Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: AJHXDlm283rjhyDBePUpaZcHaF4lDJ790knNgbWd+k0=
Subject key identifier: 7F:64:1F:AE:51:05:7A:0E:AC:B7:E4:A5:24:0A:6A:1B:8A:2D:9C:55
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 01A0E0987E4A5E7F5AB487E9DF5A55DB288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: 01C0
Signing time: Sun 27 Sep 2026 02:01:25 +0000
Manifest this update: Sun 27 Sep 2026 02:01:25 +0000
Manifest next update: Mon 28 Sep 2026 02:01:25 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: E73sk+YAtj57TrSr0GtTC7IbJfeckMPhjwsShz22l94=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:7e:4a:5e:7f:5a:b4:87:e9:df:5a:55:db:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: Sep 27 02:01:25 2026 GMT
Not After : Sep 28 02:01:25 2026 GMT
Subject: CN=7f641fae51057a0eacb7e4a5240a6a1b8a2d9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:6a:52:82:24:7c:bf:be:1b:0c:c8:5d:33:
fc:f3:db:48:11:20:c6:82:e6:04:fc:17:06:b3:98:
77:6a:44:0c:7e:11:76:bf:1a:f6:03:fd:ab:d4:48:
96:f9:82:07:60:cc:6e:21:dc:34:d0:9c:e0:cb:1a:
61:c3:55:a6:e1:25:63:5a:ac:85:89:b8:0c:00:62:
58:06:3d:0f:a7:99:57:c9:cb:a6:96:10:4a:a9:91:
59:cc:12:55:38:23:48:04:db:62:89:40:ab:e1:5f:
ab:89:66:5d:02:d9:6d:12:e1:93:07:ca:5c:1a:50:
47:d1:3f:23:b1:65:a5:cb:74:a1:d4:81:d1:06:7a:
f5:21:07:e0:18:c0:0a:f7:8c:ad:ed:d3:34:7e:16:
10:55:be:9e:0c:c7:98:de:05:16:04:7a:02:99:af:
f6:9d:6b:9a:dc:0b:5e:a5:03:9d:f7:23:17:ee:67:
8d:fa:54:90:db:96:c1:6d:d8:20:df:26:cf:cb:58:
8d:87:18:18:12:b0:c7:69:e1:5b:1d:b8:7c:5d:0b:
c1:d6:2a:44:f1:d7:24:6c:d4:b9:3c:a8:7e:c3:a2:
a1:d3:49:a6:fa:1f:cc:f5:a7:ac:e4:4f:ca:96:e6:
df:e8:ab:21:48:64:aa:a9:81:32:6f:c2:9d:75:7f:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:64:1F:AE:51:05:7A:0E:AC:B7:E4:A5:24:0A:6A:1B:8A:2D:9C:55
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:35:d5:1d:0e:4a:b1:de:3a:c3:70:46:46:09:82:fb:52:9b:
24:9f:d9:ac:6e:32:57:14:30:2f:6f:3e:e4:ab:c8:dc:14:58:
50:bc:e5:a6:29:62:91:ac:b6:c5:cc:53:da:6d:12:27:31:48:
aa:f0:37:35:65:95:9e:e5:3c:25:7b:fb:a5:59:07:68:16:19:
00:47:a8:92:c0:c8:c9:06:b2:5c:e1:33:77:c5:62:59:40:5c:
58:a8:00:ab:e3:a1:8b:c0:01:fb:9a:92:d8:ab:1d:ee:59:85:
d7:66:e3:4b:ff:bf:35:b1:0a:05:80:2d:af:a9:ab:5e:11:94:
d0:0f:6a:91:56:f7:ed:c6:4e:e5:be:2c:46:51:b0:b2:e2:b3:
3f:fc:55:ff:7f:ab:10:ea:17:d7:54:42:47:81:5d:1d:0d:2e:
8d:40:23:18:52:1a:f6:61:81:bd:bd:4f:94:56:ea:cc:c3:2e:
e2:dd:00:0b:b3:fb:bf:7c:6a:bf:e9:2c:98:12:46:d8:0d:4b:
65:1e:f5:8d:80:60:4e:b6:9c:37:24:06:cc:43:8b:84:36:74:
a8:eb:88:13:dc:37:9d:34:96:50:cc:ef:4b:3e:82:45:2d:5d:
69:e8:3f:bb:9c:5d:25:cd:ef:22:10:cb:67:2c:92:8a:fe:3f:
ef:f6:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:42 2026 by rpki-client