Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: JXRZt6fAEG2SbwvwIEt4/R7DT57O2aKow8vhtNKim2M=
Subject key identifier: 3D:54:4B:D1:F4:D1:C1:9A:8F:16:66:D7:57:2D:20:40:A3:E1:76:95
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A0EF9DC51EB0066921A72DBC3FD63B85C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 090B
Signing time: Wed 30 Sep 2026 00:01:29 +0000
Manifest this update: Wed 30 Sep 2026 00:01:29 +0000
Manifest next update: Thu 01 Oct 2026 00:01:29 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: O9bNba4Non4nCdB7cLsDA74ljaAF02SxwrH8pPwifXI=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:c5:1e:b0:06:69:21:a7:2d:bc:3f:d6:3b:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Sep 30 00:01:29 2026 GMT
Not After : Oct 1 00:01:29 2026 GMT
Subject: CN=3d544bd1f4d1c19a8f1666d7572d2040a3e17695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:c8:40:5b:73:db:6e:b7:99:a5:be:fe:4e:
38:ae:17:54:7e:de:03:13:ae:e4:6c:b8:fb:fb:55:
80:6a:8f:33:4d:8a:c8:49:33:61:5d:e2:76:8b:fd:
50:97:a5:50:b3:d1:0a:75:3b:ff:84:c7:92:93:11:
1c:63:a6:f4:09:c6:4b:db:47:8c:b1:d1:00:c4:b8:
69:04:da:25:4c:4f:c7:ea:1e:4e:29:bf:1b:0b:b8:
de:67:1a:97:dd:39:60:39:9c:09:8f:e0:af:59:99:
47:79:ec:b9:13:c8:3f:e0:20:13:ac:84:be:a7:0e:
6b:9a:d0:1a:20:0f:06:08:59:0a:c5:ea:ff:8c:d4:
ae:34:86:f3:1b:40:63:78:a5:0a:35:9d:42:3a:82:
58:fb:68:fa:ee:1c:c5:fe:d0:f8:fa:7f:5e:da:ed:
87:97:90:7e:10:1a:3f:f8:9b:5d:fb:45:45:c4:a5:
1f:9b:5c:89:0e:97:36:fa:73:6b:0e:8a:7c:d2:65:
fb:36:6f:b1:a7:ad:96:f0:98:1b:28:ea:77:0b:44:
51:61:bc:c9:48:ff:69:00:dd:a7:45:6a:9c:34:dc:
b8:d4:6e:ca:a6:5f:b0:c3:ab:f0:59:a2:09:4d:ec:
a8:58:79:2d:06:c2:ef:04:c7:09:00:1e:5d:16:b0:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:4B:D1:F4:D1:C1:9A:8F:16:66:D7:57:2D:20:40:A3:E1:76:95
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:dd:81:67:9c:d4:5f:e2:73:c0:19:1f:19:9e:c0:6b:9d:
d4:7a:01:c9:83:bc:53:31:24:2e:0a:16:b8:ce:5a:69:84:81:
1c:f4:60:62:cd:7a:65:06:84:85:31:23:ab:6d:4a:a2:71:a7:
67:bd:13:e5:f3:68:74:54:4c:2f:29:92:44:77:7e:88:0f:1d:
a0:d5:b8:3c:a3:77:50:fd:29:40:8f:bf:4a:4c:96:1c:ef:7b:
06:ae:f6:e1:95:36:ea:8b:85:5d:5e:c0:42:fb:77:5a:75:37:
c4:d4:07:48:0e:96:65:b1:b3:cc:b1:66:1f:7c:c8:28:6d:af:
60:01:98:7a:63:16:9d:4f:0d:9a:80:d5:63:43:2e:dc:f0:f1:
46:bf:1b:4e:92:bd:63:f3:39:51:fd:95:55:89:d5:11:50:b1:
c1:ff:bd:c8:8e:1f:71:3e:30:50:76:2c:5b:0a:2c:b9:d0:ca:
03:71:db:83:31:34:a6:0e:c3:ef:de:b8:8b:0e:c1:3c:d7:72:
f6:9a:73:f4:a2:8b:3b:cf:e9:d2:07:e4:36:ef:e5:fb:3d:bd:
1f:3c:aa:b5:6a:2c:2a:8e:ff:8c:54:65:08:d5:df:3c:79:b4:
82:d5:f6:22:7c:d4:09:f6:ff:7f:fe:5c:55:9c:60:31:17:dd:
6f:dd:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:33 2026 by rpki-client