Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: knQkjvYLqh5QRU/yavMBGsZVvyDrCbJe/GxCw5HZoJw=
Subject key identifier: 99:26:EB:80:B2:AE:CA:0F:29:92:8E:40:0F:1A:4F:7B:0E:02:05:69
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 01A0DD981324A258B39961543EBEF878A619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 12:02:05 +0000
Manifest this update: Sat 26 Sep 2026 12:02:05 +0000
Manifest next update: Sun 27 Sep 2026 12:02:05 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: 4/dTpeYJnmouFV4sWbfA5V9TD0mYiw7jXWAy9mDaLtg=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:13:24:a2:58:b3:99:61:54:3e:be:f8:78:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Sep 26 12:02:05 2026 GMT
Not After : Sep 27 12:02:05 2026 GMT
Subject: CN=9926eb80b2aeca0f29928e400f1a4f7b0e020569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:49:ca:e5:89:93:6a:56:b0:27:ef:2a:1a:
4a:1e:84:83:a2:ef:2c:ef:c7:51:d6:cb:5b:10:73:
6c:aa:72:48:9d:12:7e:1b:ba:6d:ee:76:b2:51:ff:
5c:ff:ba:3f:a7:bf:4e:f0:32:82:69:8c:95:f2:35:
2b:94:1b:6c:8f:7e:08:87:8b:c2:5d:8f:09:55:97:
0c:00:ee:a8:57:27:53:30:92:f0:79:13:55:71:23:
a7:ae:f4:15:f8:fb:af:7d:4b:f1:38:d8:af:b1:20:
54:d4:6e:dd:ae:2b:3e:8e:bc:93:27:3e:62:2a:f9:
33:13:c6:d1:c9:f9:03:44:b1:49:63:8d:a0:46:10:
b6:74:a6:97:41:0d:36:23:eb:be:2a:54:64:f6:bb:
a5:c7:51:99:49:2d:7c:25:22:fa:08:9e:34:cf:b7:
73:73:c6:7d:de:84:85:75:f2:07:58:53:b7:a4:99:
04:3d:52:aa:c0:1a:ea:04:2c:7e:48:46:ed:a3:4a:
91:b0:55:b8:f2:7a:f2:8a:4b:c7:bf:55:d5:12:68:
66:9d:9c:5a:54:94:94:c9:11:34:82:30:1e:b1:fe:
37:9e:b2:9f:79:cb:27:c6:a5:f4:e9:54:90:0a:9b:
ca:84:da:b8:a1:a6:71:63:94:bb:63:ff:be:fb:ed:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:EB:80:B2:AE:CA:0F:29:92:8E:40:0F:1A:4F:7B:0E:02:05:69
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6a:7e:e3:ff:d3:1a:38:87:03:a9:f2:33:f3:09:c4:d2:82:
98:c3:73:7a:4f:aa:ad:6a:5d:e9:4c:b1:6d:5f:d0:4a:3d:81:
cc:a8:99:b5:c9:41:fb:46:5f:2f:fc:f3:99:72:52:b1:82:2e:
0d:ed:d2:2d:4e:33:4f:b7:42:90:4f:d1:64:e9:37:b3:9d:20:
87:07:cd:69:7f:4e:40:9c:19:87:00:bc:57:27:de:c7:3e:ab:
e1:ce:a4:04:b4:f1:a5:77:6d:fc:37:40:cf:2f:18:68:b1:e4:
cc:d8:64:84:13:82:2b:b2:9d:aa:1a:67:67:a1:d1:52:4b:22:
9c:be:be:4f:9c:74:f7:80:8a:2f:46:3e:9c:9d:81:91:5a:ad:
fc:ee:bf:65:2d:8c:56:37:e1:0b:ab:19:5f:83:89:2e:76:31:
f3:9d:1a:47:9d:48:69:4a:33:d2:80:f5:29:96:fb:23:cc:4b:
6c:eb:cf:04:b6:8f:ad:a0:76:84:9e:2a:56:84:b9:98:74:67:
16:0b:88:7a:03:a3:c0:2d:18:78:e3:86:3b:4d:22:10:bf:48:
d4:a6:b5:da:16:23:42:20:88:36:00:09:fe:eb:c1:14:cc:39:
7c:aa:b7:06:b5:09:49:90:6f:89:e2:5f:4c:ce:81:34:bb:cf:
e4:f8:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:33 2026 by rpki-client