Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: 20KSZD/VCl3RYFXI40RffTpXD8bN1/S+WXMfMHOxK8U=
Subject key identifier: 5F:F6:55:EE:44:FF:D9:FC:F5:44:55:AB:91:FA:0E:36:78:D5:30:80
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A0D3F06401677B2EBA40F6390DCAFEDF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:21 +0000
Manifest this update: Thu 24 Sep 2026 15:02:21 +0000
Manifest next update: Fri 25 Sep 2026 15:02:21 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: Lg2+ZixzxWPOg3NwoR9M1XtJ3DtsOV7DxRn4B+uoOWw=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:64:01:67:7b:2e:ba:40:f6:39:0d:ca:fe:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Sep 24 15:02:21 2026 GMT
Not After : Sep 25 15:02:21 2026 GMT
Subject: CN=5ff655ee44ffd9fcf54455ab91fa0e3678d53080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:ff:b3:55:b2:08:90:bc:ca:84:ce:a2:93:
8a:a3:bd:eb:b7:50:90:aa:1d:05:13:f7:2e:92:af:
93:76:dd:3e:00:3b:a6:96:0d:5d:c3:36:40:d5:40:
25:36:f5:79:5f:93:a2:7d:cd:2e:9c:d2:d3:fe:88:
b1:ab:73:2f:10:38:d3:e6:11:d6:2f:26:10:9d:7a:
57:1d:d6:f8:a0:eb:46:35:f0:cc:3c:7c:0b:a4:a1:
58:91:ae:24:4f:da:6e:09:45:e9:2b:55:c2:90:7e:
b1:90:88:68:45:88:08:02:12:7f:35:c4:8c:a9:6d:
96:8d:0f:d5:90:fd:f4:65:dd:de:ba:f0:a7:8b:6e:
5f:99:bc:75:b8:57:0f:2b:9f:a3:d2:1b:95:bb:63:
74:8a:68:46:9c:d8:4e:3c:d9:d4:d9:4c:22:9a:64:
c1:71:28:89:90:19:1c:c9:1c:f5:ad:87:5e:0b:57:
8e:72:43:3f:bd:b9:d4:7f:d0:b5:26:58:cc:4b:3a:
27:5a:87:12:f4:5e:9c:1b:90:e3:7c:c6:16:aa:4e:
56:7e:04:5e:56:a0:bd:b2:0f:77:a9:84:45:35:41:
09:71:48:1a:af:f0:d8:b4:f2:f9:5f:ff:93:41:04:
e1:82:6e:ac:22:a9:92:8e:bb:1d:98:04:f4:9e:f5:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:55:EE:44:FF:D9:FC:F5:44:55:AB:91:FA:0E:36:78:D5:30:80
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:70:82:1f:b4:4f:9f:dc:aa:98:a7:88:1c:48:a8:c8:08:
be:4a:97:36:8f:5f:40:5f:29:14:74:fa:30:81:38:66:e0:b6:
6c:d1:86:be:fc:d6:44:18:78:d9:5d:9f:8c:0a:ae:cb:20:e9:
95:40:02:48:6e:53:d9:dd:d7:e0:2e:e7:31:b2:03:dc:29:ad:
95:3d:8d:d3:63:b4:1e:3d:76:eb:56:c7:da:18:d4:13:f1:76:
f9:ec:a6:a5:cb:60:c5:ab:91:55:18:71:b2:74:0e:18:7b:97:
3c:2f:49:e8:6f:5c:eb:85:22:6a:c5:32:c9:ec:93:d5:bd:25:
f7:17:65:7d:b2:89:6a:e1:94:6e:5d:2e:57:fb:18:80:75:00:
36:1e:03:2a:79:9d:30:7b:15:fa:2d:f8:57:7d:ec:99:c8:b5:
52:1d:b8:24:fc:8f:18:ab:0a:66:dc:05:8e:57:68:4b:86:04:
f0:59:45:9a:09:89:94:56:2f:e7:e3:2a:37:30:33:56:d0:85:
46:77:c1:59:ed:1f:fa:be:d6:da:7a:76:b2:c8:a1:d1:f7:c5:
a9:b6:48:a9:7c:ab:c0:72:74:1e:71:08:15:f1:bb:f1:9e:3b:
03:ae:55:7e:87:fd:b5:29:0b:e9:3f:25:02:6a:e8:e4:e0:e1:
fa:af:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:52 2026 by rpki-client