Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: YwBs+Kk04q9rABHjS+sTpTQpP+l7s+RFx5CfcuXVs74=
Subject key identifier: 2B:98:9F:3A:31:8F:1A:27:93:1C:83:A9:22:A7:89:ED:E0:72:AE:A4
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 01A0CD125B32DF6C1F8BEA322C7DCF917B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0E5D
Signing time: Wed 23 Sep 2026 07:02:07 +0000
Manifest this update: Wed 23 Sep 2026 07:02:07 +0000
Manifest next update: Thu 24 Sep 2026 07:02:07 +0000
Files and hashes: 1: Ze7KRAUjPeqGh8cPqUx4LdDwghM.roa (hash: 9nj7uwXDpwi4IaoN4BLsfOwzpOwzS34nmfQiM2vUZE0=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: yrRoi28a3Cgur4/zu5qhnhG9iK4u92QRWeFGjuoecWQ=)
3: xY6N77gaGhHC96TEYf_319JfP3Y.roa (hash: pHRv276Dy+Q037IPY/bb8BuMwdfKlhDrevwY2uKsbj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:12:5b:32:df:6c:1f:8b:ea:32:2c:7d:cf:91:7b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Sep 23 07:02:07 2026 GMT
Not After : Sep 24 07:02:07 2026 GMT
Subject: CN=2b989f3a318f1a27931c83a922a789ede072aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:69:20:cd:f9:32:13:7a:a8:62:fc:b1:a7:
fb:51:61:24:1e:d8:37:00:8e:be:9b:ce:e7:a0:2c:
9f:bb:18:9a:f7:99:7b:65:e7:7d:c4:44:c3:8f:40:
e4:9f:f1:e1:a1:4e:11:ee:da:6b:57:ed:52:ac:d0:
9a:77:c6:fc:c5:2c:fa:b4:0c:e4:68:f4:38:5b:91:
e0:eb:b6:d2:cf:7f:ee:0f:07:87:5b:78:a2:7f:e1:
aa:d6:be:d7:64:80:ea:7a:d0:47:b7:cd:ce:07:3e:
76:72:6e:b1:46:f8:cc:4c:6b:fc:e8:63:fe:d0:ae:
88:8f:45:ee:3c:d6:9d:ec:0a:24:f8:73:be:0d:fc:
15:f4:8c:4b:69:b6:c2:37:89:de:d5:b1:b2:31:61:
f6:33:50:d9:37:fb:c8:f6:06:e8:13:79:70:64:2c:
af:07:02:d8:e4:56:3f:e0:25:e7:b2:16:d9:99:7b:
55:11:6a:8e:09:d0:6c:b0:44:b6:51:f9:d3:de:a5:
b9:ae:e9:cb:1f:47:08:6c:44:c1:2f:74:80:f8:60:
01:dd:a4:1a:62:0e:e1:77:c5:e2:72:1f:73:9f:a2:
e3:03:d9:90:bd:c7:8c:33:cf:1c:44:2b:ec:5f:60:
a8:b6:f4:a9:01:e1:c4:e6:38:9a:f4:29:a0:06:d4:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:9F:3A:31:8F:1A:27:93:1C:83:A9:22:A7:89:ED:E0:72:AE:A4
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:90:ca:61:59:e6:91:29:8a:98:97:0c:45:74:1a:bb:93:ff:
8b:08:62:19:44:a1:22:46:6f:b9:52:ce:9b:d0:f0:13:f9:67:
f7:b6:31:dd:37:de:a3:a0:ab:e9:8a:14:c5:24:96:0a:b9:6a:
9d:80:bc:c1:f0:db:96:5a:c4:f4:43:38:70:e0:ad:d9:5d:0c:
be:1a:ef:15:e8:bf:b1:f7:8e:84:7e:fa:74:8e:fa:01:1b:8e:
0c:2d:ff:47:82:cd:80:a9:5c:f1:f8:e0:19:72:19:04:94:34:
6b:e4:c8:10:78:fc:68:a6:07:bc:3c:45:a9:aa:34:0d:34:4f:
5f:41:95:3e:17:39:96:47:11:5c:b4:1d:69:6a:b7:62:6b:96:
62:c3:2b:3f:aa:ea:c7:62:16:55:34:36:c0:0a:39:f5:24:fa:
df:85:8f:bf:d9:d2:81:c4:06:5d:40:66:bb:34:ce:8c:d6:05:
ca:00:ff:3c:21:d2:50:12:18:e4:83:fe:b0:e1:a4:6e:a5:27:
f5:2d:d8:50:53:f1:3a:c1:4b:93:95:f0:0e:63:aa:47:82:e8:
1a:52:80:3c:71:50:ed:9e:8f:a3:8c:79:26:a8:e9:fe:86:79:
9b:0a:76:a8:b4:5c:70:c0:24:52:33:9d:54:0c:80:c8:7f:fb:
34:a6:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:58:50 2026 by rpki-client