Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
File: jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft (raw, json)
Hash identifier: noPQqHtViU9JknmfJAp8sfXKOBgxCq0SWBKvGaaXSP4=
Subject key identifier: E8:54:F4:E8:17:8F:8A:2D:3D:11:9D:AE:56:EC:03:22:AF:6D:C6:13
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Certificate issuer: /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial: 01A0C55738930EDF18D2300D6F0E963AE9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
Manifest number: D3
Signing time: Mon 21 Sep 2026 19:00:22 +0000
Manifest this update: Mon 21 Sep 2026 19:00:22 +0000
Manifest next update: Tue 22 Sep 2026 19:00:22 +0000
Files and hashes: 1: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (hash: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=)
2: jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl (hash: i+1ndouUYTNDYfqjscvDWbzOMo4OKpWC0P9d8dFtC40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:38:93:0e:df:18:d2:30:0d:6f:0e:96:3a:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Validity
Not Before: Sep 21 19:00:22 2026 GMT
Not After : Sep 22 19:00:22 2026 GMT
Subject: CN=e854f4e8178f8a2d3d119dae56ec0322af6dc613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:38:32:5e:07:32:13:4b:9b:d7:2e:58:3e:
6a:73:97:50:78:5b:a5:16:13:a2:4d:bf:df:7c:4c:
32:bb:d6:fd:4b:dd:7a:63:a0:6f:d9:e1:b9:2c:b4:
84:0c:1c:93:81:33:39:d2:04:4a:98:c3:30:a7:52:
93:54:86:45:c0:11:71:d9:57:ca:59:42:2d:f0:2b:
9e:4c:34:b8:bf:b4:ef:e7:6b:ba:9f:88:2b:b4:53:
65:16:23:33:d9:ac:7a:eb:b7:64:00:7c:58:21:c0:
7f:33:3d:f4:26:4d:82:46:ac:82:68:2b:25:52:fa:
16:3e:3c:4c:77:ca:1a:66:2f:0a:55:cc:a7:d4:82:
9f:73:92:7b:b8:24:b2:4a:7e:53:32:95:3a:49:be:
f8:10:d6:ff:c0:58:7c:6f:da:38:90:37:c4:25:cc:
f3:de:d0:b5:5d:71:c8:86:4f:2d:68:b4:26:a7:41:
07:e9:92:79:a4:c1:76:46:07:e9:d9:a4:19:31:73:
0f:88:c2:c0:63:40:c3:31:79:c2:ba:62:b5:fd:39:
80:d3:fa:f3:e4:26:56:62:9c:73:47:7e:d4:40:89:
37:f4:d7:d7:e0:40:cd:86:52:41:30:8a:a7:37:95:
49:df:d9:79:d7:0c:63:7a:6a:b6:0d:16:38:08:e7:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:F4:E8:17:8F:8A:2D:3D:11:9D:AE:56:EC:03:22:AF:6D:C6:13
X509v3 Authority Key Identifier:
keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:db:2e:43:6b:54:50:8b:63:50:7b:c5:63:b6:10:98:e7:5c:
7f:e9:07:36:4f:14:73:6b:15:a4:03:82:42:ba:46:ed:73:91:
dc:0a:18:72:81:55:15:3a:a5:51:e0:5b:cd:27:e1:72:f9:5e:
47:6e:11:cc:f7:2e:1a:34:59:49:2c:01:c1:e9:52:d2:fb:c3:
1a:cb:ff:46:74:2e:b2:a1:34:6b:00:c4:63:b2:4c:a9:91:35:
ef:25:c3:06:dd:50:74:55:e3:86:90:9a:e2:1c:d1:bf:e5:ce:
d2:c7:e0:0a:94:d6:a4:ed:40:99:c0:da:f0:e2:71:24:ab:e0:
94:43:0d:e8:d6:81:8d:ac:ff:36:a7:08:b3:6d:30:d4:69:7b:
79:af:0b:d2:fb:55:9e:47:5b:a2:be:17:a1:29:6f:84:25:73:
57:38:1c:1d:ad:ef:23:2a:a4:96:6b:a9:bb:07:84:4f:27:9d:
e8:5e:7a:f7:68:d4:bb:f1:9f:81:03:82:b6:5d:c3:a2:e0:43:
5e:c7:87:ea:c1:b1:c2:ef:e1:7a:dd:91:d2:5d:30:40:39:a0:
ed:ea:18:6d:b6:36:de:87:05:7f:2a:4a:56:79:b9:a0:b0:ef:
f5:48:c8:a1:84:a0:a6:c7:38:52:83:6f:bf:e1:e6:d0:93:e9:
62:27:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:07 2026 by rpki-client