Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: fApGRtsJl/tt8W30T1tsDN5+Ew7bknjBuuhfwYlEZgM=
Subject key identifier: 8C:CE:CC:1B:6C:AB:E7:15:84:4F:5F:CA:44:C4:6F:1E:89:41:38:A3
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 01A120F7A61B18024D771F11A5D4C5C8EE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 17D1
Signing time: Fri 09 Oct 2026 14:01:03 +0000
Manifest this update: Fri 09 Oct 2026 14:01:03 +0000
Manifest next update: Sat 10 Oct 2026 14:01:03 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: rX1SwLosrA89FVAqKGzXQIfsD3fMtSQBEQ/araUo7J8=)
2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:f7:a6:1b:18:02:4d:77:1f:11:a5:d4:c5:c8:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Oct 9 14:01:03 2026 GMT
Not After : Oct 10 14:01:03 2026 GMT
Subject: CN=8ccecc1b6cabe715844f5fca44c46f1e894138a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:bd:f0:9b:d4:c9:c2:28:3a:8e:0a:a4:77:
5e:46:68:87:c9:32:af:1c:77:83:63:ba:47:b4:ec:
18:8e:31:00:90:df:89:68:33:23:9c:e4:b0:9d:57:
ab:a1:0d:54:db:65:7e:38:1f:9a:5f:da:2b:a2:e5:
4d:f1:68:2b:af:39:7c:9e:e5:a4:48:c9:45:ab:f0:
b6:96:86:35:02:2e:aa:72:be:53:87:63:32:b5:d9:
b6:8a:a2:c9:dd:d1:96:57:e6:5b:6d:a1:19:f4:4c:
4a:39:5b:fd:2c:d4:71:88:aa:8a:4a:36:67:bb:bb:
51:e1:b5:31:52:7d:78:07:b5:7f:32:78:6f:7d:00:
5a:f1:d0:fa:1f:b6:ab:1c:90:54:bf:11:52:34:26:
5d:64:0d:4a:d7:01:f7:1e:31:62:0a:a7:16:76:8a:
5f:42:48:f0:9e:f8:d5:d9:98:6e:4d:56:dc:a3:ad:
21:26:47:a9:19:0d:cb:61:8a:74:51:da:5d:6b:86:
9b:e9:64:c7:ec:80:f1:62:c3:b4:77:90:82:5f:4b:
f8:93:f8:b1:77:6c:27:72:5d:b1:73:8b:26:21:d5:
70:17:3b:82:3a:db:dd:df:ab:6a:49:e3:ec:84:95:
44:b9:f3:fa:67:02:82:14:f9:ba:33:fb:3e:c6:58:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:CC:1B:6C:AB:E7:15:84:4F:5F:CA:44:C4:6F:1E:89:41:38:A3
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b0:b9:fa:db:1e:6f:81:93:3d:00:cb:9f:48:e3:44:e9:11:
2b:36:32:3d:96:bb:72:a2:f7:69:ba:d7:99:ed:46:94:93:d8:
92:61:e1:0e:49:46:56:fd:1c:47:ed:59:a3:2f:f8:d9:cd:27:
dc:1a:33:e3:83:a3:14:a1:be:8e:df:b4:75:3e:2e:cb:c1:b8:
b3:7a:bc:4d:82:dc:93:87:61:df:09:36:b0:a1:7a:03:15:89:
c8:f8:a6:14:32:80:1a:9d:24:8d:6a:05:28:34:2b:42:1f:73:
81:51:87:10:98:bc:bb:62:fe:e7:77:5d:08:4c:bf:6b:36:cd:
36:ec:7d:eb:8d:71:6d:11:98:70:a2:b0:a7:a9:91:59:bb:54:
c4:db:86:fc:ed:b8:fc:ed:af:93:16:31:08:6e:78:e6:62:5c:
16:37:43:94:49:d3:23:31:e9:4f:f8:ec:5a:6a:30:68:1b:4a:
ba:c6:a4:20:e3:dc:0b:74:66:c0:50:67:d6:88:d2:80:0f:1a:
54:6f:98:8e:46:ac:7f:36:9d:4a:69:a1:a6:ae:5f:6c:3f:c4:
d1:a7:bf:2b:ee:ba:5d:16:63:9b:2c:b5:bb:82:fe:df:b3:b5:
48:1f:75:df:4a:59:7e:a3:6f:2d:c3:80:5d:da:59:f0:e7:55:
2a:d1:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:21:06 2026 by rpki-client