Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
File: JQQakk7oOTLBjogOQerd-nzyy7M.mft (raw, json)
Hash identifier: 0z4/p+rl1vIhDgsFO1QJK0ST2o9bIrmkflNbX1v3PbM=
Subject key identifier: 8E:37:12:56:09:0E:F6:72:0E:D4:34:1C:2A:DE:D6:6C:1D:62:14:B9
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Certificate issuer: /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial: 01A12CC5882BA34F1A2B2868B31C1EDFDF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
Manifest number: 0115
Signing time: Sun 11 Oct 2026 21:01:45 +0000
Manifest this update: Sun 11 Oct 2026 21:01:45 +0000
Manifest next update: Mon 12 Oct 2026 21:01:45 +0000
Files and hashes: 1: JQQakk7oOTLBjogOQerd-nzyy7M.crl (hash: IYlQnY4gr745uK3NdhgnRs33qhjt27CKfko/wvY4WqQ=)
2: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (hash: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:88:2b:a3:4f:1a:2b:28:68:b3:1c:1e:df:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Validity
Not Before: Oct 11 21:01:45 2026 GMT
Not After : Oct 12 21:01:45 2026 GMT
Subject: CN=8e371256090ef6720ed4341c2aded66c1d6214b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:87:7d:db:26:f6:92:2d:25:1f:4a:0a:c2:
35:32:a4:ab:d0:28:e6:e7:5f:04:28:81:8c:78:52:
a5:a1:70:e7:f1:61:f0:f9:2e:8c:86:f2:7f:2f:a2:
80:b9:6c:fb:18:95:9c:63:d7:ae:91:bd:b0:1a:48:
a7:25:84:33:c4:8e:53:52:b5:42:fd:ae:e8:6e:bf:
a9:6f:69:19:75:68:d9:74:c5:85:9e:df:45:ec:25:
2f:f9:da:4f:05:82:12:96:5a:56:25:2a:87:50:3c:
57:3b:3a:7f:99:60:a6:50:e6:98:f2:6a:76:d0:d2:
af:a3:b7:3a:f8:6b:05:c2:0e:fe:fc:00:ff:16:cc:
76:87:d2:b1:ca:39:99:ce:c9:23:14:7d:d6:59:eb:
cf:9c:34:90:32:d6:81:59:3d:87:e1:cb:1f:61:77:
20:e2:5a:90:a5:18:d8:2c:b7:42:19:8d:45:63:42:
d6:95:3e:fe:3d:1d:0b:50:f0:d7:22:f9:65:31:8b:
7f:2c:9b:ec:5c:25:c3:b8:16:54:f8:56:88:fd:9e:
dc:48:e5:59:68:70:1e:c2:db:46:5c:c3:c1:c5:20:
75:3b:11:18:ae:b7:7c:8b:6c:11:25:c2:5e:63:62:
d3:e2:57:51:82:98:6f:d8:b3:0c:7a:5e:5d:ce:d5:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:12:56:09:0E:F6:72:0E:D4:34:1C:2A:DE:D6:6C:1D:62:14:B9
X509v3 Authority Key Identifier:
keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:ea:c0:61:11:e2:cf:4b:5b:4d:17:3c:7f:cb:9b:df:ae:
92:ed:87:8f:d4:f5:6d:ac:72:c8:a7:ac:23:f1:86:bb:fa:19:
7c:95:69:40:26:06:e2:4a:2b:00:09:54:79:b8:a2:1f:ca:b9:
35:63:b2:15:f1:99:d6:81:49:a6:b3:7f:03:aa:cb:a0:bc:29:
78:67:85:d0:41:db:7a:eb:26:a5:00:f0:fc:b5:61:fa:11:64:
ba:78:06:a3:5b:58:e9:ee:47:5f:6e:c2:26:75:e1:55:f8:72:
6f:75:b4:06:f4:58:1f:78:08:b7:93:d8:09:e4:dc:4a:e3:2d:
39:9a:4a:45:19:f2:d7:10:bd:ee:1f:e4:a3:1c:9e:e8:a0:2d:
6a:b2:46:29:35:1a:98:af:ed:1a:b1:9e:11:1a:84:44:7f:25:
65:14:c6:94:fe:10:2e:e3:b4:10:0c:da:4c:2a:89:d0:f4:4f:
bb:83:f7:1a:61:e2:97:d1:55:69:6f:0b:f0:db:28:5a:c2:fb:
39:67:8d:9d:b0:15:ce:cf:e5:a5:e5:33:e2:1f:d6:26:64:ab:
44:48:6e:cb:6a:36:9f:4d:90:0c:05:ee:3c:d0:c8:b7:53:ee:
38:87:5d:bc:6e:26:87:2a:37:e4:76:83:06:fc:12:c4:b4:83:
bf:f5:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:57:42 2026 by rpki-client