Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: ixJdLSUz2q/ZTzwR8Efxm1ukAFoOUj0x8n9SRdVaFGo=
Subject key identifier: 47:6A:AF:FB:39:FB:69:59:EB:C9:A5:1B:18:86:3E:51:08:D1:A2:2C
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 01A0CB59E635FA730B4F0FDAA2E6F0580028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 0306
Signing time: Tue 22 Sep 2026 23:01:01 +0000
Manifest this update: Tue 22 Sep 2026 23:01:01 +0000
Manifest next update: Wed 23 Sep 2026 23:01:01 +0000
Files and hashes: 1: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: tDxiuAjGTOoQY+Y828GFHy7sUjyIYg2uJ2DT+pH2sJA=)
2: cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa (hash: 5Ey35yS4pWRnFXiX5P1NF3EizWA8z5Hs9goy/FTCwkE=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:e6:35:fa:73:0b:4f:0f:da:a2:e6:f0:58:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Sep 22 23:01:01 2026 GMT
Not After : Sep 23 23:01:01 2026 GMT
Subject: CN=476aaffb39fb6959ebc9a51b18863e5108d1a22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:e6:71:52:30:a8:91:48:a9:aa:c2:93:4b:
53:69:c4:53:5b:55:eb:6a:3d:a4:97:68:d5:1c:1c:
54:2c:4c:26:ab:78:18:5d:5c:81:63:fe:30:32:c6:
f2:b7:3e:fa:0f:6f:c9:00:b7:f7:05:f9:34:0e:c5:
2e:9e:49:3d:e1:cd:ed:5d:46:38:b2:62:51:dc:fb:
06:39:45:ef:e9:d6:8c:a7:b2:83:df:9b:df:70:2c:
c4:27:48:f2:33:ba:ec:ce:f6:10:a4:56:d1:4a:e1:
4b:20:0e:3e:22:81:a8:88:23:83:19:8b:44:ca:7c:
44:e3:26:b1:a4:30:f2:94:8d:12:5e:71:24:cc:56:
ec:71:fd:e9:fb:60:cc:73:1c:b5:88:67:23:ac:56:
87:31:12:55:17:ec:3f:bb:3e:7d:ce:06:d0:be:e7:
9c:83:04:3e:e4:4c:26:09:cd:e2:b0:37:0b:67:d3:
23:0b:69:89:9a:06:b6:7d:93:9a:3e:9c:a6:d5:b1:
af:a2:53:de:eb:51:4a:f0:aa:21:18:10:1f:50:31:
04:bb:31:63:df:8b:f9:f7:3a:e7:f7:7b:c0:cc:5a:
20:ef:b0:36:c9:a6:50:b2:66:2e:18:ff:6d:2b:c9:
9c:55:f0:73:83:c4:35:61:8a:8c:53:65:91:73:24:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:AF:FB:39:FB:69:59:EB:C9:A5:1B:18:86:3E:51:08:D1:A2:2C
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:90:26:94:29:01:c1:95:c9:b8:64:79:78:db:fc:5a:55:
04:8e:c1:f5:45:f1:ef:98:15:a7:f3:30:65:9d:61:51:2e:13:
c6:e6:69:db:ca:99:29:00:6a:46:7b:dd:57:58:3a:29:d6:b5:
80:82:9a:66:08:df:b4:2a:af:9b:8a:d2:c6:4c:0d:99:ed:04:
ca:ed:3b:44:68:e5:58:c4:e3:ba:b2:f8:e0:37:24:63:ad:39:
84:b2:58:cb:be:12:ba:37:68:86:f9:0e:ae:6b:ef:4e:86:13:
f2:98:d2:87:6f:2d:7d:17:cb:82:9b:9d:29:ae:6b:39:4e:24:
ba:0a:d7:4d:20:16:0b:d0:0b:64:5d:f6:b3:5c:99:db:8e:ec:
f2:1e:08:22:a2:a3:eb:b6:7a:0e:f6:85:4e:e9:e8:34:69:59:
77:9f:ca:29:1d:f2:a8:06:a9:69:f4:05:9b:7e:6d:8c:d1:70:
e8:80:d4:a8:b2:2b:c5:54:30:c3:47:1b:61:c9:bf:03:4d:f0:
ec:66:d5:14:43:1e:27:b1:0b:5f:1e:1d:d4:fc:ae:33:a8:53:
78:4b:89:9d:d2:d8:e6:b2:4a:16:1d:53:86:b9:2c:ff:21:d3:
e4:51:75:d0:08:bf:2a:dc:84:94:12:ea:96:7f:4f:a5:41:2c:
40:71:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:48:26 2026 by rpki-client