Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: RKdutwlupgt10lDhD2ioNNGppVEbSlKzMno2veeBfpo=
Subject key identifier: A0:DF:F1:EC:D8:C7:6F:46:2A:D1:38:AD:B9:04:28:1C:FA:F0:BF:25
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 01A0C7EAC89501C9F4C43A265030ABD354AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 1A3B
Signing time: Tue 22 Sep 2026 07:00:47 +0000
Manifest this update: Tue 22 Sep 2026 07:00:47 +0000
Manifest next update: Wed 23 Sep 2026 07:00:47 +0000
Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: BgQO9lBU2o+1b+hcKXKWO2U5WQe6zG2yoop2jNkYvaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c8:95:01:c9:f4:c4:3a:26:50:30:ab:d3:54:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Sep 22 07:00:47 2026 GMT
Not After : Sep 23 07:00:47 2026 GMT
Subject: CN=a0dff1ecd8c76f462ad138adb904281cfaf0bf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:53:71:b4:b4:ae:1f:1c:7d:e1:4b:71:07:
84:b7:4c:68:0b:f9:af:69:58:fb:a1:98:4f:47:d4:
67:aa:3e:c8:3e:13:ea:eb:89:d4:5f:e2:ad:43:94:
77:4f:db:13:e9:82:68:d0:b4:ed:29:16:d3:02:3f:
df:7c:ce:7f:71:a4:9b:6c:9f:22:c2:13:5e:c1:3a:
22:8d:d9:09:b5:91:d0:cb:f7:de:08:f3:00:cf:1e:
16:86:c3:72:4b:65:a1:c5:8c:af:58:ed:bc:8e:76:
10:dd:f1:76:15:3b:16:82:7f:1a:f7:a9:9c:db:40:
9b:e3:64:f1:66:ad:00:0e:49:f3:8b:fb:df:ae:71:
fa:37:07:3d:d3:b9:3f:cf:f9:bb:c4:70:92:36:a9:
f9:ee:f8:af:a8:d4:8f:3b:9e:54:b8:34:07:33:1f:
96:e6:90:44:60:e8:73:cf:2c:8f:e2:c1:84:93:26:
8f:9a:3b:6d:c4:63:b7:11:80:7b:a6:c4:79:bc:5d:
b1:cd:47:fb:b2:63:14:d0:61:d7:cb:38:b7:a8:56:
a5:30:ed:ef:5b:67:02:a4:90:92:a4:82:b7:e2:f6:
75:af:88:e6:8e:b4:2a:95:3d:09:3f:09:93:ab:59:
66:99:2f:8c:e3:ae:5e:da:fa:d0:e1:b1:37:83:ee:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:F1:EC:D8:C7:6F:46:2A:D1:38:AD:B9:04:28:1C:FA:F0:BF:25
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3f:82:c8:8b:86:61:df:66:a7:50:fb:49:e9:0e:af:8e:cf:
07:4b:3b:6f:4a:26:7f:3a:2c:f6:95:d5:2a:43:5a:aa:b2:3d:
78:d5:54:33:78:08:49:d2:b1:30:fc:2c:0b:f2:6f:41:e2:35:
bd:a3:1b:e4:18:65:1b:b9:9b:c8:72:3d:b4:8e:dd:5e:1b:05:
1e:08:1b:e8:86:ac:24:e5:5b:ae:cc:cf:87:72:4a:b6:bc:d2:
1d:9a:1b:90:ae:53:3d:43:9f:e7:84:26:21:7a:8e:df:a3:91:
f6:66:e0:26:f2:4a:b4:bb:eb:e7:db:f2:64:17:0c:b9:21:30:
28:50:bd:51:01:f6:a6:e6:11:34:8e:b3:91:5a:71:a0:85:32:
7d:d4:dc:1e:1c:e7:b3:1d:8f:2b:12:5d:88:3a:c5:f8:61:14:
6d:ec:07:09:9d:11:16:51:4e:95:9b:10:f5:6f:f0:1d:1f:b6:
37:a6:f5:09:d3:8e:6e:79:c2:e6:2b:01:b0:f4:c5:c1:6e:60:
57:59:06:c4:77:19:1e:0d:24:69:ca:58:44:d6:cf:a4:e9:1e:
ec:21:ed:59:f9:9f:d4:eb:70:ff:4d:73:6d:9d:1a:30:14:d9:
31:8d:9a:f1:59:a5:b6:a8:40:62:5e:e3:b3:70:a0:ec:c8:dd:
4c:91:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:27 2026 by rpki-client