Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
File: JcD6eLaa0vVeql_nVQHcRcnpE5U.mft (raw, json)
Hash identifier: GNuoklTCaBZZjIE6RT9d2WhXAf7VLTkDebmMKwGXYKQ=
Subject key identifier: C7:3F:CE:79:96:AC:9B:79:AB:00:23:33:CE:33:8A:93:A0:21:74:05
Authority key identifier: 25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
Certificate issuer: /CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Certificate serial: 01A0D3F054167FDD49EBBEBA2824D6FFE1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:17 +0000
Manifest this update: Thu 24 Sep 2026 15:02:17 +0000
Manifest next update: Fri 25 Sep 2026 15:02:17 +0000
Files and hashes: 1: J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa (hash: WWFjE+lIB3z6WE11pSejgMWzVwphSyxuCF61My1RNok=)
2: JcD6eLaa0vVeql_nVQHcRcnpE5U.crl (hash: L2e0yj/MTxyjo6X0upYiBeY9dPf9klo9J8LVev1mwJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:54:16:7f:dd:49:eb:be:ba:28:24:d6:ff:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Validity
Not Before: Sep 24 15:02:17 2026 GMT
Not After : Sep 25 15:02:17 2026 GMT
Subject: CN=c73fce7996ac9b79ab002333ce338a93a0217405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:59:95:c3:c3:75:21:5e:1d:cd:a6:5a:53:
1d:0e:0a:08:b5:5c:25:12:85:cb:9e:b9:77:04:71:
f9:eb:31:5b:68:ab:d4:50:ce:d5:18:12:dc:af:f7:
19:e3:ce:28:57:90:c3:4e:2f:e5:8d:4c:98:7a:cc:
80:25:f4:ae:1f:e3:f0:0f:0f:4c:7e:69:2f:03:d1:
c6:3e:85:d8:17:16:01:1f:27:19:f8:17:8f:26:41:
b1:16:f7:71:b9:26:13:83:9e:52:16:25:0e:bd:d2:
22:2c:3c:ca:a0:24:23:c1:69:f3:e7:39:a0:33:11:
59:d0:0f:a0:9d:82:d2:5b:c7:94:7e:c5:3e:ac:37:
00:8a:2c:e0:ac:5d:91:59:08:b8:e9:44:d4:83:c4:
5b:f6:53:d4:14:b2:97:45:60:f2:e5:a3:e9:3c:e7:
36:76:1a:0a:bd:a3:2d:97:38:e1:20:5c:c2:91:16:
f6:39:0b:dd:79:b8:a1:b1:14:86:fc:d4:34:89:2e:
1a:ef:1e:c0:e6:e9:09:3b:c2:fd:0b:33:36:d8:ee:
47:02:5f:9d:87:ad:6b:95:2a:85:81:87:94:e2:44:
11:fa:f4:bc:e9:94:5a:b9:d7:b3:13:04:2d:3e:a1:
c3:65:a6:7e:12:ed:cd:8c:5e:7a:1c:88:3b:d2:44:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:CE:79:96:AC:9B:79:AB:00:23:33:CE:33:8A:93:A0:21:74:05
X509v3 Authority Key Identifier:
keyid:25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:3d:c9:62:20:b4:89:74:4d:10:e8:22:40:6e:f1:fc:c2:
83:9a:cd:f3:4d:72:21:6a:55:c7:7d:87:fc:01:8c:f9:fe:6f:
58:ed:9a:3a:d3:04:cc:54:6e:d3:a9:e2:f9:71:79:d7:b0:cd:
7b:a1:98:a2:e9:73:82:27:77:c2:9f:cb:29:12:fd:29:d1:03:
9d:ed:fa:47:2d:c2:53:d9:57:f4:e4:c2:7e:8a:ed:e3:55:ba:
d6:d8:bc:96:fd:a2:c3:aa:31:fc:2d:bd:23:ed:10:e8:84:ac:
fe:4e:3f:20:25:e6:d6:f4:79:17:33:96:0a:b8:87:1c:6c:5d:
99:48:f1:63:41:69:be:6b:2a:90:d0:49:08:f0:91:4a:62:4f:
f1:77:e6:9a:08:70:e6:9a:24:c9:d3:1f:92:ec:cb:82:b3:58:
55:b2:36:fa:99:b8:2d:f2:b9:50:da:b2:49:b9:d0:b8:51:4d:
e7:60:b1:a3:79:04:4b:ab:d9:b4:c9:09:e8:c9:9d:25:0a:b4:
09:ae:62:da:3e:00:7b:6e:0b:c4:bb:39:43:7b:e3:23:a9:b4:
ce:59:91:68:dc:44:97:19:93:b2:74:2f:49:81:ad:0b:9e:be:
d2:41:b7:5c:e6:b7:d9:e5:32:d6:59:a4:c3:e6:8c:6e:12:46:
71:7c:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:18:33 2026 by rpki-client