Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: R23xBdIYC+HgvBJCDQXD1VfId3MgT/yemVouseK4HeI=
Subject key identifier: 7A:D2:5D:79:62:15:03:46:70:EB:2F:0F:2D:16:0F:4D:70:A5:67:64
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01A0E3D102240A301FA5A049131751100165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0FA6
Signing time: Sun 27 Sep 2026 17:02:00 +0000
Manifest this update: Sun 27 Sep 2026 17:02:00 +0000
Manifest next update: Mon 28 Sep 2026 17:02:00 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: jJjIcOKmSClRy025XxYGWrj0ywvzYamK5X/4KYQe784=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d1:02:24:0a:30:1f:a5:a0:49:13:17:51:10:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Sep 27 17:02:00 2026 GMT
Not After : Sep 28 17:02:00 2026 GMT
Subject: CN=7ad25d796215034670eb2f0f2d160f4d70a56764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:83:3e:69:cd:34:61:f8:ab:75:79:4a:30:
ee:1f:6c:d8:21:7d:2f:4c:87:15:7d:a6:d0:00:ee:
af:d2:9a:78:5c:70:e7:7c:d3:d1:48:08:eb:2a:27:
e9:60:b2:7c:c2:d3:ee:51:19:2c:71:2b:68:d9:28:
af:10:f4:94:cc:ba:c2:24:9a:ab:73:2a:42:d6:4f:
40:17:30:94:fc:0d:04:7d:8e:78:b1:f6:a2:a6:f1:
c5:4f:2f:4f:e7:55:52:df:17:67:26:24:bd:c2:1a:
c3:19:1e:53:53:ef:2a:fb:b4:d0:38:d8:3d:df:6f:
6d:db:8e:38:02:05:c0:ee:dc:68:ff:ac:1a:a0:97:
18:2c:d4:cd:6f:32:8a:c0:77:7e:26:27:b6:5a:c8:
af:c4:c7:a9:e3:77:05:fe:e8:01:52:f8:63:4f:69:
da:c7:78:91:ea:6f:d3:ae:86:4f:76:43:4c:31:ce:
be:0a:83:c8:a7:bf:4c:d5:97:5d:fb:65:96:e3:22:
37:a1:92:10:f8:e7:1e:95:d9:35:93:03:95:41:f3:
01:75:90:7a:a3:df:ee:2f:2d:39:b4:12:54:c2:67:
38:aa:94:ce:d6:19:be:59:fc:3a:a9:30:49:b1:a5:
2f:0d:0d:0f:a2:c9:2d:8d:1b:00:73:7c:04:48:b5:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:5D:79:62:15:03:46:70:EB:2F:0F:2D:16:0F:4D:70:A5:67:64
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f1:88:28:19:72:60:28:c7:ca:48:d6:7f:19:f6:4b:d1:37:
57:bc:10:0d:be:cb:0f:31:a4:6f:88:c9:d5:a0:b0:d8:77:2a:
ed:f8:9c:cb:60:17:87:0b:3d:11:64:ce:67:5f:7a:31:61:3b:
f8:7e:c0:0e:8b:6b:93:f3:9a:42:5f:a0:28:b4:77:ed:6b:30:
1c:ce:83:ed:f0:57:5e:7d:ae:1b:d4:86:98:15:e5:07:46:23:
97:8b:9b:c8:51:b2:98:82:c7:f3:22:90:ac:8a:a0:4f:c2:50:
d1:28:e7:6f:1c:32:2c:21:dd:e6:45:01:aa:ef:0b:0b:e9:b6:
9d:7b:10:00:63:bf:9e:1d:cc:7d:72:4e:d4:d2:90:d5:af:4a:
48:27:0f:4f:2f:00:3e:47:05:6e:1c:a3:d4:49:46:53:a7:ba:
e1:e2:3e:3f:91:87:62:7a:d8:8e:e5:f9:90:af:34:45:31:28:
f3:e1:e0:48:77:6f:06:73:15:a2:ce:29:f6:12:c4:07:d0:e8:
43:d0:a8:77:e4:a8:11:eb:d8:64:65:b9:10:11:9c:3d:f7:98:
56:1c:77:77:8f:a0:df:0e:cd:3e:6e:67:05:8a:df:32:b7:0a:
c2:87:3c:44:42:8d:ec:cd:e8:da:9b:66:03:b6:c4:fc:7b:f4:
2b:d6:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:18:47 2026 by rpki-client