Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: JwmqbShmDfc0zuw9TUZITjZY+EJMilY9oOj5LkMcfWo=
Subject key identifier: 6A:D7:3B:08:AA:72:69:43:0D:A9:B8:FA:83:3D:EE:7E:FA:B1:9F:16
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 01A0CAEB93BA5CAF0F92970D876F608956D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0D39
Signing time: Tue 22 Sep 2026 21:00:31 +0000
Manifest this update: Tue 22 Sep 2026 21:00:31 +0000
Manifest next update: Wed 23 Sep 2026 21:00:31 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: Cucm5te3X3z31c6vUGnFKO8TBv9otEm1b5lFFfwcVGE=)
3: qNLpv7C-WKIPtLwOt5vvG2jOI1g.roa (hash: ja42JQwQXX8r9uYT0tonmAltBETuMJpfhq0fQEwqugU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:93:ba:5c:af:0f:92:97:0d:87:6f:60:89:56:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Sep 22 21:00:31 2026 GMT
Not After : Sep 23 21:00:31 2026 GMT
Subject: CN=6ad73b08aa7269430da9b8fa833dee7efab19f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:74:00:78:89:5f:0b:4a:47:6d:a2:18:6c:
b9:5f:cc:f3:de:c7:c5:97:53:b9:87:b4:46:4c:70:
98:34:d6:29:72:69:f9:f6:d5:a2:2b:6e:7b:71:df:
66:0d:2d:75:92:31:3e:f0:9c:f9:00:bc:c5:d3:08:
72:7b:a4:dd:e0:15:7c:f9:b2:4f:1e:91:45:89:4f:
ba:12:50:d0:79:5f:34:9d:c7:6f:cc:dc:eb:56:63:
6c:76:ef:34:86:fa:1d:80:ad:19:0b:79:07:28:45:
7b:6d:f9:46:6f:34:a1:dd:17:f6:a8:f4:e6:13:1e:
47:1c:02:73:da:db:ce:2f:81:fd:20:d9:7f:31:b9:
36:f4:b9:72:a8:1c:d7:79:09:8f:d9:f3:c1:7b:7f:
75:78:76:c8:e4:88:f3:72:14:f9:b4:31:74:f4:d4:
ec:ad:40:89:20:00:5a:86:ea:af:9e:a6:2b:2a:d1:
b9:ce:06:56:7d:fb:f5:47:e6:66:e7:3e:d5:67:e8:
c4:a6:a6:92:7e:ce:0d:db:54:1a:b3:f7:f5:8d:46:
1b:26:2c:1a:c3:d4:dc:38:de:b3:36:a2:5c:72:4e:
1d:61:4d:aa:60:55:ad:23:95:69:21:2a:56:8a:5f:
60:a5:da:59:30:ef:21:e7:99:de:71:da:b6:d7:d2:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:3B:08:AA:72:69:43:0D:A9:B8:FA:83:3D:EE:7E:FA:B1:9F:16
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:b1:77:3c:b5:7f:b5:c5:5d:7e:ef:4f:b3:d0:ed:6e:73:
16:77:9d:86:98:06:3f:d4:e6:f8:3b:e5:09:07:00:25:3c:ba:
52:9e:51:57:6f:f4:9e:1b:57:bf:2d:6e:6e:ae:28:f8:1a:42:
bb:17:ab:2a:a8:cd:98:f8:7d:b6:f2:28:63:49:52:26:3d:9c:
1f:87:e3:30:84:52:ad:b7:2a:74:27:43:e7:3b:7d:ac:5c:60:
ab:c3:e0:85:4e:c1:31:4a:c3:a8:c2:71:fe:7c:ca:7e:f8:2c:
d6:61:e0:03:9a:23:d8:db:3e:5b:16:8a:2b:3a:9c:a6:6a:46:
db:4e:22:23:b9:17:2b:14:dd:ef:d8:f4:b1:05:ca:b9:eb:4e:
0b:65:98:66:0e:de:63:44:27:a1:3f:49:d1:97:30:07:f5:ba:
cf:51:52:a8:a6:fb:e8:b3:dd:88:c1:7c:40:4d:9b:2a:7c:9a:
41:3b:b2:53:9f:fe:53:42:1b:78:32:6f:33:26:85:6c:f5:e3:
2c:08:85:51:06:c2:21:3e:28:7c:b5:41:ac:ca:70:03:e1:a4:
a4:96:72:d8:d1:5c:12:a8:5e:04:2b:cd:19:23:8a:ea:77:fb:
b7:15:5e:63:08:5f:10:09:46:5d:ed:0e:ec:c0:45:59:7d:00:
31:91:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:47:21 2026 by rpki-client