Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: 1y4bxlTw8j1C7YijYt3NTc4oy1lfDNDNQ8cudaPm8eA=
Subject key identifier: D9:90:C7:ED:CB:DB:21:80:3D:9D:83:9E:2F:09:CB:81:4C:10:32:F0
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 01A0CE9195EDCCC2E86402EE91D73479F587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 1250
Signing time: Wed 23 Sep 2026 14:00:42 +0000
Manifest this update: Wed 23 Sep 2026 14:00:42 +0000
Manifest next update: Thu 24 Sep 2026 14:00:42 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: ndp8l/as9wpROIrSyg4Dzlp11FbNQJ6/AvWthiYTGiA=)
2: egsIufM9DiHj_9SSdU6nff71R8Y.roa (hash: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ=)
3: wSDNzntcWhNUBixkb6aX20BeB6s.roa (hash: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:95:ed:cc:c2:e8:64:02:ee:91:d7:34:79:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Sep 23 14:00:42 2026 GMT
Not After : Sep 24 14:00:42 2026 GMT
Subject: CN=d990c7edcbdb21803d9d839e2f09cb814c1032f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:bc:fd:53:fe:e7:8d:92:9b:3f:95:32:e1:
42:4b:d1:07:90:b3:71:f1:dc:e1:29:aa:c0:24:89:
f0:0b:89:0a:51:0d:79:47:04:8b:d5:66:03:c0:9e:
40:c2:92:69:24:e2:92:df:0e:55:8f:dd:d9:1b:10:
2a:cf:e6:d8:b3:3d:13:f1:39:ff:47:c2:86:2b:bf:
0d:a2:8b:85:4e:ed:d5:6d:93:ea:20:8e:83:3b:03:
dd:97:8a:c9:6f:04:40:74:05:e0:9d:7e:8a:59:5d:
ba:86:6b:48:00:0f:ad:b2:0f:df:cd:aa:83:6e:df:
82:98:30:0e:7e:e4:9d:2b:be:9d:72:1a:62:a8:c4:
86:20:e5:f0:4e:d0:74:48:cf:0e:6f:74:92:d8:18:
27:03:62:5c:c5:29:58:78:bd:0f:d2:43:9b:10:3b:
5c:85:5b:73:ad:db:28:e6:92:e4:8e:6b:c4:80:ab:
18:3f:66:12:45:e3:b9:7b:f3:34:3b:55:da:49:6a:
ab:51:ce:4f:f4:4a:0b:cd:a5:0b:4e:81:6e:e7:cb:
1f:bc:82:0e:76:e6:77:b4:7d:b4:9f:b0:26:64:cf:
b7:9b:cc:e2:b5:91:bf:c3:bd:fb:f5:90:fa:63:1c:
57:37:6e:a3:82:8f:0d:74:68:42:7b:22:8e:82:0b:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:C7:ED:CB:DB:21:80:3D:9D:83:9E:2F:09:CB:81:4C:10:32:F0
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:52:57:1f:d3:64:8c:d3:84:4e:89:e8:fa:58:3b:9f:db:ec:
e0:80:2d:54:f6:e7:94:bb:2d:e7:9d:70:45:c4:21:98:39:71:
30:20:56:43:85:51:3f:39:e4:a9:e2:a3:92:07:b0:05:13:a9:
17:aa:5f:58:d8:4b:c7:1d:34:8e:25:55:75:e8:44:b9:1c:99:
30:97:c2:9c:0c:a0:0f:3c:40:b4:1a:1d:0e:e6:d4:60:3d:f8:
e2:9a:d0:bd:9c:58:6c:82:85:f2:48:60:a6:35:34:ce:26:20:
02:51:ee:9f:46:63:dc:65:c8:95:01:a1:36:3e:61:a1:ca:7f:
35:d0:d8:21:0c:db:b6:54:e1:39:d6:ac:40:a3:ca:85:6b:e1:
85:27:9d:88:db:bd:65:a7:04:6a:f8:41:2e:34:1f:29:26:a7:
1d:5d:38:72:ae:ce:c2:26:f6:3f:bc:e4:1d:ea:9e:c3:bd:f4:
32:cf:ef:c9:4e:36:a2:3b:69:28:2a:cd:56:fa:f6:1e:f8:16:
0e:f5:65:85:b5:3c:e6:d9:26:a9:d3:64:75:72:6b:34:72:b4:
d6:87:fa:54:a3:e2:2f:fe:aa:3b:a1:57:e2:17:c1:0c:66:03:
54:84:bb:43:78:f5:98:a7:8f:29:de:b7:6b:3c:b7:7b:3f:15:
76:66:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:25 2026 by rpki-client