Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
File: JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft (raw, json)
Hash identifier: lAQTWZhoCIpn47gA1gSKM50LrVCU6SiBnIx/eb91JkE=
Subject key identifier: 6B:51:CC:33:EB:94:47:68:C3:CA:E6:3E:F7:02:02:08:29:51:FA:9C
Authority key identifier: 26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
Certificate issuer: /CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Certificate serial: 01A134EC4E364D7067F00B8A7F926731EA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
Manifest number: 0102
Signing time: Tue 13 Oct 2026 11:01:04 +0000
Manifest this update: Tue 13 Oct 2026 11:01:04 +0000
Manifest next update: Wed 14 Oct 2026 11:01:04 +0000
Files and hashes: 1: CT7CUpJmJPLajKgOQIFrWv5R9bI.roa (hash: kW/49sudv3kAXReOsUWamQV3RVaaDJfvruQZFjeF4XM=)
2: JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl (hash: A+w/x+PGOs25d977pZPjgnclBg3kAe3Xq1ybI9zLUdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:4e:36:4d:70:67:f0:0b:8a:7f:92:67:31:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Validity
Not Before: Oct 13 11:01:04 2026 GMT
Not After : Oct 14 11:01:04 2026 GMT
Subject: CN=6b51cc33eb944768c3cae63ef70202082951fa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:6d:e5:1a:44:97:0c:fe:f4:57:6a:5b:2c:
3a:d6:ae:ae:ef:f3:9d:ae:14:2c:82:cb:f8:04:19:
6d:d4:82:eb:0b:5d:b0:d0:8a:8c:2f:15:3d:b9:14:
99:39:a7:52:ff:28:64:30:85:1b:ec:d6:2d:de:bd:
72:9a:14:3f:57:05:7d:c6:d8:35:fd:eb:9d:1e:2d:
ef:e3:ef:16:32:46:24:8d:4f:87:af:53:85:40:be:
f7:d1:d9:18:e0:9b:c4:8b:5c:90:e4:5f:cb:30:9d:
e1:47:72:19:32:56:b6:c8:f1:8e:59:95:7b:1e:15:
ad:62:8d:96:6b:db:8b:58:22:fa:40:55:9f:1b:86:
8a:c5:c4:45:cd:fc:c4:a1:1f:26:ba:35:3b:00:71:
56:a5:3b:2d:09:83:b0:4a:69:8d:72:30:e4:61:e4:
8f:a5:32:14:b2:b2:64:a5:de:a6:83:9e:b7:cf:26:
a2:03:8e:a5:6b:2f:79:3f:54:96:19:75:10:1f:db:
4e:15:32:2a:70:fb:73:da:e5:f6:3d:70:35:9c:64:
56:ea:24:8e:ed:02:8e:0a:da:ce:8b:0f:04:39:d1:
ed:43:0a:42:18:94:d5:8f:d8:21:6e:df:1f:ff:55:
56:a8:78:28:48:48:49:3a:ff:10:06:9f:96:cb:6b:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:CC:33:EB:94:47:68:C3:CA:E6:3E:F7:02:02:08:29:51:FA:9C
X509v3 Authority Key Identifier:
keyid:26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:ad:0f:86:19:7b:e7:c5:01:82:14:f5:6a:7c:94:7a:c1:
08:97:8c:ac:62:fb:e5:f5:86:7f:77:58:04:2b:42:3b:44:2e:
cb:2b:10:32:aa:f5:cb:62:c9:f6:7a:22:1c:c9:01:82:8c:57:
ee:e4:35:db:6e:1c:4f:75:cd:d8:09:fc:a3:12:56:96:8d:57:
4c:f3:7a:31:bf:82:5e:91:19:65:fd:5e:04:47:1f:00:fc:52:
7c:ad:9c:4a:11:f3:52:0a:40:72:5a:a0:30:04:a9:7c:46:cb:
01:83:a2:c2:63:d5:a9:35:16:1c:b0:d9:23:39:67:1c:d0:d1:
48:65:55:b6:27:82:60:86:83:80:e7:21:6b:71:23:e4:44:90:
18:3a:31:bf:29:1a:41:fc:7a:4d:27:e2:2b:1d:f8:7d:5e:a9:
aa:2f:db:0c:c9:c1:84:40:28:36:91:0c:3e:c3:79:31:ea:5e:
f8:a5:73:46:45:7e:d5:31:96:b7:2a:ad:13:ed:44:ad:2e:4d:
b3:bb:a9:72:52:48:b5:6f:ca:fa:89:b9:a1:2a:e2:34:ef:9a:
b2:4b:1b:eb:45:d6:a1:4b:ab:25:30:bb:31:7d:d4:df:21:3f:
97:44:1f:b2:88:f1:b3:ef:0a:30:6d:f4:a1:c7:07:89:a2:5e:
f9:e2:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:00:03 2026 by rpki-client