Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: Bji5KjdOidBS627x8ZxhXSD/v5ItC3VcdmCfF5vI9O8=
Subject key identifier: A7:A5:54:6C:0B:0E:28:40:12:EE:4D:E1:62:2B:DC:66:FC:69:72:1F
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 01A0D3EFDADFC88E8F20AA2F2427D89D53E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 0659
Signing time: Thu 24 Sep 2026 15:01:46 +0000
Manifest this update: Thu 24 Sep 2026 15:01:46 +0000
Manifest next update: Fri 25 Sep 2026 15:01:46 +0000
Files and hashes: 1: Tn_7bKvMuX8wX1EpKYGbD8kg1p0.roa (hash: arj2lz3m1CKLXQA+b+0nfQ4tgMR/lYV9tLqCCkGgt5s=)
2: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: fh1ioLWpplCqAvT0P3v/2KBLGCCRkV9aQdH12IX3Da4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:da:df:c8:8e:8f:20:aa:2f:24:27:d8:9d:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Sep 24 15:01:46 2026 GMT
Not After : Sep 25 15:01:46 2026 GMT
Subject: CN=a7a5546c0b0e284012ee4de1622bdc66fc69721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:f7:05:1d:5b:4a:39:61:b6:da:94:cf:23:
f7:5c:7a:08:aa:d3:4c:ee:5a:31:d8:e2:31:b4:29:
28:12:0f:13:cd:7d:67:6c:87:7e:71:ab:b1:71:da:
db:d8:30:24:ac:a0:01:a2:18:cc:88:17:cb:23:cd:
85:54:12:ee:51:17:40:10:9e:ee:6e:32:9f:ba:fa:
58:89:e1:80:a4:96:5c:72:2d:9d:de:d5:dd:88:dd:
bf:80:c5:51:de:20:59:75:60:09:83:76:9e:b0:55:
5d:23:59:03:c7:14:e5:ea:e5:68:9d:2b:db:59:ae:
6a:a2:0b:ac:ec:e0:53:fe:68:18:56:4e:c4:74:03:
bc:11:ea:f0:13:71:a2:2c:29:82:87:fb:ba:ee:db:
17:82:42:b0:ce:b2:c7:6d:91:11:c6:3a:c1:68:92:
39:8b:fd:c8:d0:ed:ae:8e:e0:6e:03:a6:ef:8a:ef:
ba:5f:2e:d8:cc:c7:d7:77:8e:66:bb:36:9a:53:99:
88:70:26:28:90:fb:67:7c:c8:9f:bf:84:09:e4:0e:
af:b6:6b:9e:27:b0:d2:5d:06:68:b9:62:42:10:31:
77:34:d4:16:74:a8:cb:01:15:f4:42:22:bb:a9:8f:
da:7a:c1:fd:57:41:3f:5d:55:38:ba:89:53:95:6c:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:54:6C:0B:0E:28:40:12:EE:4D:E1:62:2B:DC:66:FC:69:72:1F
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:82:8a:6d:04:94:c0:6e:12:48:c4:a2:91:88:66:47:f2:
6b:d8:83:f7:ab:27:12:a0:95:0b:8d:80:7d:0e:71:28:7c:8f:
be:a3:c2:9c:b5:0a:3b:5c:0d:16:20:b6:76:0c:6a:c8:90:4b:
61:05:8d:cf:40:dd:b7:6a:5e:be:3a:d4:60:9e:d5:23:93:36:
6b:51:dd:02:68:88:b8:b5:e7:0d:2a:2d:00:dc:90:6c:29:22:
74:d5:58:f6:03:c8:23:b2:c1:fe:b9:a9:6f:77:b4:d0:b2:fa:
32:0f:e9:ba:b4:15:b8:23:7d:17:47:6a:96:e4:8c:9e:49:c2:
44:29:b4:ad:be:82:05:fa:3f:ac:7c:11:2f:bc:cb:4d:35:f9:
82:6d:9d:f2:8d:aa:a4:d1:92:b9:68:7c:57:9a:a6:ca:25:d0:
dd:c7:a0:c9:01:fb:fa:47:06:50:2f:6a:db:18:9b:3c:a5:92:
a9:c1:a2:66:59:f6:a0:9f:96:4e:c9:fa:58:6b:5f:d1:8e:28:
2b:fd:fd:1f:7c:7a:03:ea:53:b6:ae:a3:43:ec:32:98:1f:20:
71:a9:24:f0:f3:64:a6:b0:11:d0:ba:41:0d:84:1b:3f:19:0a:
40:6f:5d:66:c5:fe:e0:7f:c3:b5:7d:94:c6:6d:84:45:dc:4d:
2f:32:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:12:27 2026 by rpki-client