Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: vCcbTxYRuJ11exJgaO0BtJ1GImhpWswunWPfCq29T3c=
Subject key identifier: F5:F1:56:F6:3F:90:A9:4A:C1:6C:72:72:EA:94:C2:D7:AC:D5:39:B0
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 01A0C96B796415430AA84BFCF03B27963C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 07F0
Signing time: Tue 22 Sep 2026 14:00:58 +0000
Manifest this update: Tue 22 Sep 2026 14:00:58 +0000
Manifest next update: Wed 23 Sep 2026 14:00:58 +0000
Files and hashes: 1: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
2: d_e_JyIjKLPMENo5L-8CUih_VYg.asa (hash: y4fScZgWsT2DmITy30uJ8yrcaHxFdDvaL2MnILNovdw=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: 1WD+RATlHUHbs9K726u4XTVBQhWSE0z5IIZcvjvUbuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:79:64:15:43:0a:a8:4b:fc:f0:3b:27:96:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Sep 22 14:00:58 2026 GMT
Not After : Sep 23 14:00:58 2026 GMT
Subject: CN=f5f156f63f90a94ac16c7272ea94c2d7acd539b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:2f:69:11:08:9f:d1:30:fc:71:63:5b:72:
a0:c4:bd:a3:2e:58:86:82:5a:4d:f4:1f:65:97:81:
8e:7b:1b:a6:37:58:19:67:5c:08:56:a1:0f:a4:74:
1a:2e:5b:95:d0:7c:17:c9:ff:97:21:2e:d0:d7:39:
b2:2b:bb:87:bf:66:13:91:85:31:80:8c:bf:3f:74:
4f:07:fc:29:a8:80:56:dd:11:ff:2c:a3:37:f4:7e:
59:1b:74:50:ed:25:44:5b:b6:2b:7c:32:1f:05:a6:
9f:43:b2:24:9b:2c:c1:e3:4d:a9:b3:b6:d3:d0:a7:
4e:88:9f:9d:0b:75:35:96:0b:c0:bc:8b:ff:58:2f:
ad:8f:e3:d9:2e:0d:a4:a0:81:19:40:df:c1:88:6d:
da:7c:0c:de:9e:65:07:87:cd:34:af:56:ca:ce:4f:
44:48:2c:68:cc:63:49:9b:74:6c:2d:c0:3d:c1:4f:
06:33:e3:c8:7b:28:73:ea:00:4d:6d:1b:03:47:6f:
1f:9b:23:96:7d:38:1b:fa:22:c4:15:c4:66:3a:4a:
10:18:82:b7:d7:e1:d8:c3:04:f6:b0:7f:ae:ec:40:
d5:2e:32:a2:1a:0a:36:26:8f:6b:01:ef:ef:e3:bd:
62:07:12:3a:ab:c8:94:10:65:1d:f3:21:bd:9d:7c:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:56:F6:3F:90:A9:4A:C1:6C:72:72:EA:94:C2:D7:AC:D5:39:B0
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ef:1d:72:1a:5d:aa:0a:a6:be:76:1b:f4:a0:66:e4:29:98:
ca:5e:8e:a7:b4:6a:30:a9:49:e2:85:c9:e0:c3:76:54:03:34:
e5:62:22:35:f1:3a:02:3c:ec:ab:0d:71:d3:f5:02:49:ff:fd:
e1:fe:77:3d:83:cb:a5:d0:d5:ca:1d:31:41:16:c5:d1:7c:91:
03:a4:8b:9b:52:db:5d:08:cd:80:ca:f4:36:4d:42:29:a2:e2:
e0:4c:c1:7c:6a:43:2e:db:aa:88:bd:a8:fd:19:f7:38:62:d2:
fd:7b:82:f6:ec:cf:e4:1e:a2:0a:ba:25:a0:50:0e:56:9a:5a:
31:96:7b:4e:d5:39:b3:a2:67:c7:ae:81:aa:2c:22:16:a7:b9:
3f:de:5f:f2:78:b5:1f:b9:5e:0e:56:1d:36:4b:03:a2:96:e2:
37:a6:f9:12:16:bf:3c:c3:2a:7f:90:26:fe:ba:73:c2:52:7a:
00:e2:97:ff:11:4a:f3:97:9e:07:66:0b:38:f7:c0:52:6f:97:
d8:37:90:df:60:eb:56:05:56:58:29:78:2d:e6:aa:f0:89:2a:
d4:d9:52:a3:64:5f:ee:ff:7a:36:70:fb:52:80:42:2f:b9:ac:
6f:e4:22:70:1b:4a:c5:16:0d:07:74:e9:7f:6f:fe:8a:f0:9c:
c4:48:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:41:34 2026 by rpki-client