Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: upgPN2HbWE1zFOmmgk6LiOBZ+n9SyhgwzskxdI6YpUM=
Subject key identifier: 32:27:3B:FD:55:60:6C:95:2A:AC:86:05:70:B5:A4:67:2D:21:D7:96
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019DA3416680D1FBFF2686E0D52612F05E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 15D7
Signing time: Sun 19 Apr 2026 01:01:05 +0000
Manifest this update: Sun 19 Apr 2026 01:01:05 +0000
Manifest next update: Mon 20 Apr 2026 01:01:05 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 7moUrAlN9HhRFtzFO4/quqsZ+CXl5EIFueK5LQd7D3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:66:80:d1:fb:ff:26:86:e0:d5:26:12:f0:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Apr 19 01:01:05 2026 GMT
Not After : Apr 20 01:01:05 2026 GMT
Subject: CN=32273bfd55606c952aac860570b5a4672d21d796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:85:69:00:4d:ee:e2:33:c3:71:4e:65:5b:
e9:c4:1c:31:ad:02:b5:8c:83:6a:30:98:af:b0:32:
1b:4f:ae:60:ce:a6:a8:fd:c3:84:ae:a6:75:1c:96:
63:de:72:d6:f6:ab:c0:77:49:34:f5:98:80:c7:d3:
46:d3:1c:08:23:ef:76:14:cd:b5:36:68:e4:01:9c:
21:b0:a5:17:f3:1e:53:e2:d6:18:97:30:fe:ce:1f:
f3:c3:17:7d:bf:4d:85:18:96:44:27:a8:93:5a:78:
04:40:a6:cc:75:28:d5:2e:b1:d6:10:a9:bb:68:3a:
ac:77:d5:20:2a:cd:7c:23:80:13:e2:20:a9:4f:f8:
19:c9:c0:7a:60:17:f6:75:d6:92:00:ab:09:0f:a1:
e8:63:c7:56:ba:e5:de:ed:7b:18:f8:7c:9a:f9:b1:
21:e6:05:41:9e:d8:04:46:72:3a:98:4d:42:07:77:
74:a8:48:67:f0:00:d5:8a:ce:c3:f8:70:aa:6a:c5:
1f:6f:af:59:03:29:3c:1d:60:2d:65:de:23:cb:8a:
2b:4a:35:d2:74:7e:ab:b0:aa:52:28:78:6e:63:4c:
bd:1f:7c:9d:d6:1b:2f:e5:47:b1:75:06:0e:53:bd:
32:0b:76:83:30:56:47:a3:b9:d2:4a:9f:5b:ac:b3:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:3B:FD:55:60:6C:95:2A:AC:86:05:70:B5:A4:67:2D:21:D7:96
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:39:39:99:2f:fd:ad:5e:0d:80:6c:1f:9a:3b:c4:5c:a3:f6:
1e:ea:85:0e:2f:97:92:5d:a4:ab:09:6a:84:cb:32:d3:d5:4f:
8f:34:d9:14:ac:68:5c:b4:26:25:13:72:fa:96:21:d9:27:07:
17:d3:46:24:ce:7d:ac:86:44:fc:6e:c7:05:74:cb:30:b1:4e:
0d:ac:53:1e:10:12:01:4e:b2:28:08:f2:37:b7:b1:8c:df:e8:
66:18:d3:56:99:4b:fa:60:2a:ae:be:dc:9e:03:b4:ed:7a:0c:
05:f5:bd:08:23:9a:b3:1f:9c:8c:4d:06:98:bb:7d:8b:52:55:
2d:81:89:11:58:12:83:a2:73:aa:eb:40:6d:2e:06:41:ce:7c:
9f:96:93:f5:18:bd:ee:16:32:39:21:d6:b5:8c:48:f8:55:92:
86:b5:8d:5e:74:03:19:b7:c7:cf:45:f6:a8:ed:7a:cb:00:94:
98:d3:d3:73:7b:11:a9:8a:4e:66:99:8e:98:54:22:b1:f3:52:
31:f7:0e:00:29:0e:30:84:b3:bf:84:aa:ed:46:b6:7e:53:6b:
5e:ff:3f:f4:c0:64:d5:f5:9b:26:7d:c7:ea:09:62:e0:a5:b4:
85:a4:35:ea:a0:79:d5:bd:17:2a:5d:91:8a:0f:e2:08:24:9e:
b3:8a:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:33 2026 by rpki-client