Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: Sh7t+h0zHQH2KKv78E747n98nWLXu/ArMax3N5XxQd4=
Subject key identifier: 9B:2B:B3:DC:98:5E:72:06:09:DA:E0:D0:EA:87:6C:C3:EB:6D:36:4A
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 01A13936FB4CA03C9B7994E9A13E207EBB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 05FA
Signing time: Wed 14 Oct 2026 07:01:06 +0000
Manifest this update: Wed 14 Oct 2026 07:01:06 +0000
Manifest next update: Thu 15 Oct 2026 07:01:06 +0000
Files and hashes: 1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: sphUDrfnjiap6c0MlV/dMofPXvA71tky0d3uRVchQ/U=)
2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:fb:4c:a0:3c:9b:79:94:e9:a1:3e:20:7e:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Oct 14 07:01:06 2026 GMT
Not After : Oct 15 07:01:06 2026 GMT
Subject: CN=9b2bb3dc985e720609dae0d0ea876cc3eb6d364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:d0:48:fc:25:2c:53:29:e0:ce:40:c0:57:
d9:b7:57:33:8b:2f:ca:5f:04:33:36:aa:d1:b5:68:
b5:42:88:bc:8e:ea:49:4c:1a:4d:3c:82:84:4a:b9:
5e:d1:61:88:3f:51:de:3f:eb:08:2f:a8:1b:0b:47:
bb:f7:74:52:77:4a:f9:73:02:4e:c6:8a:f8:da:03:
f5:ee:9b:08:70:48:c0:a5:5a:99:66:86:94:c1:82:
0e:56:60:45:44:d9:15:aa:ef:02:13:11:4c:b2:e8:
8c:77:a0:43:e0:0a:62:8e:7a:21:a0:b0:0d:ba:3a:
3b:f7:4c:bf:f3:af:71:85:16:80:58:26:15:d0:c1:
d9:37:bf:d6:33:e8:9d:65:0a:5f:da:4c:48:cf:96:
70:56:63:03:e6:56:4b:7a:ef:d6:80:71:0f:b7:d0:
09:14:0c:77:d1:1c:2a:ec:1d:16:c8:d6:16:06:4e:
96:00:4b:a4:ce:12:5a:17:c4:d2:ab:14:ec:96:cf:
3a:35:14:59:e8:71:9b:d4:00:d9:2a:3f:61:35:3f:
43:b4:c8:84:b8:b2:92:ff:60:17:8e:12:2e:67:12:
54:ad:8b:9d:f9:37:1b:39:b2:eb:ca:20:7d:2d:65:
e7:84:c5:bb:ad:fe:82:d5:a5:45:a5:6b:ca:8e:f3:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:B3:DC:98:5E:72:06:09:DA:E0:D0:EA:87:6C:C3:EB:6D:36:4A
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:70:04:d1:91:74:99:65:58:9b:fa:9c:da:e4:c3:63:be:eb:
59:f5:18:6f:5f:13:2e:c2:61:99:4d:cd:61:b6:69:57:8f:b2:
d9:d8:57:c8:3e:ce:bb:e4:57:f3:b6:b2:4d:17:5a:4d:96:d7:
ef:95:60:01:1c:e6:b7:74:6e:9f:5d:80:e4:b1:4b:5e:6e:2a:
e1:e8:b0:c7:97:d2:f6:02:be:87:ba:c7:22:5f:49:f0:1b:4e:
20:12:01:f5:cc:c3:19:6b:df:66:7e:60:a7:93:a5:52:19:1c:
89:6b:74:3b:60:14:43:6d:38:4f:14:2c:7c:de:44:18:9e:4a:
81:c1:29:79:76:de:6b:bf:04:6b:b3:a8:f3:8b:b4:0a:6a:6f:
67:e7:9d:f8:8d:a3:17:8b:3a:e7:83:30:d7:f7:43:54:bc:01:
0b:3f:88:ed:a0:e2:42:e6:fa:be:1d:d5:18:41:31:58:a6:f4:
6c:40:82:a9:70:bd:96:86:81:db:2e:25:33:80:83:ea:31:78:
8d:50:b5:07:c8:2c:6a:82:b1:54:dc:71:b5:75:cb:ef:ed:b3:
83:bf:65:9b:39:aa:61:c4:df:62:7b:d2:d7:61:57:89:4f:a0:
02:d0:43:99:df:b0:57:4e:00:ab:dd:dc:a2:7d:8d:c4:4f:05:
0c:11:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:11:30 2026 by rpki-client