Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: zeZjhDb6Z8st2QG7WFss3ZbxpYc00M7QGvo2vN6ypDE=
Subject key identifier: BE:0D:05:BF:90:DD:C1:1F:44:EF:A1:98:0E:19:49:AE:96:32:28:CE
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 01A0D804D39E2166EB3625FF2A870ECA2B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 10:03:09 +0000
Manifest this update: Fri 25 Sep 2026 10:03:09 +0000
Manifest next update: Sat 26 Sep 2026 10:03:09 +0000
Files and hashes: 1: 6MvEEf7_I3zO3ShtqYd8LKtfRq8.roa (hash: lIgvAYq1Ass4AfPtbYog1dJL/68LEdNig8uh3pGw9vM=)
2: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (hash: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: i2MljcLf+SswmXF8vAgS4okJuwbsZbHQ+eqNR0sVKMA=)
4: Jqk7oDaY0GyweY_m1dLexacLzPE.roa (hash: prybAkap/ary1cwam/oMqauOzBkuf1YCV2giq0/4yoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:d3:9e:21:66:eb:36:25:ff:2a:87:0e:ca:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Sep 25 10:03:09 2026 GMT
Not After : Sep 26 10:03:09 2026 GMT
Subject: CN=be0d05bf90ddc11f44efa1980e1949ae963228ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:12:2f:e7:21:a4:50:73:1e:c7:85:ab:b0:
0d:3d:22:4b:1a:42:2e:ef:1f:40:94:f0:60:41:10:
8c:89:b9:29:30:98:fb:ab:da:0c:d7:a4:7a:55:d9:
6a:2a:f0:37:66:6e:6e:cd:19:45:a5:62:cf:34:dd:
62:08:ed:e7:ea:cc:8e:b7:db:5e:da:39:15:db:1d:
e3:14:96:2b:c9:c1:57:ef:27:bb:92:8f:48:0e:80:
8a:4d:cf:af:4b:0b:a4:8e:90:75:d5:ac:9d:39:5e:
76:22:8a:f1:57:0b:ed:28:22:e7:6d:c6:09:9c:ee:
81:cf:37:05:3e:82:1a:01:4d:de:03:7a:f1:a1:db:
80:06:01:fa:e0:30:f2:67:a4:5e:18:50:a3:8e:dd:
89:bf:5a:89:d6:87:19:b7:c2:70:9d:16:dc:69:fb:
d1:6d:d4:10:2f:0b:b7:4b:a3:59:3a:4e:27:26:41:
d1:0a:df:a7:69:4f:ad:f9:7b:3e:9c:e7:80:fa:29:
48:bd:d0:ef:59:ce:62:fc:16:35:fa:ec:64:fa:bf:
00:3f:09:28:7d:98:a3:30:7f:16:f9:27:f3:a2:57:
3d:34:53:17:b0:e4:df:20:85:6f:51:1d:11:fe:aa:
88:5c:08:85:3b:4c:0d:61:ca:e0:e5:23:a5:ba:cf:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:05:BF:90:DD:C1:1F:44:EF:A1:98:0E:19:49:AE:96:32:28:CE
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ff:09:e0:24:4d:32:50:64:36:06:bf:e7:c0:0d:eb:b7:30:
a8:39:d3:2e:e3:32:40:8d:16:91:34:78:60:da:4a:aa:5b:61:
91:e0:17:54:2e:e7:80:07:2e:ab:b3:d1:81:89:e6:bd:86:ed:
90:08:41:4e:4f:66:60:a2:69:05:19:2a:89:2e:9b:7e:02:9d:
96:00:b6:b0:26:21:5e:91:73:60:52:52:75:bf:5b:32:13:62:
2f:2a:5f:4f:57:12:4d:af:e0:7a:e4:6e:a1:40:ab:f7:43:ef:
d7:8e:ba:70:3d:bd:6d:33:79:14:a7:e7:99:a9:80:a2:68:7c:
00:c2:07:30:0c:80:a8:53:13:0c:80:2b:e3:1d:be:62:4a:37:
10:de:34:e3:af:0e:57:c5:9d:b2:2e:58:43:9b:e4:5f:4d:02:
26:e8:0a:7c:bd:3a:e4:be:01:30:2b:93:45:8a:fc:40:18:b4:
83:c0:96:61:80:ae:a3:09:f1:77:74:30:a6:de:d0:f1:e5:33:
21:70:3b:23:63:4a:4c:0b:58:99:73:66:72:d0:10:3f:1d:cd:
fd:41:ed:16:a0:2d:68:89:dc:7f:ae:9a:3f:30:ab:fe:86:84:
85:a4:db:16:f4:3f:13:37:9f:43:17:8c:b3:cf:b3:c2:60:fe:
b7:37:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:58:51 2026 by rpki-client