Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: Bpf4WmlV9r5ZgfPMe9daio1UjDBLWvxQIwvPUllJiM4=
Subject key identifier: EF:A2:79:19:A6:CF:93:42:29:12:BC:64:20:C4:36:70:D3:AA:AD:AD
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01A0C6A14AEFA368521F04B8E54FD70FA403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1777
Signing time: Tue 22 Sep 2026 01:00:54 +0000
Manifest this update: Tue 22 Sep 2026 01:00:54 +0000
Manifest next update: Wed 23 Sep 2026 01:00:54 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: mvKSL1gOkxBL8ZYeuVFtEHkq87Gu9T1cchx+6L1pgz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:4a:ef:a3:68:52:1f:04:b8:e5:4f:d7:0f:a4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Sep 22 01:00:54 2026 GMT
Not After : Sep 23 01:00:54 2026 GMT
Subject: CN=efa27919a6cf93422912bc6420c43670d3aaadad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:78:37:24:32:62:f2:cb:e4:a6:89:9b:09:
ab:85:7f:ae:6b:67:96:e2:3d:03:71:a6:7b:2e:67:
11:0d:f1:4c:2e:76:a2:bd:6f:22:56:b1:96:3e:9c:
03:b2:d9:23:07:d4:09:82:28:52:1b:fa:24:6c:ea:
d0:01:57:c0:fd:7d:3d:5c:78:96:17:ad:2b:24:8a:
72:89:ab:01:33:8a:64:55:e8:95:d8:ef:87:6b:e4:
3d:bb:66:1c:2f:78:c5:3d:d1:12:ee:ca:12:94:94:
0a:80:17:30:2f:54:02:b2:30:21:e5:e5:09:95:04:
1d:f3:55:84:0c:5e:56:20:1b:33:59:64:77:53:71:
f7:33:82:52:90:e9:c9:cc:a9:db:9c:d2:41:fc:12:
79:90:a6:b9:37:77:6c:b8:6a:e4:9a:fe:09:b1:97:
05:53:3c:f4:30:0b:e5:64:05:73:a8:7f:a9:a4:a9:
9d:1c:bc:88:ec:a4:2f:00:0b:bc:02:3e:90:19:8a:
bb:6d:78:71:df:2a:27:dc:38:f5:bc:f6:72:bc:bc:
8c:cb:ac:fa:99:9d:2f:96:f6:74:63:b9:ec:14:eb:
00:b2:60:6c:cd:60:b9:b6:8e:7f:de:75:04:0e:cd:
62:a7:78:5d:d2:30:67:9f:36:b6:36:1b:4d:99:1f:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:79:19:A6:CF:93:42:29:12:BC:64:20:C4:36:70:D3:AA:AD:AD
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:de:d9:f4:e4:0f:b0:ea:e3:4c:a6:64:3a:6c:89:f4:9d:ba:
27:c3:df:72:66:94:20:1e:69:41:d2:b2:af:0b:22:f1:12:cb:
f7:b6:22:73:be:20:a9:a2:3f:cd:bf:08:94:e2:4d:b2:a4:68:
a7:a0:2b:66:80:d8:3f:7a:c2:2a:96:b9:18:bf:9b:a7:60:72:
25:be:81:78:4f:04:29:d4:78:3d:3d:90:e8:cf:44:c6:97:f6:
10:88:b1:e9:46:1c:e6:29:70:d4:98:84:a0:a1:a3:aa:82:e4:
d4:f1:b4:aa:5f:ad:ba:d8:97:6e:fa:42:f5:69:53:2b:e9:e5:
15:24:c3:42:6b:e7:9f:fb:b2:16:f7:25:4e:fd:73:a3:28:fa:
56:f1:bf:8a:7f:0c:74:01:00:2a:d2:9e:1e:01:cf:4a:0c:da:
94:fa:d1:27:2f:cd:aa:6d:cb:56:10:2c:19:43:b8:87:a1:ee:
09:d7:e4:c3:e9:a3:70:7a:29:a0:08:32:c6:bc:69:02:69:e1:
6f:d2:c9:91:94:6d:16:dc:7e:aa:f5:bf:4a:61:dc:73:b5:4a:
98:67:2c:96:68:7b:a9:d9:26:22:45:3c:9c:2b:f9:ce:c9:b6:
99:c0:0a:75:70:f3:b1:61:66:08:f2:69:fb:65:e0:b4:75:56:
0b:b8:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:43:10 2026 by rpki-client