Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
File: jJED0ak0JRu5ixHxacuLK97Gojk.mft (raw, json)
Hash identifier: 0uvpWM+VuKd6rj1tLplhu1ilAGXLrCEGxz+fYGNuk4E=
Subject key identifier: 97:F8:89:89:73:53:AD:9B:F5:9A:0A:81:23:92:02:E0:8A:CF:16:4F
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 01A0CA478AE3A1F50DD60F7B619A4CAA44DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:21 +0000
Manifest this update: Tue 22 Sep 2026 18:01:21 +0000
Manifest next update: Wed 23 Sep 2026 18:01:21 +0000
Files and hashes: 1: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (hash: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=)
2: jJED0ak0JRu5ixHxacuLK97Gojk.crl (hash: FMjU+vJPhbZvmIfrVpxnoXt/pjPj1s+nM+PM9DhxeUA=)
3: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (hash: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:8a:e3:a1:f5:0d:d6:0f:7b:61:9a:4c:aa:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Sep 22 18:01:21 2026 GMT
Not After : Sep 23 18:01:21 2026 GMT
Subject: CN=97f889897353ad9bf59a0a81239202e08acf164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:3b:51:43:78:6c:5b:a9:7e:ca:65:07:15:
76:3c:b0:6c:5b:a9:16:81:2a:86:d9:b2:af:0a:87:
e3:71:e8:6a:a6:97:a4:7e:1f:4e:41:81:5d:67:12:
3a:c2:21:61:6e:5e:f3:3c:23:7e:2f:12:13:d5:38:
c9:99:62:da:04:e0:23:49:7d:74:aa:46:e0:9d:0e:
7e:0c:42:ff:58:d3:b4:b5:3c:c7:54:21:f6:ee:58:
5b:21:f1:9b:58:5c:a8:04:c3:e6:03:44:60:35:cf:
ac:9a:d5:8e:6e:dc:9a:7c:83:c6:85:95:cf:19:92:
3e:e9:e7:f9:e3:d0:19:40:cf:7f:59:7f:5c:75:0e:
0b:6b:4b:ff:76:10:f6:f6:b8:3b:45:29:b8:90:81:
ee:44:5b:aa:d0:0d:95:c2:e6:42:20:34:c8:7e:ad:
2d:4d:0e:19:f0:67:a3:98:a0:a9:c7:b7:a6:de:73:
d8:91:03:44:ed:5f:20:7e:2a:f4:6b:6a:cc:47:24:
6e:37:80:b4:f6:8c:04:7f:bc:f3:f2:6d:f2:10:49:
9e:70:97:69:69:5e:bf:db:25:4d:85:e5:f7:66:80:
8c:cd:52:be:24:ba:ee:92:bb:ee:2b:cc:69:e6:1d:
2c:df:95:ae:3e:11:58:18:80:14:9b:ea:86:0e:ba:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:89:89:73:53:AD:9B:F5:9A:0A:81:23:92:02:E0:8A:CF:16:4F
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d6:39:48:03:7c:62:33:42:69:bc:ae:0b:69:21:eb:2d:26:
18:36:61:18:7a:42:67:0a:a3:b6:56:ad:c7:06:ce:4f:c9:e1:
7f:79:95:71:bb:f2:3e:aa:b1:83:07:2e:21:27:66:f6:f2:cc:
e2:c3:8b:f9:5e:77:14:1e:70:b1:a2:dd:4f:db:65:df:e5:24:
59:96:e6:2c:29:e3:7b:2b:c3:c7:91:f6:8c:e9:ce:8f:28:1b:
ea:8f:68:34:f7:e7:3b:a2:3a:b8:eb:6f:e2:a1:a2:d4:df:0a:
c9:1f:a2:ea:1d:ec:4b:a5:eb:9a:d0:27:84:b7:cc:9d:bc:34:
06:36:35:a0:61:26:3f:a5:d5:6b:23:9c:ec:b6:62:89:f5:8d:
23:eb:a1:ff:46:b8:91:90:2d:4d:82:87:09:8e:ed:dd:0d:d7:
ee:f8:32:2f:32:1e:75:da:a2:28:b6:6b:c2:bf:8c:3a:82:79:
0e:2f:dc:42:d5:c6:b4:64:3e:66:a4:48:ff:5b:f3:bc:10:9c:
f9:4e:71:81:8f:6d:fb:c0:1e:b7:9e:a5:e2:5b:53:00:1e:45:
eb:7f:97:3a:a2:29:f7:8b:ad:da:0d:ec:92:e9:a1:af:e5:3e:
71:78:76:7d:21:0c:e1:bb:42:93:30:d9:65:b4:43:9e:34:87:
d5:5c:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:19 2026 by rpki-client