Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
File: jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft (raw, json)
Hash identifier: Pw/OlFZFG5642emG6pVf2UIyog9YwM7+lK7m/jlQenw=
Subject key identifier: EF:3B:48:07:FD:46:CD:FE:13:5E:AE:5F:FC:B2:F6:3C:40:78:00:45
Authority key identifier: 8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
Certificate issuer: /CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Certificate serial: 01A0D5DECC6DD7BBDCFCF3764958FA8C514D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:23 +0000
Manifest this update: Fri 25 Sep 2026 00:02:23 +0000
Manifest next update: Sat 26 Sep 2026 00:02:23 +0000
Files and hashes: 1: XJya-NN--kVHLC8Eeq45UT2PGho.roa (hash: u0qg1SxkbakG4KokOoISrPOk++v8JDawI8U08mxXhpk=)
2: jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl (hash: ubTPdcbLfqpoAGwlw4aIx8wiyMwgDeciHM3TLxL4PsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:cc:6d:d7:bb:dc:fc:f3:76:49:58:fa:8c:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1da016c432071394d6f699ad7ee240fbc0777a
Validity
Not Before: Sep 25 00:02:23 2026 GMT
Not After : Sep 26 00:02:23 2026 GMT
Subject: CN=ef3b4807fd46cdfe135eae5ffcb2f63c40780045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:0a:55:46:13:be:fd:1b:f5:7d:c9:a1:55:
d7:39:d5:6e:e0:25:bf:e4:85:11:6f:62:96:47:ee:
61:f4:81:fd:58:cc:1d:a8:8b:92:33:2c:12:e4:7e:
59:47:ee:92:85:2a:ec:c8:51:fe:ef:09:d2:36:7a:
88:f4:82:bd:ed:1a:dc:84:d4:9b:4b:ee:68:8d:0b:
44:c4:a7:ae:ee:1d:fc:f2:df:ab:b7:1d:37:87:e4:
24:e0:86:6d:cf:cc:3a:f2:19:02:b2:fe:1c:69:b4:
b8:29:9f:a4:e8:a2:26:ed:f6:f9:df:5d:aa:16:04:
6b:a2:a4:85:d5:f2:5b:bc:c8:19:ae:c0:21:a8:d2:
4b:e2:28:b5:b2:20:73:55:1f:3f:76:e9:70:ce:63:
50:fd:9d:29:45:19:ef:59:54:ca:54:7d:c6:dd:09:
bf:dd:a5:16:e0:5a:85:9b:7a:7a:f5:6e:c8:77:3c:
dd:eb:47:c6:f3:13:f9:7e:3d:42:a9:07:5b:6b:e4:
f6:29:56:57:e4:a8:f2:33:22:bc:47:e2:73:58:c9:
2f:02:89:7b:52:57:33:52:4c:05:8b:7b:5f:6a:e9:
21:e3:d7:50:4b:cb:25:8e:4f:3d:dd:26:e4:cd:c0:
2e:05:1c:c5:4f:94:10:96:71:1c:c6:1f:9c:c5:d1:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:48:07:FD:46:CD:FE:13:5E:AE:5F:FC:B2:F6:3C:40:78:00:45
X509v3 Authority Key Identifier:
keyid:8E:1D:A0:16:C4:32:07:13:94:D6:F6:99:AD:7E:E2:40:FB:C0:77:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh2gFsQyBxOU1vaZrX7iQPvAd3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/jh2gFsQyBxOU1vaZrX7iQPvAd3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:06:5f:6f:f2:da:1e:71:35:a7:79:80:79:5f:bf:f8:16:37:
ca:61:91:9e:24:08:bd:07:6c:16:74:fd:07:57:ed:b0:17:e6:
6a:d7:9a:f9:69:eb:40:98:0e:93:ae:d4:c9:9d:12:64:81:f5:
28:88:fe:51:68:d2:1c:0c:67:9f:c5:22:11:8f:41:d9:84:92:
70:fa:44:43:53:e4:68:49:38:33:93:7e:03:80:76:2d:c6:35:
ed:20:9e:7f:1b:fe:63:67:20:f1:5d:1b:c5:82:39:5a:bd:4a:
0f:b6:38:aa:ce:ff:eb:00:b0:3b:ee:8c:32:7b:4e:30:cd:a0:
bf:e5:e7:da:22:d3:ae:5e:34:5a:81:44:3f:32:1c:4f:c8:86:
e8:dd:5d:f8:73:c8:b7:ee:67:91:dd:ee:48:f9:95:68:cd:9c:
00:21:d9:09:1e:f9:1a:e7:58:40:a2:c6:0e:8f:be:d2:1d:be:
da:bc:89:c6:94:ac:70:49:03:1d:2f:63:a8:b7:d5:45:47:6b:
0e:c4:56:03:86:1e:a6:fd:79:62:23:d1:29:6e:f8:66:3c:be:
2f:38:87:a4:6b:9e:8a:2d:42:64:95:8b:48:73:44:53:81:71:
ab:32:7d:32:f6:33:46:f9:c0:fc:0c:c2:52:52:19:d7:99:86:
49:70:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:10:32 2026 by rpki-client