Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: R+Bt2HsjAPs0x3kbvQFoq7EUmQu/73b/BWaA0OmH/zQ=
Subject key identifier: 8E:90:79:69:12:FD:53:1A:55:09:7C:06:D5:48:0C:C1:56:4D:0C:80
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A0F37A646D3EEE3954B5F02F86FA23B7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 090D
Signing time: Wed 30 Sep 2026 18:01:19 +0000
Manifest this update: Wed 30 Sep 2026 18:01:19 +0000
Manifest next update: Thu 01 Oct 2026 18:01:19 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: nxCNvNXTLaii/N3M4obYTqZA8hlwZePXT2NxG4M4o64=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:64:6d:3e:ee:39:54:b5:f0:2f:86:fa:23:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Sep 30 18:01:19 2026 GMT
Not After : Oct 1 18:01:19 2026 GMT
Subject: CN=8e90796912fd531a55097c06d5480cc1564d0c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:f3:86:09:cb:6c:c9:4d:c3:e5:78:4b:e9:
e0:20:f9:ae:15:b1:19:99:03:d7:14:86:30:de:7e:
d0:80:6f:cf:53:32:1a:d9:36:94:b2:3f:a7:17:62:
c8:1e:e4:e6:e4:4b:16:f1:88:86:66:49:e3:9a:8d:
c3:9a:e6:ce:f5:d9:f4:34:15:c3:95:6e:51:49:22:
2c:5a:b5:a7:04:fe:8c:28:be:8c:40:5d:33:03:6d:
07:b9:ac:0d:a5:5e:f1:f2:d6:8a:39:9b:21:64:f3:
84:c2:5a:d3:09:3c:f8:cc:ab:2f:5d:8f:d4:44:98:
4b:41:93:f0:f9:d9:ad:40:c5:12:b9:cd:d8:9c:c1:
07:f3:a0:e6:86:31:64:18:0c:ad:c1:ec:5a:3a:ab:
c4:06:d1:ca:c0:5b:f8:08:5e:46:0a:c4:ec:0d:52:
70:56:f8:25:76:d9:bb:71:55:d9:5a:7b:f2:b4:31:
53:2f:bf:71:96:7b:d2:7d:c3:ec:3f:dd:a3:53:5a:
ca:a6:24:21:4c:09:eb:4a:98:c0:93:5a:e5:ee:e2:
bb:bf:a1:c0:4e:7d:63:ad:d0:e2:e5:75:87:58:b5:
42:fa:45:c5:e3:cf:f1:29:3e:4b:91:23:93:74:e1:
3c:ba:4a:67:0b:41:61:4d:13:05:12:08:cc:ba:e0:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:79:69:12:FD:53:1A:55:09:7C:06:D5:48:0C:C1:56:4D:0C:80
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5b:88:75:9f:96:d5:0a:ad:7a:18:1a:fc:ef:e4:a6:4a:9d:
2d:a3:a7:34:75:ca:0e:f7:06:fb:49:51:d2:55:75:6f:e9:a0:
b7:ad:4f:92:03:a4:0a:51:b2:e7:3a:c8:bb:9a:56:1b:c2:75:
a5:28:ff:79:58:9a:c3:70:7c:7a:27:4f:c2:35:c1:df:00:9c:
10:13:d1:75:f1:c2:0e:52:04:ed:cd:1d:b6:61:db:32:2c:a4:
7f:bd:99:86:b3:06:ac:39:8d:e9:d5:11:4a:36:93:e2:30:b7:
4a:78:d4:82:7a:f9:25:18:21:d7:be:68:d4:17:8c:73:a7:47:
3e:35:84:6f:55:2d:37:5a:c3:67:8e:41:6b:ac:f2:fe:3e:a3:
8d:0f:40:96:58:a5:64:4f:f3:e8:49:cb:1c:be:42:4a:d8:d6:
ef:d9:19:8b:90:2a:25:bb:54:8a:fe:f4:d7:1d:6b:51:f6:98:
63:b2:10:f0:cf:1d:9d:5e:bc:1a:75:1d:c1:17:d8:24:d5:8e:
13:38:fa:f1:d5:7c:31:69:56:22:f1:2b:9d:49:9d:79:14:7b:
f2:52:b7:79:84:eb:7f:37:78:c9:ee:8e:a9:2d:ac:b7:25:ea:
8f:c3:22:24:06:d0:ec:31:c4:08:8d:28:b9:66:46:c0:a9:86:
2b:ca:04:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:07:17 2026 by rpki-client