Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: xKZdf4CXDkxglt21e4lMjI3Ojld5VPaNdl33CHtPF+w=
Subject key identifier: 49:D1:4C:87:12:C3:47:E0:6A:3D:11:12:8E:AA:4D:EB:34:13:99:5D
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 01A0E9646D492D3352D8D441CEB748E7927A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 1553
Signing time: Mon 28 Sep 2026 19:01:07 +0000
Manifest this update: Mon 28 Sep 2026 19:01:07 +0000
Manifest next update: Tue 29 Sep 2026 19:01:07 +0000
Files and hashes: 1: 1-wqXuXVjU4DK7DThoDM4xKkLzpA.roa (hash: Ysd+kwqFCaatF0B+CxMd/0KKzo486Kn7yiW2Q4tdeXQ=)
2: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (hash: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=)
3: BAVWZ2GqddVuzhP06KD0A_bCtt4.roa (hash: eKvOsbHOl1mbbSCZG1SoTdZdmz2aVvIhgRs7YLzoCNw=)
4: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: Y4vHaebsDLr3jPMu8sYOk2eWds7cJwEkSAvLgE+BiII=)
5: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (hash: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:6d:49:2d:33:52:d8:d4:41:ce:b7:48:e7:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Sep 28 19:01:07 2026 GMT
Not After : Sep 29 19:01:07 2026 GMT
Subject: CN=49d14c8712c347e06a3d11128eaa4deb3413995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:9c:ba:f7:00:03:a8:19:89:1d:37:bb:36:
48:f7:8d:fe:46:e7:71:ff:47:55:85:83:27:6b:79:
7d:e0:ca:46:87:4d:82:35:40:c0:0e:5a:09:b8:6c:
4c:f6:61:b4:87:0e:92:29:1b:92:14:58:e8:92:77:
b3:21:cd:b0:59:a8:5b:3e:70:26:15:1e:55:94:90:
86:7d:73:03:85:92:93:84:17:21:9d:8c:52:c6:e4:
e7:24:d4:f1:49:49:67:15:0e:8d:45:7e:48:d8:0e:
9b:42:67:6a:1b:44:1e:7e:b6:75:f1:9f:59:6d:c8:
56:10:44:a5:39:62:14:ab:95:43:2d:64:4c:ed:2b:
ea:58:b9:ca:40:33:56:5c:bc:f7:b5:e3:78:a8:eb:
9e:55:c2:5e:31:be:34:8a:46:41:31:7e:53:b3:f1:
7e:a0:e3:de:0a:96:01:4f:25:20:3b:46:7a:e0:85:
54:c3:37:56:23:89:c2:ff:a5:47:db:71:7d:e6:35:
72:1d:22:68:15:10:e0:63:c0:2e:2a:25:3b:21:bc:
4a:3a:5d:88:09:f7:08:43:7c:0e:3a:f7:63:b0:a6:
55:7c:d5:cb:8e:ef:c9:d8:7c:b5:f2:3c:3f:0a:2e:
5a:8e:2c:5e:cf:24:36:61:03:46:ff:3b:68:c6:b0:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D1:4C:87:12:C3:47:E0:6A:3D:11:12:8E:AA:4D:EB:34:13:99:5D
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:8e:e7:ca:78:77:e8:cf:c4:f6:29:bc:da:1b:eb:dc:38:
0d:e9:20:11:b4:d6:92:50:0b:88:e9:0e:69:c8:5c:59:04:f6:
12:49:76:bb:00:81:63:0f:74:99:31:3e:ea:c9:66:10:0f:cc:
0e:02:35:47:30:d8:c9:76:05:eb:1b:7b:09:0e:e2:05:46:4e:
ab:85:f3:40:62:35:1d:04:fe:ff:f6:bf:90:b9:82:de:c5:17:
6d:3f:09:6e:f3:6f:df:33:4e:01:88:fc:83:f7:91:b6:13:99:
f5:49:7b:81:bb:d6:b3:9e:44:65:0b:13:73:d4:bc:19:0e:da:
b8:e2:c7:09:9d:cc:d7:92:ef:b8:44:bb:2b:1d:92:e3:6a:ac:
2a:79:dc:1d:c2:39:c2:b1:23:f2:10:38:f8:d6:3f:a9:72:ae:
3b:04:aa:30:30:c2:70:40:54:e2:69:60:aa:8f:06:d5:61:55:
f3:f5:b7:67:10:70:49:ac:4b:49:36:03:a9:8c:18:a3:63:0e:
f4:bf:89:fe:8e:cd:92:b4:da:06:69:65:2a:fd:13:ad:d3:fd:
93:11:0b:23:0d:c8:4d:69:12:fb:c4:34:33:e7:fe:af:3f:57:
d6:eb:ba:79:1d:bb:80:a7:62:e4:1d:2b:fb:91:bb:88:dd:46:
02:c7:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:33:42 2026 by rpki-client