Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: N5+GwMdmFMENqXEhf6zW6prOYu+SL3k7xQkpI1fcQCU=
Subject key identifier: 91:BA:8E:B8:45:D4:15:52:84:85:29:04:CD:37:41:54:66:B4:44:37
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01A103247DCBBE39C74C34E5FD05A907DE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 19:01:25 +0000
Manifest this update: Sat 03 Oct 2026 19:01:25 +0000
Manifest next update: Sun 04 Oct 2026 19:01:25 +0000
Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
2: fndZHS6wausEk7LMJwg-iWqkX-c.asa (hash: wY8kQN7C6jpcyRMX1u3cHnZoIcbOK0EzmdgU7lU1Xq8=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: rU1e89pTiCZ8iSwtJloC6jjtnmXTbDJS513ONOkJnb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:7d:cb:be:39:c7:4c:34:e5:fd:05:a9:07:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Oct 3 19:01:25 2026 GMT
Not After : Oct 4 19:01:25 2026 GMT
Subject: CN=91ba8eb845d4155284852904cd37415466b44437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:54:7d:70:55:16:16:c0:82:e9:74:49:ac:
0f:d9:3a:b0:31:49:b5:e3:27:5c:a5:9d:42:bd:40:
29:e4:d5:47:29:77:ac:32:3f:a8:88:f5:5e:ba:d1:
98:7f:8b:37:ec:d2:9d:d7:39:2b:f2:18:a2:15:76:
e3:03:73:20:39:81:43:14:0d:8e:b3:e7:25:d9:41:
dd:0c:82:99:84:26:aa:1f:7c:2d:a5:a6:b7:c7:d1:
aa:a9:d5:97:97:50:33:a0:2e:03:df:63:48:19:c5:
6e:80:e5:5a:49:ab:f4:03:1b:78:f5:53:fe:a1:d8:
a9:64:a3:fb:71:cd:42:01:95:d1:ea:1a:cc:fe:ed:
60:42:98:5f:e1:7a:d9:9f:43:0e:26:7c:9a:99:d2:
4a:cb:93:2c:27:ce:4d:9f:e3:0a:36:d7:ae:dd:2c:
6c:63:ff:e9:6a:8d:10:ad:b6:3a:37:50:49:8e:af:
a6:b1:9f:59:76:65:7e:d1:88:d4:52:02:e2:0c:bd:
a7:a8:3f:26:51:7e:93:cc:79:62:b8:14:f4:0c:dc:
83:5d:5a:19:ae:3d:fb:95:7b:82:cd:6e:a7:7f:96:
46:f3:91:db:b2:55:d7:61:e6:9a:8c:5f:b3:d1:ee:
9f:84:1b:1c:46:63:13:d8:75:04:95:f5:85:43:c2:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:8E:B8:45:D4:15:52:84:85:29:04:CD:37:41:54:66:B4:44:37
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e6:85:56:cf:97:0d:bd:fd:27:7b:30:b5:ad:6e:36:9c:f0:
4d:92:77:14:7b:2b:1c:34:2b:8a:51:aa:e1:98:4a:ad:e9:a0:
81:85:4b:63:d0:41:1c:8f:a9:33:5f:fd:1e:80:a2:90:d3:13:
50:af:a6:27:e7:0a:3f:22:8b:24:3d:12:22:ed:2d:13:60:17:
0f:ed:86:49:09:c6:49:5a:1a:67:14:74:aa:09:de:8c:39:ea:
e1:ff:f8:65:00:c4:aa:2e:45:76:61:6a:d1:67:94:dc:a0:b4:
a9:35:77:bb:79:fc:13:41:3c:f3:3f:08:b6:fe:1f:ef:e8:ba:
0d:10:c4:38:f6:76:78:d9:93:16:f0:af:b2:21:a2:ab:a1:38:
83:bd:af:c8:9d:db:14:d6:f6:20:b3:46:29:0a:a2:e3:cb:b4:
7b:0e:ac:ba:eb:33:95:3c:57:c4:68:af:4b:82:dd:74:cc:03:
1d:8d:9d:3e:4f:68:1d:6a:4c:96:28:b2:17:11:5d:9e:d4:de:
df:00:8b:64:ab:f0:60:72:18:82:0d:77:6a:53:88:2d:3c:c4:
1d:d4:c1:8a:75:bf:00:17:d9:c1:e6:27:1d:43:33:4f:00:89:
71:21:4d:74:0d:c1:31:6d:ff:a7:88:13:58:d2:e7:58:17:8a:
2c:97:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:12:15 2026 by rpki-client