Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft
File: jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft (raw, json)
Hash identifier: nIQVODBYxW4vdhR0hgMnFOXK5P3WF0VPKf0+QIBmtlg=
Subject key identifier: 2F:9D:64:1C:2F:A0:A7:AC:BC:69:47:FF:2E:FC:CF:4D:ED:16:DB:CF
Authority key identifier: 8E:14:49:C7:85:B0:CF:6B:13:43:A2:87:18:DB:CA:C2:EF:94:D0:CC
Certificate issuer: /CN=8e1449c785b0cf6b1343a28718dbcac2ef94d0cc
Certificate serial: 01A0C669F672CE9AAC08537DFD5C805198BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:28 +0000
Manifest this update: Tue 22 Sep 2026 00:00:28 +0000
Manifest next update: Wed 23 Sep 2026 00:00:28 +0000
Files and hashes: 1: jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.crl (hash: MDUOyPo2WmF8bYgKOdu9GIcSfUcNyfGy8hFvbwKJT+8=)
2: m1s1KtVALF5D3c_1InPqQevYXDQ.roa (hash: eEXtIw0FBx5tCUVS7FDmmDh4OCdlbqEr2r8Tn/6XJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:f6:72:ce:9a:ac:08:53:7d:fd:5c:80:51:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1449c785b0cf6b1343a28718dbcac2ef94d0cc
Validity
Not Before: Sep 22 00:00:28 2026 GMT
Not After : Sep 23 00:00:28 2026 GMT
Subject: CN=2f9d641c2fa0a7acbc6947ff2efccf4ded16dbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:20:3a:89:b6:70:6c:4d:6d:db:85:e8:c9:
39:8f:62:12:fc:ea:17:00:eb:99:56:61:df:16:99:
c3:a2:a2:1c:7b:8c:21:94:b2:4a:0c:79:33:3f:d9:
21:8a:6e:84:d6:80:23:53:8d:8a:65:7d:c2:99:38:
5a:96:46:10:f5:b8:2d:d6:ca:f8:2b:9b:03:d3:cd:
ca:f4:36:43:9b:b7:70:8f:99:2b:b3:78:d5:f4:64:
43:09:dd:21:fc:49:00:96:0f:98:63:16:6d:35:4c:
82:de:f6:ee:67:15:d9:d3:d1:83:38:b1:69:21:62:
44:f9:09:46:ea:fb:60:89:8e:75:df:e1:6a:57:f2:
44:5f:7b:47:fb:4e:b8:62:b5:61:58:1d:db:66:a1:
92:73:6b:48:77:a3:9f:07:24:b2:0c:13:a0:3d:6b:
d7:24:bc:d4:00:d5:17:95:1c:6c:14:4e:2a:62:13:
a4:53:53:d3:d5:4c:87:a7:28:3c:49:9c:9e:a3:6b:
f4:79:aa:17:be:2d:fb:77:48:cd:db:14:9f:26:f5:
cb:49:fb:48:99:e6:56:c6:84:53:fd:f8:f5:e8:fe:
d2:1a:54:2c:d9:97:f1:e7:83:fe:2c:ff:dd:42:73:
6a:08:f0:63:b1:b3:d3:7a:40:38:51:78:64:ce:db:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:64:1C:2F:A0:A7:AC:BC:69:47:FF:2E:FC:CF:4D:ED:16:DB:CF
X509v3 Authority Key Identifier:
keyid:8E:14:49:C7:85:B0:CF:6B:13:43:A2:87:18:DB:CA:C2:EF:94:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/aa1fa3-c125-4e4b-a30e-679a247df61c/1/jhRJx4Wwz2sTQ6KHGNvKwu-U0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:ce:3e:67:30:47:50:42:03:91:82:9c:a1:8c:1e:4d:6f:
b3:4d:ce:59:55:11:89:f1:f0:42:a5:7d:4c:33:df:33:df:dd:
cb:8a:53:d2:73:19:46:e3:64:0a:a3:c2:90:2b:99:13:42:57:
f8:32:90:6c:1a:a4:21:b9:55:f6:8c:92:1a:4d:b0:8b:c3:b1:
11:3b:46:79:a8:18:12:df:9c:81:bf:aa:f4:d5:28:e7:12:cd:
5d:72:0b:ea:5a:08:39:ad:21:52:fd:89:f4:20:16:e2:a0:5b:
82:4d:55:74:3f:35:eb:bb:25:5f:02:7b:94:d8:8f:39:51:95:
99:a2:ef:3e:38:6f:b7:26:9b:d0:9c:b4:a3:2f:56:26:88:0a:
ac:64:8f:2a:68:19:ea:ab:9a:06:73:47:3f:5a:9a:c2:62:a5:
1f:e7:05:85:3a:13:7e:ac:61:c5:cb:86:6e:4e:13:80:ab:95:
85:24:69:a7:0f:82:95:28:f6:4f:cd:30:21:c3:2b:d4:03:27:
e1:a0:23:cc:a2:7c:97:c8:28:00:25:f7:68:1f:90:2b:8b:91:
cc:cf:0b:a3:27:b8:cd:eb:16:74:68:51:0b:97:78:97:71:7a:
c4:d5:46:53:80:6f:a3:8a:f7:bc:96:07:47:42:8d:d2:a2:f6:
9f:52:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:36 2026 by rpki-client