Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: n2dFaeja1s0WPeAcHO76uDcYI2CeWKQml01iM2/UZ0s=
Subject key identifier: 94:2D:60:46:60:AE:AF:7A:53:AC:CF:E1:13:02:41:17:90:DF:2C:82
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 01A0C3D6DD42ED5B35A051640F53E029428E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 164A
Signing time: Mon 21 Sep 2026 12:00:33 +0000
Manifest this update: Mon 21 Sep 2026 12:00:33 +0000
Manifest next update: Tue 22 Sep 2026 12:00:33 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: XJu2njL1IljdkcJJ5fFRSY84u1rY7h2VWaDc0hOI960=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:dd:42:ed:5b:35:a0:51:64:0f:53:e0:29:42:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Sep 21 12:00:33 2026 GMT
Not After : Sep 22 12:00:33 2026 GMT
Subject: CN=942d604660aeaf7a53accfe11302411790df2c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:04:78:5e:77:b2:d2:ad:2c:2f:10:d8:b7:
c4:ad:6c:fc:05:e2:9d:35:d4:5c:5d:07:8b:68:f0:
c5:38:ec:97:fd:5c:2f:70:40:a9:c8:68:80:9d:be:
f8:63:5b:f5:53:fb:11:02:a0:14:85:01:f6:44:9f:
c8:8c:bc:5f:57:9a:dd:57:b9:ea:33:da:6d:ba:dc:
12:bb:29:de:4b:88:28:98:7e:9b:54:ad:6e:c8:93:
8e:89:a4:6c:59:cb:b7:cf:9e:6a:ee:23:9a:73:7c:
07:4e:c4:f1:52:22:52:39:f0:c4:d5:65:b9:6c:f5:
e5:a6:82:81:8e:0e:94:2d:94:e1:d0:d2:38:38:5e:
12:b0:d2:41:f7:a4:ec:98:e1:1a:f6:99:53:14:75:
49:e3:13:d1:6b:2a:04:f5:9e:66:52:55:73:5c:6d:
6a:ae:fa:e4:36:fe:7d:c7:83:e5:02:27:94:03:87:
cc:25:67:8c:2d:4b:cc:56:59:fc:e4:eb:88:2c:97:
a5:87:6c:3c:b8:34:3e:e9:97:9c:b0:e4:5a:2c:b7:
75:f5:70:4e:04:99:25:8f:23:e4:ea:c8:d1:02:d4:
c5:6a:3c:a3:63:9b:e1:16:38:5c:f5:b0:4e:5a:c7:
7b:ae:47:94:6e:17:22:65:7e:17:16:05:4b:a3:db:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:60:46:60:AE:AF:7A:53:AC:CF:E1:13:02:41:17:90:DF:2C:82
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9a:f6:8e:7e:00:e8:85:10:63:f1:23:9a:8a:15:fc:d2:46:
8c:58:03:b0:14:5d:af:23:7d:d3:a0:96:7a:7f:0e:03:19:61:
60:df:c5:7a:9e:da:c5:60:4f:bf:bd:26:f7:68:43:7c:68:00:
8a:a4:b0:92:86:28:da:b7:7d:4d:95:b4:a2:bf:fb:a1:a8:8a:
9e:85:5e:93:db:a5:10:70:71:b8:df:8f:bb:52:e1:40:5e:15:
61:d6:b9:2f:c3:8f:d5:c0:8f:68:5a:f4:99:3d:43:7f:c5:44:
8f:9a:9b:2b:74:b8:72:42:81:ad:dd:09:b9:48:b6:91:f3:1c:
bf:93:53:b6:7c:3b:e7:ba:30:0e:f1:4a:24:dd:2b:2e:a4:78:
a1:a8:00:fa:18:f9:9c:75:df:72:ee:a6:79:8e:05:dc:69:22:
39:4d:bd:92:f6:4f:3b:6f:67:92:f3:c6:8b:77:5e:ce:1a:41:
a8:74:b8:2d:bc:c9:dc:49:92:9b:86:95:7b:47:df:08:cf:d8:
5d:68:ef:fd:3e:66:3c:e7:fd:7f:27:47:9f:3d:ae:33:0e:67:
42:83:5e:88:cd:bb:07:33:22:61:26:5b:62:b9:c3:7a:5a:ce:
bd:12:81:4e:bc:5e:18:48:ce:8f:92:d0:35:2e:7a:7c:eb:d0:
c4:38:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:03 2026 by rpki-client