Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 1g0DorIVoY8uNByd0B0EgGXJ+lupwNuvcW7YshpuqpU=
Subject key identifier: 4E:60:1C:2E:03:E5:7D:AC:1A:5C:99:AB:80:F2:D4:06:2A:45:50:BD
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01A0FF47FEC809875088B04D568F3C82F3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1A8B
Signing time: Sat 03 Oct 2026 01:01:43 +0000
Manifest this update: Sat 03 Oct 2026 01:01:43 +0000
Manifest next update: Sun 04 Oct 2026 01:01:43 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: 6kIT+qZcV6/gG2u6paTYZfhqI9m6OMyGOmwq1D9wDq4=)
4: iL7Gvu2zeDBUcLc-c_313Fq9KSM.roa (hash: a8LKeJ6D+clCx+yOU1jNHm1zr8sXhuQhH0AFiRBKDZg=)
5: smLWrNVdnQXtj7nGE7oSMC17OSY.roa (hash: 2gna9VdCLwGyL73TZbhQeXefvHaphCa0KxWv5nHt9zk=)
6: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
7: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
8: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
9: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:fe:c8:09:87:50:88:b0:4d:56:8f:3c:82:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Oct 3 01:01:43 2026 GMT
Not After : Oct 4 01:01:43 2026 GMT
Subject: CN=4e601c2e03e57dac1a5c99ab80f2d4062a4550bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:a5:bc:97:de:92:ca:c3:23:e6:09:b0:ab:
9b:d7:e7:83:37:f1:12:e5:70:40:c0:22:a9:5f:42:
04:d8:9a:37:8b:ee:8c:18:5a:53:d4:50:ae:b3:5c:
7c:58:1e:44:8a:90:59:05:94:09:fb:55:08:0a:aa:
d5:de:18:08:60:ac:42:fb:f0:27:5b:2a:f9:58:74:
ad:ed:80:68:da:f8:32:fb:63:8e:23:6e:6d:47:9f:
32:86:95:23:cb:32:e5:63:d0:0f:1a:0c:33:28:43:
f4:3d:15:26:65:41:4a:3e:1c:d4:ce:fa:c5:fc:62:
3f:e7:4c:02:cd:2a:59:52:f9:08:5f:ad:32:4f:ee:
5d:f5:e8:35:3b:be:63:2b:31:46:cc:77:97:0d:12:
9a:dd:2c:8c:74:1d:55:ef:e0:a2:19:e3:5a:e8:e1:
64:e8:e5:dc:f8:38:4e:85:d0:c7:1a:dc:a7:d7:26:
63:0e:c1:57:87:49:87:88:8e:92:ee:d9:15:60:26:
85:19:5b:58:ee:6a:8c:76:c5:a4:d1:e4:a4:60:0e:
94:d9:b1:c4:73:67:8d:36:6a:39:f5:e7:48:85:64:
f5:bd:ff:61:d2:d8:de:e1:c4:ff:31:d6:82:a7:6c:
79:e9:72:a6:0b:e1:a6:f1:58:32:00:2d:23:6d:93:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:1C:2E:03:E5:7D:AC:1A:5C:99:AB:80:F2:D4:06:2A:45:50:BD
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cc:64:29:a3:9e:04:2f:48:29:cc:50:ca:34:24:a5:76:7d:
dc:ce:c2:c1:f7:e2:dc:89:89:c7:61:78:2a:ea:b1:bb:55:74:
79:c4:b9:c1:a2:eb:ad:3a:66:4b:b2:c5:70:23:b5:06:ef:8f:
22:f6:9c:f3:76:50:c6:de:ce:90:40:75:b5:6c:18:5f:6c:a0:
e9:2b:82:70:e1:0c:4b:d7:02:be:7c:74:8e:c1:f9:02:86:e0:
a2:f4:5f:bd:23:d7:e3:96:17:f3:44:60:49:03:e7:01:7a:3d:
77:1d:98:fb:a3:d8:4e:04:44:92:a4:49:a9:60:9e:ee:48:fd:
52:19:27:5b:95:61:b9:d3:77:af:a2:f2:64:9a:23:1d:d2:58:
8e:a4:91:af:89:1d:04:97:08:b8:a9:a4:a9:d2:97:25:6f:ac:
d5:33:b5:23:e8:6c:3d:00:37:50:ca:93:a8:51:8b:bd:fd:f1:
3b:fa:d2:bc:08:1d:6b:51:2b:f9:94:78:29:ea:87:8f:1b:12:
7b:c8:a9:3b:5a:98:b9:32:41:a0:66:04:28:c1:12:dd:72:bf:
ca:03:71:77:47:65:c9:65:8a:ba:d7:33:42:f1:be:de:a7:71:
7c:9c:cd:16:b8:73:b6:14:8c:8a:83:ea:51:57:92:ab:28:c3:
47:59:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:31:57 2026 by rpki-client