Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: esgPIV9R+leBumnvf0BIo+9dGCG0GzSe5DNn5bWzUYQ=
Subject key identifier: 45:7A:A8:9C:10:23:C5:67:A3:CD:E0:9D:EB:DD:2C:FA:8D:32:C0:AF
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01A0CF35FA6DDA0434D4530B69EA6FF09330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 17:00:16 +0000
Manifest this update: Wed 23 Sep 2026 17:00:16 +0000
Manifest next update: Thu 24 Sep 2026 17:00:16 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: oKmtpXbMzXru4PM5wIL4Eu76FuQ1f4UbJIBwyX1JHLs=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:fa:6d:da:04:34:d4:53:0b:69:ea:6f:f0:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Sep 23 17:00:16 2026 GMT
Not After : Sep 24 17:00:16 2026 GMT
Subject: CN=457aa89c1023c567a3cde09debdd2cfa8d32c0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:21:ab:53:7f:13:b5:03:67:be:0a:61:df:
c4:72:dd:3f:d1:98:3a:9c:bc:e3:ea:b8:eb:1f:79:
f2:d1:66:ba:10:0b:2f:91:c9:53:4a:5b:88:fe:3c:
91:f2:10:c5:17:9a:69:db:88:49:c4:43:9d:9b:dd:
50:b0:25:3b:6e:ff:33:64:75:76:fe:4a:d3:c5:39:
55:ba:26:ce:8f:30:0e:cb:fe:ad:b0:89:71:8e:51:
3c:82:bc:21:61:b4:dc:81:a6:cb:99:56:ce:b7:08:
5b:e7:8e:a9:d1:fd:7e:2e:37:b7:db:5d:53:f3:46:
a0:05:a3:4c:28:1e:e2:a9:6e:f5:05:05:0b:8a:80:
8a:a8:96:5f:09:16:21:01:d4:97:ea:e0:48:cf:ef:
85:e3:a4:93:06:f6:bd:a1:99:cc:b0:c5:bf:b2:53:
13:20:21:ed:a4:dd:f5:81:0e:f1:d0:c1:6f:a3:d7:
d9:75:85:ec:cb:9d:a0:36:fa:14:9b:ee:16:23:54:
57:15:c9:0e:59:62:3c:71:9f:07:6d:25:2e:08:f6:
06:85:04:18:38:73:86:0a:34:00:53:a0:f7:67:40:
5e:c0:b1:e9:64:84:8e:ec:54:3e:a9:05:89:ee:76:
50:8b:9a:fe:4f:60:3b:c7:df:ed:86:95:dc:cb:1d:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:A8:9C:10:23:C5:67:A3:CD:E0:9D:EB:DD:2C:FA:8D:32:C0:AF
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:89:f2:28:e2:d8:42:0f:bc:b3:46:bd:39:37:69:30:58:a1:
4d:ad:98:fa:98:e1:d6:ca:1b:1d:8e:21:95:1a:86:d3:92:75:
d9:ba:73:43:fa:20:1e:5a:8f:ee:d7:a9:8c:ff:0c:6a:c2:f7:
b2:d7:7a:22:9b:f6:55:94:e4:30:26:67:38:14:e0:29:f7:a9:
72:32:03:f9:3d:28:17:70:e5:ea:f4:69:f5:b1:a9:d2:d2:0c:
17:b6:28:b1:cd:e7:fa:d3:f7:2a:2a:5e:65:c1:b7:55:1f:40:
b5:a0:ff:a1:d9:05:7d:c4:e6:73:56:95:9f:cf:a7:c1:58:61:
d3:b8:30:51:05:ff:2e:44:e1:d2:ef:29:d0:4d:75:79:41:33:
95:84:c2:f5:ac:d2:0b:87:2a:50:c6:c2:a6:93:ae:e6:b1:ab:
d4:ac:71:01:25:7f:14:c3:59:5e:3f:6b:06:12:67:99:b9:c5:
76:cf:a6:1d:b5:b6:50:69:cb:16:d4:a9:54:93:e6:6c:05:78:
97:f0:18:ce:a7:2e:0a:91:fa:0b:78:35:d9:a3:c1:ca:37:a2:
1e:f9:9a:d0:0b:7b:a2:68:b0:bb:2c:c8:82:70:f2:18:e4:e1:
74:23:24:64:c0:c8:55:fe:2d:29:8c:8c:ef:51:80:e2:2e:6f:
5a:01:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:24 2026 by rpki-client