Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: 1kSSLpfozyuFvWdrCqW6PxttJs05jhfhQoGr4/nupsA=
Subject key identifier: FA:E6:7E:DD:44:AA:AB:05:57:58:77:C3:A7:E1:E6:EC:0D:6C:FB:53
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 01A1DDCC64B5517555A0B9B6BD5754F8282E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 06:02:02 +0000
Manifest this update: Sun 15 Nov 2026 06:02:02 +0000
Manifest next update: Mon 16 Nov 2026 06:02:02 +0000
Files and hashes: 1: IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa (hash: 1AFyldkPiOPqEw+6SWUdNjowNkvDINTfUcjnk283dIQ=)
2: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: KGMBywdz37r+i4fXaucQmJwSikxE4bCXMHWFGFmVPQo=)
3: LA_XeJ2XL6uqqIjDC-DrFSY7Rts.roa (hash: 9TX7Fzg1+Qnk+2k2ngL2zOqaTn3qXWn6P9IDGR9xUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:64:b5:51:75:55:a0:b9:b6:bd:57:54:f8:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Nov 15 06:02:02 2026 GMT
Not After : Nov 16 06:02:02 2026 GMT
Subject: CN=fae67edd44aaab05575877c3a7e1e6ec0d6cfb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:de:ba:82:26:7c:f5:6b:fe:c3:ef:31:aa:
4f:60:ac:6b:dd:29:8c:14:86:f1:da:4c:69:96:1e:
aa:54:88:d8:b2:a9:bb:02:d8:c1:b9:ac:e8:c0:1a:
3e:46:12:9b:5e:44:1e:05:56:9c:4d:b5:4e:d9:14:
e8:10:74:be:cd:20:50:b8:a3:bc:14:7d:26:d2:3e:
a4:60:da:e7:02:fc:01:a6:0e:bb:d1:73:f0:f0:9e:
f5:cd:ad:0c:e7:43:25:e7:7d:2d:6f:4e:eb:91:59:
8e:f2:7a:57:11:db:69:55:18:77:34:7c:92:01:84:
eb:dd:ad:5a:7b:b1:7a:21:85:60:6d:a6:15:a4:80:
d2:ec:4e:75:bc:98:3f:43:95:ad:7d:f0:7f:c5:96:
31:ff:e0:da:fa:a5:c4:29:0e:bb:93:a1:ba:cf:4c:
12:9b:08:84:09:9f:1b:46:3c:cd:b2:3a:5d:c2:2a:
38:da:4b:63:10:3b:ab:6f:9c:9f:b9:23:0f:df:58:
67:44:6c:80:7f:2c:b1:f1:a0:0f:de:0b:48:f9:b7:
75:bf:b7:86:e6:21:3f:9d:b1:b5:e8:dd:ad:9d:3f:
69:aa:cc:01:f6:1d:67:f0:c5:66:46:4c:dd:30:32:
63:70:9e:25:c5:9e:d0:2b:30:89:98:54:a1:34:21:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:7E:DD:44:AA:AB:05:57:58:77:C3:A7:E1:E6:EC:0D:6C:FB:53
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:79:cf:e6:c1:ba:ac:07:25:5e:56:b5:f5:10:04:f6:ff:5c:
50:d3:18:fd:c3:02:bd:dc:55:cd:e9:f4:31:03:e0:3d:33:b0:
c1:93:b4:c3:de:82:a7:5a:fd:d8:4d:74:83:7a:1b:de:cd:ba:
97:88:fd:f3:1d:13:b0:e1:24:4a:6c:bc:6b:f6:e3:e0:a3:1b:
b3:cc:c4:7f:6a:c4:e7:d4:56:65:15:3e:8e:95:9f:8d:ee:41:
49:bd:3e:bc:a6:a4:8f:9f:de:d4:04:a2:6b:51:dc:d0:33:00:
cb:79:3d:be:39:a8:b1:0e:1b:cf:23:ea:ab:be:ba:5f:8f:7f:
22:be:81:07:38:ac:63:f9:18:95:74:8c:dd:c2:f4:75:2e:6a:
3e:51:40:69:a2:30:09:5b:2d:fb:9d:ab:8f:73:ff:8b:2c:01:
08:d5:08:18:d1:40:f9:2f:4c:8e:2b:50:71:d1:6c:4e:f8:c1:
7d:72:d3:39:50:20:f2:55:71:f6:23:8c:39:44:4c:23:60:06:
8f:d1:d7:d0:3a:9d:48:ca:51:5c:4f:0a:21:a9:a6:b0:53:f4:
bb:dd:ba:8c:b0:af:c7:5d:80:73:7d:a5:de:87:66:b6:d0:ee:
fb:7c:13:89:5e:1b:1e:2a:0d:91:a9:5b:19:40:49:41:a7:96:
b6:43:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:28 2026 by rpki-client