Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: rK4cvIrBo6NzmyTJYVFKlHJYTPX5qN5K5MlKMtnV800=
Subject key identifier: 03:AA:D1:B6:08:19:4F:F6:36:4A:1D:8B:74:A4:E0:8F:FC:5C:3C:8E
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 01A0D193266CE8E9E92944A0CE93CFC9108B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 19FD
Signing time: Thu 24 Sep 2026 04:01:16 +0000
Manifest this update: Thu 24 Sep 2026 04:01:16 +0000
Manifest next update: Fri 25 Sep 2026 04:01:16 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: TRtWCpbR5J9Km2/dKZjrJBuZK3fWDln5Mck/NyabH5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:26:6c:e8:e9:e9:29:44:a0:ce:93:cf:c9:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Sep 24 04:01:16 2026 GMT
Not After : Sep 25 04:01:16 2026 GMT
Subject: CN=03aad1b608194ff6364a1d8b74a4e08ffc5c3c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:80:d1:f8:2d:db:63:fa:27:f8:c5:9c:98:
a0:bf:7b:fd:32:67:58:c7:49:e3:98:b3:81:a9:92:
e2:53:01:09:f8:44:88:9e:c7:be:90:5e:5d:35:f5:
d0:6c:a5:02:97:9a:88:f7:39:36:8c:35:ff:a4:26:
62:47:0a:27:5b:50:fd:f8:06:69:07:af:9f:21:e9:
da:7c:ed:c8:f3:61:a6:30:6b:ea:30:c7:9c:0f:11:
4b:29:75:80:56:b8:35:f4:cb:01:8e:bd:37:36:29:
0c:e2:50:d9:4e:ab:7f:4f:2e:cd:63:9e:bc:f2:02:
c9:fc:81:21:b0:a7:11:f5:01:bf:1a:92:28:2b:f3:
63:85:ca:3e:6c:02:29:41:54:45:fe:8a:73:d6:d5:
ab:6d:27:ff:84:21:c1:15:76:1b:c2:8e:e1:82:b8:
6d:fa:b7:ca:95:79:1d:93:53:22:ae:ca:fc:cd:1f:
40:78:60:00:f4:74:fa:3e:a2:94:3b:00:7e:f8:cf:
2a:d2:4a:54:98:1d:a6:08:79:c9:4a:4a:3d:de:e3:
df:e0:19:86:7f:c0:fa:6c:3c:14:44:e9:94:6f:9a:
34:04:3d:c9:d2:73:cb:dd:30:6d:2c:7e:c9:e9:11:
51:03:33:75:6a:44:16:8c:89:5d:29:24:6a:74:c6:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:D1:B6:08:19:4F:F6:36:4A:1D:8B:74:A4:E0:8F:FC:5C:3C:8E
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:d4:96:76:85:3e:16:57:8d:98:0a:1d:c8:0b:83:56:44:
df:8d:29:b4:99:21:63:81:b9:e3:58:77:63:3c:be:4d:c8:81:
02:6a:bd:08:6f:c2:0e:12:bb:f6:1a:82:98:02:b9:81:0b:d8:
47:c4:01:23:05:1f:eb:9d:77:92:36:64:02:6b:22:6f:ca:f6:
a9:fb:7d:aa:78:3c:e2:c4:4b:7e:30:cc:ba:69:e7:df:2b:8d:
fd:cc:24:5b:0c:9f:b2:1d:85:68:e5:f3:24:be:1e:10:cb:20:
ab:f6:b7:2a:e7:51:29:2d:55:36:69:f5:33:4b:33:e3:6c:1d:
da:93:a9:6d:7c:5e:9f:64:52:41:85:6a:f0:be:c7:ba:22:6a:
5a:1f:ac:c5:bf:78:55:ea:e4:b7:b4:4b:38:16:f1:94:bd:bc:
91:14:f6:84:e3:b7:cf:f1:11:04:7f:fa:e7:21:c9:91:ff:c5:
f7:a0:c9:e9:41:ae:19:31:dd:aa:f3:28:41:73:29:8b:dd:af:
95:b2:7d:77:94:12:52:1e:96:09:ac:ea:35:dd:c8:85:57:69:
6d:e4:64:74:c1:c9:9e:78:17:ca:7b:23:47:cb:a0:82:f8:d9:
2e:a9:73:aa:02:8f:79:00:a9:24:82:5b:96:ce:a4:04:fd:2f:
03:06:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:01:15 2026 by rpki-client