Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: TldI3XdCWVHrrFpG6PwrNjRZz9T8SqH3baogFykk4vU=
Subject key identifier: 0F:92:24:28:65:76:A3:90:6A:ED:E7:5A:50:94:A5:9B:A9:2E:F6:90
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 01A0F1F995FF12E4E0705B36A7CEC1CE4FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0856
Signing time: Wed 30 Sep 2026 11:01:00 +0000
Manifest this update: Wed 30 Sep 2026 11:01:00 +0000
Manifest next update: Thu 01 Oct 2026 11:01:00 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: 8G20Rk2JAdZmrsk9i2/QJNgXR8edGnCD1u7GFXRFFtI=)
2: kt6ISYmYzdT_sD7cn5nH6bulSe4.roa (hash: 6LvWtYhhWQnpqxU2WlqAAGv11j/zEYewR/NkDp4dAe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f9:95:ff:12:e4:e0:70:5b:36:a7:ce:c1:ce:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Sep 30 11:01:00 2026 GMT
Not After : Oct 1 11:01:00 2026 GMT
Subject: CN=0f9224286576a3906aede75a5094a59ba92ef690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:d6:00:9e:c7:73:da:58:1a:80:07:82:47:
02:e1:5c:7b:17:ab:7b:0e:fc:6d:5c:e2:26:bd:ce:
75:c1:5a:7b:4c:30:36:a4:40:fa:53:76:bb:e3:40:
3f:0e:90:ae:2f:80:9d:c5:a7:51:51:22:f7:48:54:
06:f0:12:75:9e:9c:7d:fb:a0:9f:0b:81:12:46:45:
76:58:85:9b:3d:47:2f:75:a3:98:ae:42:f2:d9:a7:
25:c7:2d:73:68:34:a8:82:eb:e0:85:4e:46:be:09:
3d:89:fe:3d:02:45:c3:58:04:f7:44:87:54:86:f2:
3d:bb:26:20:8b:97:51:aa:1a:26:e1:97:b1:7e:d9:
b9:d6:bd:e6:11:41:46:ad:ff:f3:3b:d4:92:c9:66:
74:9e:e9:cf:1f:38:82:f4:25:92:c8:fa:29:b0:01:
8c:30:e5:16:22:dc:d5:d6:e7:f7:15:fe:d6:77:f0:
e0:5b:fa:5f:90:16:77:89:a2:c4:c2:30:89:95:57:
97:26:fa:1c:15:22:8c:ff:fc:4e:a9:5f:29:45:d5:
d3:4b:f6:31:cc:e4:7b:cc:c9:f4:07:96:cf:b4:4f:
21:de:1b:bd:e6:b3:80:4b:77:05:77:13:80:00:24:
00:62:02:7c:51:bc:5c:ff:6d:1d:ad:f6:17:5c:27:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:92:24:28:65:76:A3:90:6A:ED:E7:5A:50:94:A5:9B:A9:2E:F6:90
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:cd:1c:d6:d2:17:bf:10:39:7d:8e:cb:8a:d6:a8:c3:74:
9a:ec:65:9b:b4:83:f6:1e:a7:06:0e:c0:b0:4a:73:3e:6b:3f:
6b:fe:63:3e:68:6a:51:25:23:ff:51:56:46:9c:ba:6e:3c:44:
bd:10:53:3d:d5:62:5b:bc:76:b0:d7:a0:fc:08:b8:8e:28:fe:
a7:98:20:40:99:1f:a7:b9:88:5d:d7:77:a9:35:58:af:c5:dc:
3e:f9:c5:df:8e:45:51:87:3a:4f:97:a0:bf:60:3b:42:b9:23:
58:b5:df:6b:e4:b8:17:00:b2:25:94:e9:41:0d:7f:5e:31:85:
d2:7e:c3:ed:ee:51:0a:d3:cf:ec:2d:b5:b1:3b:6d:97:92:fc:
9e:be:1c:b9:32:a9:f4:5c:5b:96:04:8d:c8:0e:d7:29:66:65:
29:86:e0:57:6e:13:13:fd:96:6e:d8:77:5e:64:87:78:fb:99:
6b:4e:4f:91:54:20:89:75:8c:7b:e9:dd:e5:8a:02:ae:b4:e9:
00:b8:6c:7f:85:a7:7d:21:89:ce:ae:43:fe:4b:56:6d:25:41:
d0:ac:c4:9d:9d:c4:0d:4c:1c:72:fe:57:45:6c:01:06:c2:03:
66:ee:4f:95:8e:cb:db:cc:b3:f4:28:07:3f:97:9e:54:67:26:
3a:fc:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:55:06 2026 by rpki-client