Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
File: JflL0qvKpDyX5XhrLbNbcT--X-Q.mft (raw, json)
Hash identifier: BivgrzbJU+e94Vl2wmke+E0l4W5TAlV6QTElzQZCeCc=
Subject key identifier: 8F:DF:3B:8E:87:4E:34:B9:6C:B1:26:C3:ED:6D:2B:FE:88:4C:1C:F6
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 01A0C66AC74927C78CB4E315079C13355120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:21 +0000
Manifest this update: Tue 22 Sep 2026 00:01:21 +0000
Manifest next update: Wed 23 Sep 2026 00:01:21 +0000
Files and hashes: 1: BcMMM0U66F_S0r1n65JxA8MExF0.roa (hash: H3WQFI+Saoc8E2B5BEOhesPi++dCrMFkBj7AIbeBUHI=)
2: JflL0qvKpDyX5XhrLbNbcT--X-Q.crl (hash: fzw570YOHHQPykCoEiBBlZs/L9DhWI5VgRS5lZ6CUfc=)
3: VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa (hash: e6SVyLxPmWS3ohNAOmFyq9LDfmnszid2SAX7TuW2VEw=)
4: XIQjtwCAeuz5pHeyEJIwylepx78.roa (hash: /ZdrEI8StygXoq2z181JCF5ttjpJyDiccnOn6hndeRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:c7:49:27:c7:8c:b4:e3:15:07:9c:13:35:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Sep 22 00:01:21 2026 GMT
Not After : Sep 23 00:01:21 2026 GMT
Subject: CN=8fdf3b8e874e34b96cb126c3ed6d2bfe884c1cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:28:bd:64:46:9f:39:15:9b:79:b0:ff:9c:
8a:97:d1:58:e0:d3:3e:eb:8c:27:ab:78:6f:47:a4:
d1:f1:8a:68:9d:f3:07:5b:0a:c4:28:28:a4:2f:0f:
8f:30:54:ea:74:f5:3e:42:9c:2b:87:53:6c:8b:14:
07:4e:34:54:80:0f:78:ab:52:9b:56:4c:76:23:de:
18:b9:8f:9d:8c:2d:e9:0d:fd:04:1c:9b:f0:8b:2c:
4b:cc:e1:39:cb:73:b4:21:a9:4e:92:69:be:6c:8a:
03:66:df:af:bf:22:c9:60:58:c5:89:b0:40:1d:b3:
52:b0:04:f8:b6:99:63:76:e7:bc:5d:7d:28:84:aa:
e3:5c:fe:0c:a3:bf:38:00:d6:1d:ec:77:52:b9:62:
b2:7d:7c:06:86:9d:66:e0:42:5d:35:7f:0f:f1:e6:
34:ab:da:a1:8c:29:11:2f:09:2c:43:56:6f:e9:16:
e4:b8:d1:ff:e8:33:26:24:ee:6e:3f:8c:3e:33:95:
7a:8e:e6:53:7c:de:98:46:31:07:4c:a4:0c:ce:db:
bc:fe:08:b3:ed:eb:e6:e2:e1:15:2e:d7:42:f8:58:
d1:e8:18:af:d8:30:32:81:9b:f2:8b:5e:e5:ea:8e:
96:d8:41:84:3d:20:43:f9:a8:46:e0:04:35:7b:c3:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:3B:8E:87:4E:34:B9:6C:B1:26:C3:ED:6D:2B:FE:88:4C:1C:F6
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:67:23:ac:e8:b8:53:8c:00:40:12:c7:be:24:3d:1a:7b:01:
bb:80:9a:d7:87:36:af:61:74:c0:05:6a:ec:e9:85:85:6a:ac:
63:91:33:4c:77:b8:e0:2f:4a:55:ad:62:30:a0:ea:5e:f6:34:
9e:d1:65:a3:23:9b:2c:eb:cc:fb:bf:8f:51:fb:dc:0d:eb:df:
c0:58:9c:04:c3:e2:66:6e:b0:ce:ea:e0:f0:bd:ac:3b:57:30:
95:1a:7a:50:80:62:3e:c9:d1:a9:33:b0:6a:d3:94:ce:c7:63:
90:d2:63:53:5c:c8:3a:97:43:06:33:a0:df:52:b4:91:62:3f:
82:fe:76:88:32:0b:a2:9b:e7:bb:71:8a:18:69:d2:29:3b:f3:
16:dd:21:2b:a9:dd:61:3f:84:e9:f4:5b:78:4c:85:c2:c3:61:
3e:58:09:a7:03:fa:65:30:d3:71:fc:4e:21:55:d7:cb:1e:8e:
13:66:3b:8f:c2:9a:08:e9:2c:20:61:65:34:32:55:79:dc:0a:
41:cf:04:ab:9a:a5:99:36:9c:61:4c:f0:b1:90:c7:93:eb:42:
ac:ab:9a:18:bb:80:1a:40:f7:8d:cc:89:3a:29:23:8a:f1:03:
dc:7e:15:03:cb:1a:b1:fb:21:a2:90:54:56:ce:f9:da:2a:bf:
4b:c4:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:27 2026 by rpki-client