Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
File: jRFmK-syV94cA0DkEu2dGZXA9f8.mft (raw, json)
Hash identifier: v3DFwBuDCdrVM5QmoYUERYNGgliqC3SDNEDvvKhoH8g=
Subject key identifier: 2C:B2:51:BB:27:51:B1:EA:5D:9D:88:8F:2C:7A:F1:32:4F:36:90:8C
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 01A0C8598EBC8BE10D482F42FC19454C990F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:47 +0000
Manifest this update: Tue 22 Sep 2026 09:01:47 +0000
Manifest next update: Wed 23 Sep 2026 09:01:47 +0000
Files and hashes: 1: CQCzVDXazljrHIDpQoZYmXw-po0.roa (hash: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=)
2: OBPTg2h93nMRgYHf_TenncbSH3w.roa (hash: DcawVmKkXAq6yOPTfF+1ZtbO8p4q24hhfvuSmUJsz+Y=)
3: jRFmK-syV94cA0DkEu2dGZXA9f8.crl (hash: kpia2CDQ5K70jcVcpMIIqOTFQCJeTA9dqaMwX4hcuCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:8e:bc:8b:e1:0d:48:2f:42:fc:19:45:4c:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Sep 22 09:01:47 2026 GMT
Not After : Sep 23 09:01:47 2026 GMT
Subject: CN=2cb251bb2751b1ea5d9d888f2c7af1324f36908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:0d:5b:64:44:e7:ff:c9:95:28:ab:be:2f:
f3:d6:fa:cc:15:48:9e:ea:d3:5a:46:59:dc:09:b6:
b5:a8:97:fa:d5:46:b7:06:d0:1d:95:a0:f2:9a:d6:
42:ba:4b:a4:05:70:89:2f:ed:82:08:b7:90:63:a0:
9c:c4:c0:ac:7f:a9:6a:eb:a1:d2:a6:f6:04:e5:51:
48:dc:c3:4e:7a:05:9b:7a:4d:23:c8:17:8d:3f:ce:
fa:70:2e:9a:f1:41:2d:90:3b:e9:07:4f:6d:04:76:
8d:17:83:f4:27:8f:62:78:33:f7:ba:62:d1:bb:97:
f7:26:bf:e2:4d:80:f8:2a:08:e3:79:ee:ae:85:07:
18:3b:65:d9:58:86:ef:dc:ae:fe:83:7f:78:8f:1c:
4d:25:99:a7:30:ef:4c:4d:a5:07:0b:96:b2:c7:36:
d0:6d:73:c8:a1:22:30:90:a9:98:0d:dd:eb:95:92:
0c:35:02:0e:23:44:e2:04:d1:21:f0:cc:32:6d:07:
db:18:5f:1b:0b:29:a1:72:c5:14:96:28:ee:38:e4:
9e:a0:cf:98:5f:1a:ac:b0:a0:07:73:bb:92:b9:fa:
92:d4:8d:f0:4d:fa:ec:f9:c9:13:b6:b5:6b:26:a3:
40:b3:39:88:39:41:e9:e2:c7:af:36:e5:41:0e:41:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:51:BB:27:51:B1:EA:5D:9D:88:8F:2C:7A:F1:32:4F:36:90:8C
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a9:fa:c1:38:72:cc:9b:5c:40:ce:cf:87:5c:ac:92:85:2b:
4f:8b:85:a7:9a:83:3e:3b:6d:2d:26:72:f6:74:d6:46:af:95:
49:15:e7:9a:87:40:a2:fc:9c:57:24:fb:94:a9:2d:69:a9:98:
1f:87:fa:f7:a2:00:93:c2:4f:9f:6c:d3:b6:82:b7:ac:1b:20:
a0:7e:3b:56:d7:d7:29:1a:fc:5c:d4:f2:71:6f:58:40:5a:ee:
95:5c:a6:43:99:86:1e:d5:02:3e:4e:0d:be:2c:5b:cc:3c:a9:
66:51:de:31:c8:1f:0c:f5:ae:37:a8:50:61:44:7b:50:42:84:
71:6b:13:af:63:eb:e5:79:ef:c2:90:27:64:8e:43:16:aa:5e:
03:80:f6:8b:c2:e4:40:ec:51:ab:82:0c:45:e5:ec:93:ad:b3:
5e:f8:5f:48:8f:55:21:7f:04:9f:16:b3:da:93:d4:a4:5f:9f:
50:2f:46:4d:29:a6:99:27:7f:7f:27:71:de:14:a6:ba:e5:05:
72:8f:08:67:36:4d:57:b5:38:76:0a:73:a3:9a:00:20:4f:51:
83:28:8c:77:14:d5:dd:5f:1f:7e:0d:20:cc:ea:60:20:21:df:
0a:c6:96:02:91:72:df:c2:53:2c:ec:a1:c8:a4:3a:e6:c1:3f:
eb:4a:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:13:42 2026 by rpki-client