:3f:e0:1a:
3c:54:98:4d:90:f4:ac:46:e6:64:a4:34:dd:9b:40:
f8:e9:86:1b:ef:7e:b6:d0:cd:b0:9e:4b:7c:5b:84:
dc:7b:a5:ce:08:bf:bd:1b:d1:43:85:eb:50:77:c5:
fa:aa:45:fc:ef:70:53:f7:73:72:f4:40:c7:41:6c:
f6:10:a6:15:cc:99:98:de:7f:d7:c0:ba:e0:7f:11:
bc:27:ae:ea:d3:14:c8:62:68:ba:7d:64:9a:64:b6:
53:5e:87:95:59:ba:d7:52:e9:36:26:a1:f3:54:fb:
bc:f4:f3:88:29:9e:1c:f0:fb:7a:b9:ed:c3:79:46:
70:e8:b1:53:f8:7d:2e:c3:ba:8b:bb:83:e8:32:cf:
ce:3c:7a:bd:68:7f:f2:74:16:14:1c:29:49:c2:c3:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:BB:D5:FF:AE:91:6B:1D:3F:05:8E:9E:CE:17:39:1E:68:14:00
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:cb:14:53:c5:a4:11:bb:38:8e:19:ae:94:62:e8:52:84:
ef:61:46:d7:1c:46:91:55:d2:f2:ab:67:3a:a4:95:b0:49:85:
36:85:7c:1f:c7:74:73:dd:f1:59:2e:11:27:c0:03:1b:40:b5:
c2:90:00:97:32:90:d3:5b:c3:0c:27:12:a9:17:c6:95:e2:28:
67:31:85:f1:53:7b:32:ba:0c:b2:41:42:ca:44:29:f8:42:d0:
65:69:28:d4:e2:11:25:1b:28:d0:73:5c:d1:1c:b8:3b:fb:4d:
14:1b:35:17:5f:aa:55:8e:db:be:64:a0:d5:42:3b:a7:8f:a0:
d2:43:24:09:27:02:f5:b7:89:5f:74:0f:8c:51:54:f8:53:b0:
12:b8:c8:5b:ea:00:ac:9b:7a:49:19:87:ec:30:a3:e0:31:1c:
ae:89:e7:91:62:6e:73:0d:14:7b:5f:2f:ee:56:9d:7d:3c:cc:
2c:05:36:fd:8b:3b:ef:99:bc:df:34:97:e6:ad:4b:a4:84:30:
f2:c6:48:87:9d:36:5e:15:54:b4:55:7d:11:f5:56:60:61:f3:
48:b6:00:86:06:e4:8d:f7:4c:97:f1:e4:80:33:ab:fd:33:e5:
06:67:71:f8:a6:e0:e0:4c:42:d8:2b:6e:1f:a3:68:81:95:28:
de:f1:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:08:27 2026 by rpki-client