Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: Vaw9KNAy2XJ2yHBFMsIz9JsCnEim1LRFI3QX65Esjko=
Subject key identifier: E0:A1:33:5E:C6:FB:35:6C:96:95:06:AB:DD:F9:C1:6D:9F:B6:27:11
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019EBF23A3B8A23F03F13F56F319C318D766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 166A
Signing time: Sat 13 Jun 2026 04:00:44 +0000
Manifest this update: Sat 13 Jun 2026 04:00:44 +0000
Manifest next update: Sun 14 Jun 2026 04:00:44 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 3lPszcixVqBNVe60J8yoQXF+uHu1Qz0vg+aM109wwws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:a3:b8:a2:3f:03:f1:3f:56:f3:19:c3:18:d7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jun 13 04:00:44 2026 GMT
Not After : Jun 14 04:00:44 2026 GMT
Subject: CN=e0a1335ec6fb356c969506abddf9c16d9fb62711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:17:61:05:28:03:3c:2c:4f:3e:15:a1:79:
04:e8:89:e2:95:b3:6b:35:7a:7c:e3:1f:26:f0:6c:
34:fd:7c:09:af:ca:4c:7e:b0:b2:23:d9:69:a8:6d:
a1:18:2f:58:49:8e:38:a6:be:f8:ee:aa:f0:17:0c:
6f:88:b1:ca:db:c3:f3:c4:10:7d:bd:9f:ae:67:3e:
64:49:04:00:92:17:00:7d:a0:b3:36:08:bf:fe:cc:
81:ca:9a:e7:2a:11:b3:5d:de:3f:e1:04:a4:24:ab:
86:0f:fa:32:b8:ca:29:fa:ab:23:79:34:5b:9a:8d:
fe:1d:73:c0:1a:62:44:2d:22:82:7e:5a:5d:bd:e9:
6a:3b:9b:2d:97:21:07:7f:b6:d1:6d:38:fc:51:1c:
06:ee:08:64:2f:5e:22:63:57:d1:33:f3:21:fe:b6:
eb:1f:d4:75:79:4a:b9:cc:1c:ac:a0:3b:f3:f8:54:
95:95:55:20:43:61:dd:ce:1e:c0:bb:e0:0a:d9:b4:
7c:af:34:a8:7d:9e:36:b8:1e:b6:b9:39:e4:0c:68:
c7:f5:a2:b9:8f:a2:ee:44:2e:3c:5d:a5:cd:e7:64:
41:d9:9c:95:67:f4:58:ac:e8:7e:d7:25:63:ec:29:
44:db:d5:38:88:2d:93:0c:33:cc:57:0c:fd:8b:ac:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:33:5E:C6:FB:35:6C:96:95:06:AB:DD:F9:C1:6D:9F:B6:27:11
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:24:ad:51:30:ed:2a:21:df:2b:96:6e:62:53:cd:26:51:8c:
83:09:03:52:c5:46:98:90:95:23:a4:52:50:d5:24:0c:5d:8d:
9e:74:50:31:fc:6e:e4:87:cf:0f:ce:4c:af:a1:fe:e8:e4:53:
1e:7b:04:dc:9a:0b:1f:3f:4f:4d:e1:47:dd:54:86:5a:1b:09:
61:99:ec:4b:46:f8:a8:cf:3e:1f:07:10:67:32:da:56:d2:71:
47:b6:52:da:eb:8f:1a:a0:9c:f9:a4:e1:86:4c:a1:5c:6f:09:
a8:39:40:e9:af:90:76:3b:a7:41:c9:91:8f:83:d8:bb:da:ce:
2f:06:66:04:18:ca:77:5f:96:70:62:ef:ca:1c:77:db:ad:02:
4a:ad:88:10:1c:63:a5:49:e2:2f:fc:c0:28:7e:3e:c1:2c:39:
ee:13:62:31:5d:04:17:ca:ac:e1:dc:31:3a:49:9e:0d:1f:f8:
46:0e:3c:72:4a:32:31:2b:45:76:15:33:27:04:f6:db:a4:2e:
02:bc:9f:bd:67:ad:d1:9a:a2:dd:e4:f5:00:6d:74:1a:b1:e9:
35:b9:bb:f5:05:c3:26:f8:94:4f:2d:f3:27:95:f0:2d:18:95:
09:38:70:b7:4d:82:23:4d:8e:1e:b0:0a:3d:04:bb:cc:5c:75:
bb:38:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:13 2026 by rpki-client