Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: eKTD+2iBw2xcakULtLiBagNddPVaxMszKJGFNyMCJyw=
Subject key identifier: C3:00:44:FA:4E:D5:16:22:23:28:06:F3:D3:97:0D:D0:67:3F:EB:9D
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01A0D9BB97D006DFBB6D636BB8969FC29BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 161E
Signing time: Fri 25 Sep 2026 18:02:25 +0000
Manifest this update: Fri 25 Sep 2026 18:02:25 +0000
Manifest next update: Sat 26 Sep 2026 18:02:25 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: x3MM5us97d3xzLghc0TfSuyAIA05+Ibf57ReXr04ONM=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:97:d0:06:df:bb:6d:63:6b:b8:96:9f:c2:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Sep 25 18:02:25 2026 GMT
Not After : Sep 26 18:02:25 2026 GMT
Subject: CN=c30044fa4ed51622232806f3d3970dd0673feb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:90:53:b6:bf:75:6f:83:8b:2f:95:da:56:
80:73:3e:ea:06:bf:da:10:a5:7f:86:e4:00:35:22:
77:02:da:70:5d:f2:76:71:7d:aa:c8:40:cb:ce:f5:
dd:24:30:7e:1c:52:4b:ee:96:3b:7c:73:56:50:61:
32:91:59:08:d5:64:f7:f2:65:74:79:23:f3:18:a3:
cc:ea:05:b0:24:b4:37:a4:34:9c:78:1e:6a:aa:01:
43:53:e9:6a:82:af:a6:74:ac:39:99:ab:d6:6e:19:
61:c0:c8:1d:a2:ef:2e:f0:01:00:2f:fd:47:91:68:
fe:be:6c:c4:5c:1e:d8:a6:1a:fa:df:f2:46:09:2e:
37:0b:74:f9:3c:de:bc:3c:ec:79:84:5a:9d:27:61:
04:07:9e:87:0b:2f:5b:99:92:ec:c0:16:dd:de:70:
2b:52:6c:74:5b:87:79:bc:41:13:bb:73:c2:f1:05:
c4:df:ec:b8:93:6c:47:0b:fb:48:21:15:16:72:a8:
99:65:35:97:be:94:66:8b:a1:3d:e0:1d:80:e4:aa:
50:0b:39:02:b4:36:98:4e:30:bb:51:81:36:3e:34:
d9:23:ac:ae:4e:ce:be:3d:73:f1:3b:0d:b2:5f:30:
b0:8d:a4:22:66:21:51:fe:9b:3f:3e:c4:e5:6a:1f:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:44:FA:4E:D5:16:22:23:28:06:F3:D3:97:0D:D0:67:3F:EB:9D
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:71:b3:31:a5:83:a8:5d:d7:21:d1:96:a6:e6:73:fa:e9:16:
f8:20:15:84:11:19:bb:6f:13:b5:79:d2:c9:04:78:7b:58:4d:
ca:f2:cf:18:e0:97:ea:bd:56:d5:71:4f:ca:49:a9:e3:44:8a:
c2:e2:c7:65:2a:1f:ab:ae:0b:a4:65:57:fe:53:de:05:42:59:
d9:32:7d:70:85:5f:bb:7b:9b:7c:0d:22:09:21:99:e0:be:04:
6b:6e:57:d9:6f:3f:cd:59:ea:40:e4:6a:e6:e6:51:30:83:10:
9b:40:b0:60:73:a9:ed:25:46:74:30:04:ac:d5:3b:50:bb:f1:
e5:55:73:a3:0e:d5:c0:88:27:6f:c2:17:93:14:52:16:09:de:
af:3a:61:d4:9c:d3:27:0d:29:d4:06:8d:55:28:fc:11:07:31:
d6:af:45:83:be:e0:19:36:1b:4d:f6:bf:b6:19:e3:93:aa:14:
1f:9e:d6:22:a2:5d:53:8a:7b:36:c7:90:c8:e4:35:f9:1a:25:
5a:d9:65:99:fe:a0:94:d4:62:c6:03:62:26:58:c4:43:9f:f6:
35:a3:ba:22:ea:71:5f:30:1a:90:68:91:98:bf:0b:74:9c:41:
2c:15:58:9a:bf:78:24:f6:c9:fc:83:06:cb:ab:b3:cc:e3:b4:
21:76:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:34:54 2026 by rpki-client