Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: tBFFIBmlXGJ7sIgnxZBq32DhVkHhj+4qFWvUCXz9sqA=
Subject key identifier: CF:AB:A3:1A:AF:04:7E:2B:FC:8E:0B:05:10:67:17:9B:12:CD:DB:92
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019FA8CFF1301C91EC1E905ECBEEA83F41C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 16E3
Signing time: Tue 28 Jul 2026 13:00:27 +0000
Manifest this update: Tue 28 Jul 2026 13:00:27 +0000
Manifest next update: Wed 29 Jul 2026 13:00:27 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: OBfsLDUYNKj8two7feWskimPw6f0bSl9f41dk2i8bgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f1:30:1c:91:ec:1e:90:5e:cb:ee:a8:3f:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jul 28 13:00:27 2026 GMT
Not After : Jul 29 13:00:27 2026 GMT
Subject: CN=cfaba31aaf047e2bfc8e0b051067179b12cddb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:f5:1f:75:cc:b2:08:63:50:fc:af:ce:0d:
72:b0:86:e8:53:85:5c:a6:59:0f:2d:c4:58:b1:34:
c9:ce:22:b4:fd:af:5b:71:20:cd:1a:be:93:95:33:
5f:2f:a8:2f:d5:ee:e5:a2:e5:72:3a:ab:42:e2:16:
3f:54:48:c6:77:c9:0b:ab:a2:87:37:fc:d2:9b:e1:
e3:f9:77:a9:81:35:f5:c5:71:dd:98:b8:32:af:42:
24:77:eb:ab:e3:b1:89:99:98:99:47:81:fc:5f:f7:
44:cb:4d:2a:8a:cc:b5:6b:86:6c:af:9f:c2:c7:62:
90:e3:cb:92:f7:52:9e:a2:59:a8:46:a4:12:89:9a:
01:86:f6:c7:c0:09:ca:4d:de:00:67:9e:14:18:a9:
42:88:5a:92:c8:cf:6c:72:55:a9:e1:01:40:a2:7e:
d0:42:13:7a:45:17:43:ad:25:ef:15:18:cf:23:54:
b1:71:ae:cb:35:b2:14:2b:25:2b:51:ad:e9:df:15:
c2:39:fb:4c:64:3c:1e:f7:2b:c9:fc:72:47:5a:aa:
25:fa:f8:f7:d1:da:43:13:fe:9b:d1:61:36:35:0d:
42:6e:78:9c:57:6a:61:c2:87:8a:fa:44:9e:6a:26:
78:b5:36:f3:68:f9:0b:cd:cf:e4:ed:d5:31:4d:a3:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:A3:1A:AF:04:7E:2B:FC:8E:0B:05:10:67:17:9B:12:CD:DB:92
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:13:c4:06:dc:a1:5e:59:71:cb:ac:4c:ee:52:01:6f:95:
e8:0d:39:4b:0a:8a:1f:77:52:ab:63:91:5c:7b:89:bb:94:88:
a3:92:dc:60:2c:41:b6:8a:6a:77:52:da:47:32:0d:a8:f4:0b:
10:cf:22:cd:d7:f6:be:ee:54:5d:30:df:df:8c:84:ae:fa:9c:
04:cd:06:15:99:2d:b6:69:c1:85:7c:0a:07:bb:c0:e1:f7:9f:
0c:32:58:a3:5b:9c:ef:2b:c6:c2:63:9a:b9:ce:b7:6c:39:1f:
6f:d6:36:fb:57:1c:1e:78:d4:93:8a:c3:f8:92:87:e4:4f:e4:
23:37:b6:26:6c:33:42:71:7c:8b:ae:c5:b1:94:bd:62:92:b7:
4b:96:f5:ec:8d:91:1c:d8:6c:23:28:af:40:1b:14:cf:4f:cd:
2d:71:77:51:1e:77:81:d6:6a:1d:d4:66:d0:bb:1d:03:53:26:
24:63:10:fb:02:d3:4e:c8:16:b7:a5:a0:2a:2f:49:bd:5a:7a:
7f:5c:d8:25:ed:4e:f2:d6:8b:e0:24:41:b0:95:e9:de:6b:6e:
d4:d9:f2:d2:3a:79:16:cf:35:d2:81:3f:f9:34:4f:67:8f:c6:
d6:b1:74:87:9e:2a:63:51:8d:e2:ab:1e:fd:45:05:47:29:8e:
ba:e2:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:20 2026 by rpki-client