
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: Y2MNfVW1PNyzvsUhTXDAJdBEYlZ+JZs0y4amadai/RA=
Subject key identifier: 65:6C:AA:DA:2C:98:E1:83:D5:FC:A0:BB:01:B2:26:E8:E1:ED:91:1D
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 01A0E51A1FC62FBF4F073849F94B0A5B4115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0AD4
Signing time: Sun 27 Sep 2026 23:01:29 +0000
Manifest this update: Sun 27 Sep 2026 23:01:29 +0000
Manifest next update: Mon 28 Sep 2026 23:01:29 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: c1Ku/Spbqqwbwi/bSyih1d2VUP18BdOkVHSLJs1Zsm4=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:1f:c6:2f:bf:4f:07:38:49:f9:4b:0a:5b:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Sep 27 23:01:29 2026 GMT
Not After : Sep 28 23:01:29 2026 GMT
Subject: CN=656caada2c98e183d5fca0bb01b226e8e1ed911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:d3:08:03:90:ea:46:53:41:8b:78:3c:b0:
8b:f1:43:da:7d:2a:43:2d:c8:30:6e:4c:48:26:e0:
49:a7:5c:29:05:87:32:c0:88:54:a7:d3:df:85:5d:
5f:b5:67:98:52:b0:74:7f:8a:aa:b5:cd:89:5f:b3:
3c:09:4e:0f:6f:16:68:d6:3f:6d:1d:da:7e:00:cd:
41:d4:6a:b5:60:0a:86:06:12:f1:18:c1:ba:ff:65:
a6:1d:24:d5:34:67:d8:10:16:cf:3b:19:1d:ea:7f:
66:03:04:1f:83:f5:bc:2d:35:98:54:a8:18:3e:ac:
e5:9c:df:c5:46:4d:60:99:54:dc:a6:8c:db:a9:87:
e9:ed:53:dc:64:cd:0e:6a:b4:81:ea:a0:4c:cd:ae:
56:75:3d:de:07:6e:a4:05:df:d6:3d:74:98:92:6b:
87:88:41:7c:33:74:41:a9:c3:c8:b6:11:a8:79:68:
0e:ed:bc:38:3c:c4:a0:b8:3b:d7:54:e9:dc:d5:58:
f2:c7:69:c2:9c:7e:80:35:75:7d:66:41:b7:31:28:
55:a1:57:01:1f:27:11:ee:4a:49:92:82:1c:2b:3f:
5c:4e:41:7e:dc:0e:36:93:89:b5:4c:d7:c1:72:0f:
af:2d:e8:73:3d:52:19:0e:03:3a:51:7d:0d:68:37:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:AA:DA:2C:98:E1:83:D5:FC:A0:BB:01:B2:26:E8:E1:ED:91:1D
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:7a:c1:34:77:bd:f7:9e:2b:5c:50:07:78:fc:c8:ec:67:
0b:4e:50:e0:24:82:ce:ed:1f:1c:80:6d:41:47:52:21:9d:b4:
83:65:1b:3e:6e:f9:7b:e7:94:a2:82:64:11:ee:34:1d:b1:91:
c6:fb:3d:94:06:a0:39:85:b8:48:2e:2e:0c:67:db:78:7e:95:
b5:9f:4d:e9:de:f1:2a:44:33:45:6d:41:fe:37:15:6d:78:60:
ec:f9:5d:af:60:35:6d:1c:29:05:91:bf:c9:13:98:c1:07:12:
c9:ca:fa:1f:05:f1:76:d1:f5:bf:96:c8:71:34:51:06:4e:54:
d2:fe:d0:9d:f9:7d:df:0b:d7:55:41:f2:77:1a:0d:32:82:b3:
cf:9a:e6:3a:a7:6d:9e:d3:02:f7:f9:d9:81:d3:9b:63:7d:ff:
7c:5a:b8:c4:d9:76:7c:39:a1:30:92:19:03:c9:73:82:c3:ef:
bb:08:f0:cd:eb:81:49:e0:95:8b:57:a3:37:49:25:e7:c8:1c:
69:40:42:3b:a8:92:ca:77:4a:82:ce:a1:99:1b:e8:2b:0f:71:
39:07:2f:69:cf:68:e0:8e:69:dd:cc:3c:1d:78:b3:80:f7:c0:
a6:1c:37:b6:ba:3c:6b:fb:e3:67:53:e8:91:fa:b9:5e:fb:ff:
e7:0f:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:43:13 2026 by rpki-client