Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: xI5BnaHLo8Ee3sakRHK+EuUHWiDPbSf5dgQHyQahJ/Y=
Subject key identifier: 40:EA:4F:FA:9E:B5:17:5F:D5:AC:28:9A:68:E1:4D:FC:A4:FC:C8:92
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019FAA88A0E86B262A64F6142B024586F076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 05BF
Signing time: Tue 28 Jul 2026 21:01:48 +0000
Manifest this update: Tue 28 Jul 2026 21:01:48 +0000
Manifest next update: Wed 29 Jul 2026 21:01:48 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: bROqL+zSRYRFLt6dXTsk1WPdYNxUvm/7ekxx2+B1OyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a0:e8:6b:26:2a:64:f6:14:2b:02:45:86:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jul 28 21:01:48 2026 GMT
Not After : Jul 29 21:01:48 2026 GMT
Subject: CN=40ea4ffa9eb5175fd5ac289a68e14dfca4fcc892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:0d:c9:b2:b9:e0:9c:38:52:78:f5:60:65:
8f:02:72:f2:3f:65:8b:ac:2b:14:2b:c9:f6:e4:91:
ec:2d:89:43:95:a2:82:1e:95:d2:da:5f:bd:2a:78:
a9:ab:14:d2:9c:32:e1:a8:6e:1c:5f:1a:2e:43:5b:
f5:c3:81:ae:48:52:82:21:72:d6:a2:bd:01:e4:b3:
81:31:b1:49:fa:41:58:88:ae:9e:d1:65:77:d7:bf:
ba:74:72:ad:19:64:79:bf:4f:79:40:f7:67:5f:a2:
98:89:99:1e:6e:17:f1:44:9e:d4:e1:ea:63:cd:9d:
45:6c:94:ed:31:69:26:65:7e:3d:3b:7e:1f:e0:78:
26:36:ef:37:b0:59:85:f6:7b:7b:1a:51:75:4f:2c:
4c:d8:ac:bc:b5:25:28:7b:44:80:ac:f9:9f:ff:40:
04:d9:ea:0c:0e:40:90:88:a0:b1:35:ff:47:ce:ab:
c8:5f:4d:17:45:ef:f8:cd:c0:9a:2b:8f:99:a6:05:
83:7f:ec:68:6b:a4:86:e9:70:20:a5:ae:6c:c5:f9:
50:65:66:a9:30:53:68:60:b9:fb:d3:42:0c:af:94:
e3:ea:f9:d5:99:15:d4:cd:60:77:78:5f:27:19:1b:
32:f2:be:e6:fe:5e:68:11:c2:a6:0e:bc:7d:6d:a3:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EA:4F:FA:9E:B5:17:5F:D5:AC:28:9A:68:E1:4D:FC:A4:FC:C8:92
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4a:b3:4f:a1:de:77:68:3d:8c:5b:4c:35:27:c7:a3:85:b4:
8c:19:50:d6:05:bf:0d:f0:d0:b6:7a:5e:d0:91:f4:45:db:d4:
c0:3e:bc:b4:2d:68:c6:a6:d5:14:ee:41:c1:9e:48:42:78:bc:
cb:07:6b:0d:8d:cd:6a:c0:ff:e8:f9:df:66:d7:76:2b:d3:3c:
d4:49:d8:a0:e5:fb:52:53:60:f5:66:3c:2a:8c:a9:69:14:76:
3b:eb:fa:4b:07:cf:35:7e:07:9f:99:75:ae:2e:5e:84:69:67:
7f:f5:8a:e1:45:70:15:25:4f:95:77:4a:b3:5f:36:3e:1e:55:
5b:c8:f6:39:31:12:b9:83:f7:3f:6e:35:cf:df:5b:45:b1:a6:
88:ee:ac:41:bd:53:0b:01:f6:34:03:a0:f9:34:ba:1a:e8:f5:
a4:2e:77:20:86:39:44:6a:f7:71:30:7e:63:4f:b9:77:e6:51:
6c:35:32:a8:4c:24:ef:65:41:d0:6d:ac:40:e7:f0:59:24:47:
bd:d6:ae:18:68:54:31:d0:8b:e7:f5:ac:d0:35:0e:37:8a:2e:
44:ae:eb:5e:48:48:a8:e0:c0:b4:66:23:57:6b:fc:31:e1:8d:
20:14:33:1e:8f:16:f3:10:ad:42:19:8d:e4:15:c4:cd:89:76:
a8:cf:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:10 2026 by rpki-client