Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: byb7Y6SouymBRM5J/ryKa2VeoZtdFoIQu4hzqrFpQ+I=
Subject key identifier: 40:8B:09:D5:F5:42:04:68:63:8C:0B:79:C8:2C:35:8F:AD:C2:02:22
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 01A0DC1689591E1874245EF1BC50C28EE5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 091A
Signing time: Sat 26 Sep 2026 05:00:59 +0000
Manifest this update: Sat 26 Sep 2026 05:00:59 +0000
Manifest next update: Sun 27 Sep 2026 05:00:59 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: Dt5uvKnAwZbH9d3lcMEVb9yRFfcbBHIt8kZDzMD1pPk=)
2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:89:59:1e:18:74:24:5e:f1:bc:50:c2:8e:e5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Sep 26 05:00:59 2026 GMT
Not After : Sep 27 05:00:59 2026 GMT
Subject: CN=408b09d5f5420468638c0b79c82c358fadc20222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:a3:58:5d:1a:da:75:c6:5d:c4:35:55:36:
33:24:86:b6:9c:af:60:d0:62:49:2e:77:8c:9d:fb:
8d:bc:a7:21:fb:cf:92:5d:a1:8e:52:1c:0f:ce:95:
61:5f:9b:0c:c2:0f:dd:17:03:00:77:48:3b:bb:18:
49:ae:29:96:ce:ca:b4:a8:43:50:f3:1f:f6:fc:b3:
c0:85:66:28:c0:6f:9d:16:08:dc:5c:1c:28:9e:b0:
a6:54:75:82:1e:f5:da:6e:57:05:77:33:03:83:ae:
39:65:35:db:94:22:ee:71:43:d3:f5:9e:13:c8:de:
56:6c:38:ff:bd:37:26:50:60:9f:fd:8d:bc:39:b4:
97:c4:ed:1b:ee:e3:18:15:98:7f:fe:ae:69:d3:a1:
dd:9f:3b:11:05:39:f4:15:fb:88:1c:9e:59:9e:66:
05:90:60:07:34:38:62:b4:ab:d7:b5:ea:84:d8:70:
f3:e0:14:5c:46:47:9f:28:e2:7c:61:8a:b6:94:00:
47:e0:be:83:0b:c1:3c:ce:0e:4e:6b:76:9f:f8:8b:
89:5c:fd:41:55:48:3b:a7:56:10:17:5d:6f:af:9d:
47:93:01:00:5d:36:bd:cc:be:92:7d:11:67:d8:5a:
a1:b2:e7:b5:4a:2c:ae:ad:d3:7f:96:ca:69:4e:85:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:09:D5:F5:42:04:68:63:8C:0B:79:C8:2C:35:8F:AD:C2:02:22
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e4:22:a5:4c:7c:41:0e:0e:e5:4f:eb:71:13:aa:ab:83:5e:
9b:8c:fb:b0:d6:cb:32:f6:99:89:0f:27:12:ad:3c:a7:12:ca:
cb:e6:aa:47:d3:2a:04:e5:7b:74:47:00:77:25:a0:29:52:9c:
23:b0:fb:3b:4d:f2:86:f6:0d:95:72:d8:05:94:92:aa:8a:15:
0d:d4:25:ca:b5:c3:50:fd:a8:30:9b:a9:ac:42:06:fb:8d:79:
e8:9a:e3:d2:5b:b5:6b:c8:7d:a6:1a:db:d3:79:05:3f:fb:0f:
17:fe:13:41:42:cb:5c:a1:f3:27:03:30:a4:a1:b4:4e:e7:75:
9b:76:d9:39:a9:45:74:5a:dc:42:8f:39:13:e5:e4:1b:c5:9e:
f7:ea:64:50:34:91:74:aa:24:51:5c:92:ab:e7:37:10:f7:91:
fd:a6:d0:d8:9d:1f:03:09:54:be:d6:ce:6e:71:c5:bd:07:ae:
a8:50:54:8c:b9:e4:b6:de:5f:c7:bc:d0:a1:7d:c7:6c:60:8c:
45:69:dd:20:9c:73:b8:63:d0:3d:62:d2:f9:97:81:6b:d4:52:
f9:54:f7:6d:bb:50:ab:12:1c:0a:5a:90:8f:9f:17:87:a6:e6:
83:3c:2c:df:38:26:5f:c1:ea:99:6b:d1:52:9a:7e:5e:8e:42:
34:8b:53:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:31 2026 by rpki-client