Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: 6ROXrPBVyq0Bgau6ztM3ip5ALjjyweWEieDNLjU34g8=
Subject key identifier: 49:65:CC:49:52:3A:AE:93:A8:E3:9F:06:96:03:06:EF:5A:D8:46:13
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 01A0E2BE36A615758651EF4F20AA29C5CD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 0AF2
Signing time: Sun 27 Sep 2026 12:01:51 +0000
Manifest this update: Sun 27 Sep 2026 12:01:51 +0000
Manifest next update: Mon 28 Sep 2026 12:01:51 +0000
Files and hashes: 1: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: aMuGPP88mOH2kskgnuAN40PyvoHYxCtI/9jYzWcjRjg=)
2: bZ2MoSlfcA_Bg7BrRKE2leLFknc.roa (hash: mlGeYAkzIiaMQu2uNg0bx5zSdfDctbxIGGNO6WnD0zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:36:a6:15:75:86:51:ef:4f:20:aa:29:c5:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Sep 27 12:01:51 2026 GMT
Not After : Sep 28 12:01:51 2026 GMT
Subject: CN=4965cc49523aae93a8e39f06960306ef5ad84613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:2a:0b:f9:76:bd:c7:a0:4c:42:ec:a3:44:
c8:f5:5b:17:19:eb:86:d8:6f:44:60:56:30:ca:6a:
33:ef:fd:95:6b:12:c7:8e:ae:fd:f5:98:78:a4:c6:
c6:18:63:fb:0c:5f:8c:c8:28:b2:5d:d6:d9:50:4a:
fe:47:e1:42:a7:f9:1f:3f:e8:d1:bc:84:15:6f:72:
9f:b0:aa:3b:dc:31:9c:47:a2:e0:3a:e4:7d:6d:de:
b7:68:4d:21:09:05:ac:79:f9:24:cf:bf:26:be:17:
1b:10:c6:74:a3:00:71:0b:e1:f8:4a:25:71:27:b4:
98:4e:3c:0b:ba:05:f9:17:99:84:61:a0:17:f8:68:
09:11:41:ca:6d:c4:8a:c4:fa:1e:36:9d:ba:28:07:
71:a3:60:12:73:8e:4f:5e:7a:50:3b:e6:c9:8a:4e:
50:55:23:73:c7:1b:5c:15:5d:ea:62:f2:bd:21:15:
5a:a0:fe:42:3a:d3:95:0b:59:13:82:ec:90:38:c6:
4d:a7:e5:4b:28:95:8b:11:16:e3:8b:6c:1b:f8:b3:
e8:6e:c9:57:a9:9a:7f:34:20:2b:f7:ff:59:c1:3f:
77:28:5b:95:c5:59:40:5c:89:a1:33:ea:55:ab:86:
7e:82:7e:60:be:42:2b:6a:88:85:9b:c4:b6:4d:c0:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:CC:49:52:3A:AE:93:A8:E3:9F:06:96:03:06:EF:5A:D8:46:13
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:e7:d5:39:dd:b9:9c:75:0d:e5:7c:44:a6:cc:e9:4d:a2:
3d:6e:c0:90:71:82:d0:13:a1:32:b8:4c:ec:23:6a:e3:1a:37:
de:dd:03:78:04:8a:25:75:81:a7:af:88:87:75:2d:e7:4d:d3:
cc:3d:ba:08:b1:c1:5d:8b:7e:3b:cc:d4:9e:19:1e:98:08:d8:
0a:63:b9:eb:83:1d:d8:41:b2:b0:c2:63:65:4c:12:18:56:8f:
99:24:3c:59:65:dd:d6:60:4f:2d:d1:34:78:16:36:4f:2e:69:
04:71:10:e9:a2:d3:d1:90:73:36:91:55:4b:a3:99:26:d2:4e:
0d:73:2b:40:2e:54:ff:2c:a9:39:2b:e1:c0:ec:d8:aa:46:f1:
a5:fe:05:61:83:75:d5:78:c1:14:ec:d6:43:f6:87:db:e3:63:
ef:86:c2:d8:e4:af:23:cd:1b:ac:eb:61:07:79:e7:3e:f5:6c:
c3:8d:00:3d:46:6f:1f:04:27:35:21:c8:54:7f:81:ab:52:a1:
c5:ae:7d:15:06:a3:c8:7d:33:ce:b2:a9:de:26:cd:55:bc:79:
5d:bd:4e:80:fd:9c:38:56:bc:1d:a8:78:61:45:35:2c:31:38:
ef:4b:24:14:90:fa:c4:2c:b5:4c:7b:df:8a:db:2c:96:99:22:
84:93:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:36:37 2026 by rpki-client