Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: f2tWKaCoN7auY602OLtrTji+KLuUd7qPHsd1ySCXKzE=
Subject key identifier: F4:B0:4E:42:25:74:F4:EF:62:A0:EE:DE:2B:9C:CB:F5:62:80:46:00
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 01A113AAB8CA1003662DB9B6391AED91109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:01:57 +0000
Manifest this update: Wed 07 Oct 2026 00:01:57 +0000
Manifest next update: Thu 08 Oct 2026 00:01:57 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: NEAtZ14lN0ukBXhfOlPHagVaJJ9gSrh85Oke1Hwo+ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:b8:ca:10:03:66:2d:b9:b6:39:1a:ed:91:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Oct 7 00:01:57 2026 GMT
Not After : Oct 8 00:01:57 2026 GMT
Subject: CN=f4b04e422574f4ef62a0eede2b9ccbf562804600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:86:26:82:93:34:7c:7c:ff:f6:dd:b2:94:
01:82:dc:67:a5:8a:44:49:98:0d:37:c2:dc:c7:eb:
af:77:ad:6a:b8:d4:3a:e2:30:55:9d:ad:61:1b:18:
40:f2:f2:f1:50:2f:fc:8d:ef:0f:7e:f6:5d:55:01:
fc:b6:eb:0d:61:0b:a1:d4:39:39:9a:3f:ee:05:6a:
48:bd:75:90:94:6c:54:07:ab:c8:5a:6f:cb:d8:36:
90:50:a7:1b:e2:2a:a4:69:eb:01:ae:03:f7:c4:6e:
2b:d0:59:6d:9e:51:84:1f:23:37:35:61:eb:b9:4f:
c6:c6:a1:6b:f0:b6:ee:36:ae:45:45:28:fa:21:ac:
2f:00:20:78:ca:c1:d7:b3:43:36:99:33:02:5a:71:
6f:a2:b5:a2:42:74:13:0e:f1:cc:43:22:d7:b6:06:
7a:aa:92:a0:49:b3:89:89:d0:57:3f:61:77:5b:75:
3f:46:2a:43:42:ba:f8:41:90:89:35:c7:ca:8b:c5:
a8:fc:bd:e5:bd:56:d4:c5:7e:10:85:01:17:ce:dd:
56:7e:11:8e:d7:64:61:0b:9c:2d:70:82:6e:cf:b7:
26:85:2b:d3:cf:23:d1:25:77:8d:2b:76:ee:6a:11:
59:20:00:67:8f:eb:dd:5a:bd:1b:43:76:28:89:56:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:4E:42:25:74:F4:EF:62:A0:EE:DE:2B:9C:CB:F5:62:80:46:00
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a9:c0:d0:da:86:a9:a4:35:77:91:0c:4e:fb:d0:b0:a4:76:
c0:ff:4a:58:d2:e6:99:df:3c:58:08:03:75:2f:ea:4d:3c:ce:
54:1b:2c:5e:55:a1:05:d5:eb:05:63:39:f4:47:ea:5b:01:3c:
0a:dc:47:50:06:de:81:60:e8:27:d1:26:e8:cb:e7:2f:a5:8d:
7f:07:fb:46:f0:30:59:bf:6d:50:ee:89:70:a3:f2:f2:9d:f4:
de:5d:7b:c3:98:c3:6a:2b:d8:ec:2d:2f:eb:bc:83:8f:d3:79:
7e:b5:29:57:38:3d:7a:96:25:e4:7d:2b:c2:e5:ba:e2:75:c0:
d8:f6:2c:ab:5d:e6:8f:3d:12:92:15:a4:01:d1:ef:2d:fa:0b:
ce:fd:d3:29:c8:d3:ba:75:39:ee:85:2f:6c:f3:b8:17:e7:89:
eb:08:bf:41:d4:2b:7b:82:c8:e8:b0:3c:ca:09:35:f3:a6:12:
11:07:29:53:ab:0e:50:c3:3a:44:9a:fa:9c:f2:3d:76:b7:99:
af:a7:b9:f6:b4:9c:01:e5:7b:47:32:24:40:0f:9f:f4:67:36:
7d:5b:93:7f:37:dd:4b:8f:70:c3:1c:38:6c:3f:a8:6e:4f:84:
76:e3:95:62:28:24:39:1c:04:d1:ed:12:03:33:37:b7:79:ed:
aa:c5:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:05 2026 by rpki-client