Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: UrE33GYdQVNjTpjnyASYsxvTQgdcb7fWa8LJqTNNHWs=
Subject key identifier: AE:49:49:0A:E4:8C:05:6E:6A:7B:67:87:C4:20:41:76:80:1F:29:02
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 01A1009102A77B21C345FBEAE320265B1574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 0261
Signing time: Sat 03 Oct 2026 07:01:05 +0000
Manifest this update: Sat 03 Oct 2026 07:01:05 +0000
Manifest next update: Sun 04 Oct 2026 07:01:05 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: rd+bg4F/LXH8RHJmNphDUMzu0iNQNiq2LGwV9Iqy+6A=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:02:a7:7b:21:c3:45:fb:ea:e3:20:26:5b:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Oct 3 07:01:05 2026 GMT
Not After : Oct 4 07:01:05 2026 GMT
Subject: CN=ae49490ae48c056e6a7b6787c4204176801f2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:e1:10:8f:e1:fa:3b:73:b3:80:17:57:c4:
50:2e:d2:ac:d0:a0:2f:19:15:d3:f0:de:8b:d0:0d:
14:77:d6:b7:97:f7:cd:8c:d8:3b:cb:3b:d0:32:41:
9f:11:51:bc:eb:5d:f5:2b:aa:ba:50:c6:ef:a2:8a:
d2:78:ab:f0:88:fc:c7:f3:4f:a7:9f:b0:ef:5f:a8:
33:a5:88:0c:28:e7:ed:e4:46:aa:b7:a2:bb:e8:51:
f1:85:51:6d:97:bc:a8:49:3a:73:cb:77:82:47:55:
56:a7:33:ac:a6:aa:24:fd:8b:ca:a7:9c:30:79:33:
86:8d:df:2a:24:4d:38:0f:57:42:6d:2a:5e:9c:21:
a2:aa:b9:97:27:77:d7:bc:3c:00:25:4d:59:9f:5a:
a9:5b:16:c5:01:73:62:6f:e7:13:f2:54:1e:15:32:
90:d1:a2:31:a1:19:72:81:09:5e:e9:5a:39:b1:61:
50:c7:16:4c:1b:0f:63:af:43:82:be:0b:15:d8:40:
20:de:ab:89:12:27:e2:6d:6e:88:60:a2:51:ae:df:
94:16:ef:b3:ec:f8:68:d3:d7:38:5b:30:c1:f0:99:
58:7b:e1:f5:f6:49:96:68:9d:d9:b0:f6:b5:ac:e1:
0a:c7:6e:98:db:78:e1:a8:a4:bd:52:84:f3:a0:36:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:49:49:0A:E4:8C:05:6E:6A:7B:67:87:C4:20:41:76:80:1F:29:02
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:40:e4:7c:7f:e2:98:01:c3:b6:78:a1:29:71:6f:a5:32:
67:95:b2:8d:cf:96:e4:57:6a:62:6d:72:cc:86:47:3a:58:e4:
f0:19:aa:a2:45:01:4c:73:5a:33:4a:c1:25:c5:fc:fc:6e:8b:
6b:be:a8:b7:55:5a:a2:75:f6:ac:3c:a6:6d:f5:31:a8:b6:4a:
44:79:d5:3d:83:65:81:05:3e:3f:e8:16:7c:6b:51:48:7e:d2:
77:d1:cd:8e:9b:80:ba:53:ad:20:55:6b:cc:1b:75:ad:4a:67:
02:61:8d:fc:ac:c3:e9:2e:0e:b5:db:2b:3d:14:bf:8b:d9:0e:
50:c6:2d:ab:73:7b:28:15:e4:3d:dc:b7:3b:3f:35:df:a2:de:
81:78:67:bf:d4:ea:84:e8:c6:25:49:9c:37:60:c0:97:0f:57:
5a:a5:53:1a:bb:e7:15:b9:a0:66:87:af:05:43:24:20:42:3d:
52:d1:6d:5d:9e:49:d0:52:2f:1b:23:fb:a2:f2:c2:d5:b1:8b:
23:4f:5c:b8:1e:5f:1d:f6:be:be:08:02:44:fd:77:10:e0:c3:
3c:f6:98:e3:8d:8e:0f:c8:7c:e9:49:fb:70:65:88:51:84:f1:
71:1a:2a:3b:12:ee:3f:42:15:d9:1d:99:a1:ee:70:e7:23:c9:
99:ac:05:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:47 2026 by rpki-client