Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: /Cxan0MCAopnbRW3dn1jd9kvtoCWn6i7Yz7ogyU9ZOs=
Subject key identifier: 9F:D7:F5:C6:64:52:7C:98:BC:08:B7:0F:51:FB:37:65:31:F3:B9:F2
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01A0D6F051EFAC1056B5352FC96686454DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0F20
Signing time: Fri 25 Sep 2026 05:01:08 +0000
Manifest this update: Fri 25 Sep 2026 05:01:08 +0000
Manifest next update: Sat 26 Sep 2026 05:01:08 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: 2+2w73jiLqnRDP404bJjoimMcgyETY6MbWl5xGtii84=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:51:ef:ac:10:56:b5:35:2f:c9:66:86:45:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Sep 25 05:01:08 2026 GMT
Not After : Sep 26 05:01:08 2026 GMT
Subject: CN=9fd7f5c664527c98bc08b70f51fb376531f3b9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:80:d7:7d:a4:60:4f:c8:98:90:1f:99:6f:
3f:b9:0b:13:2f:c1:78:1c:f7:82:a3:a6:1a:8f:48:
69:c7:63:92:91:bf:60:81:83:8e:be:9c:10:ce:d2:
6c:14:79:aa:81:e3:d4:7a:43:6c:30:bb:71:48:e8:
6f:73:6b:39:b0:e5:16:97:b5:13:70:72:35:58:c2:
dd:43:e9:5a:0e:41:68:00:d2:61:fc:14:3b:81:da:
35:1e:ad:5b:25:28:08:88:f0:aa:f8:2f:14:01:bb:
d1:b6:6a:b5:69:cc:e2:11:48:d7:31:10:4a:28:cb:
54:84:29:02:88:63:4b:5a:c6:5c:60:b9:80:99:03:
e6:bd:77:b5:be:e3:63:89:22:05:19:da:98:98:e1:
da:ea:a3:a4:35:12:5d:fa:a8:5a:2d:a1:80:26:4f:
15:ab:76:c4:84:90:f3:6d:f3:b8:db:bd:95:d4:97:
48:4f:96:4a:24:6c:6e:7e:8a:06:e3:58:fc:b5:5a:
b4:f3:25:ba:41:dd:30:cf:b5:37:dc:b9:fc:2a:63:
67:d2:fa:55:aa:da:cd:09:95:1c:10:e9:bb:50:e0:
4f:60:be:b8:13:a4:32:c9:16:72:23:c1:62:42:9f:
0b:95:79:c8:ea:2e:3b:77:50:3e:f2:0d:c9:e1:1b:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:F5:C6:64:52:7C:98:BC:08:B7:0F:51:FB:37:65:31:F3:B9:F2
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:be:01:f8:37:f5:c3:57:1a:d9:3a:92:b2:a8:61:af:35:2d:
c3:80:15:14:82:b6:f7:b1:d9:d5:98:33:8a:fd:72:4f:5d:44:
a5:33:fc:5f:af:94:a7:a7:33:48:ef:57:f3:94:b0:02:a5:1c:
94:79:95:b9:6d:0c:4b:77:66:66:91:d1:66:b2:1c:c5:77:a1:
72:85:89:b0:f7:24:4e:de:bd:15:c4:db:77:e0:ee:32:eb:13:
bd:ba:aa:7b:47:2f:b0:8e:49:37:22:c4:e4:fb:a5:ee:2f:83:
be:f5:5d:1f:a1:54:a5:c2:ba:f0:14:80:27:b4:7d:03:eb:4c:
1c:95:25:4f:c7:c6:96:ce:33:0b:6a:32:68:cb:c7:18:62:f3:
6e:33:7a:81:aa:8a:a9:9d:36:28:7a:85:39:aa:27:2d:d6:94:
80:93:91:21:43:34:30:bc:e2:a6:82:44:b3:80:f0:b0:f3:93:
bb:c7:ed:a6:ce:cd:1e:19:c7:71:37:43:76:2f:53:35:1d:06:
e2:fc:c8:42:11:e3:f8:35:71:07:d8:bf:90:ba:1b:ad:3a:35:
b4:73:9c:a0:bd:99:c1:cb:6e:bb:3b:ab:af:54:07:32:f3:3b:
a1:96:13:5f:c4:e0:19:b6:76:99:1c:d4:96:0f:85:69:e3:a9:
a2:6a:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:46:42 2026 by rpki-client