Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: 536MtzrXo4Y17hAlPqjp5D9IGyo9Pa2nM90+UlQVMvo=
Subject key identifier: 6A:CD:84:16:36:0B:70:55:07:54:D6:22:62:F7:F2:C7:6B:A5:30:B3
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01A13A49BE4C8EE5635C172ECF776E984A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 12:01:13 +0000
Manifest this update: Wed 14 Oct 2026 12:01:13 +0000
Manifest next update: Thu 15 Oct 2026 12:01:13 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: mB7GCnOrSIDBwM98WpGAgA+9fnzAl5oxgCRgqypus8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:49:be:4c:8e:e5:63:5c:17:2e:cf:77:6e:98:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Oct 14 12:01:13 2026 GMT
Not After : Oct 15 12:01:13 2026 GMT
Subject: CN=6acd8416360b70550754d62262f7f2c76ba530b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:20:8a:0c:85:e9:1e:e1:77:26:c2:9a:ea:f4:
7f:88:9c:90:ac:ab:af:a9:83:39:d8:79:07:0f:7c:
c2:ce:34:58:c8:2c:76:0e:cf:08:ac:d5:29:8d:5d:
a7:28:4c:2c:3e:46:6b:51:a6:80:8f:cc:53:c3:68:
2b:c6:63:f3:f0:00:11:eb:bd:83:ab:14:d8:2c:5e:
ae:a1:18:82:29:8c:cf:b9:89:c2:59:7f:ba:7c:5d:
14:54:34:ad:f6:57:31:3c:cf:37:73:63:13:52:dc:
93:48:1f:63:4c:9e:0d:6c:10:2c:ed:ff:77:dc:a2:
b7:e7:81:1c:2b:ab:75:32:88:7a:35:fe:4d:4b:5b:
32:9a:f3:0d:69:2a:f0:3d:0c:e6:3d:3a:32:c5:25:
b4:c8:38:f9:80:2b:3b:3e:bf:f0:53:f4:c2:68:49:
32:8b:9f:2f:8e:13:19:39:06:e3:61:40:a7:d9:29:
63:7b:9b:c4:ca:e1:b1:bc:9a:6b:66:ff:1f:47:fb:
8b:5b:7e:e1:13:42:58:a7:80:81:0b:9d:fc:e6:ff:
57:19:d5:7f:06:1e:48:5f:9d:20:70:e7:81:63:7f:
0d:0d:41:13:fd:a9:63:e9:02:37:65:b4:b1:f0:95:
da:83:2f:4f:27:b7:cb:e3:f8:5e:10:29:8c:57:c8:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:84:16:36:0B:70:55:07:54:D6:22:62:F7:F2:C7:6B:A5:30:B3
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d5:49:f2:2a:b0:1e:03:08:8f:91:ba:9f:53:ca:c1:2c:56:
49:ea:b7:78:18:59:35:b2:cf:a3:78:a2:1b:56:37:83:b3:99:
28:ee:52:2b:43:48:1e:f8:23:89:8f:f9:3f:36:0b:8c:ee:f3:
8c:e6:85:c2:87:4d:5e:43:9b:9a:18:6e:53:e6:c0:61:c1:9e:
48:68:07:56:0b:23:5f:4b:d7:b1:13:f6:12:07:81:99:ea:04:
98:aa:01:97:55:c6:42:bf:d0:cb:52:f6:96:e1:85:73:95:d4:
c8:42:3a:1b:71:7c:40:7f:25:3e:67:7f:d1:28:74:ff:7d:fb:
f7:56:76:cc:6d:c7:56:fe:ab:ad:f9:ca:d9:a6:2f:95:7e:8c:
6f:e1:26:57:8a:3c:6d:72:64:0e:a8:f4:43:4d:61:07:fa:aa:
bd:f2:90:a9:61:6d:19:30:8c:d5:a4:b6:10:03:12:45:86:f0:
78:73:9c:d6:8e:2e:9c:d0:61:29:4f:ec:4e:cb:a8:01:08:0e:
e9:3a:bc:7a:6a:1f:bc:00:97:b3:33:d8:3d:21:0b:8e:7c:92:
72:8e:d9:f0:3d:d1:b3:d7:fd:d5:cc:d8:0d:b6:d1:4e:1d:15:
d5:f2:b8:c5:e8:d1:67:d0:fb:a3:a7:4d:3b:e5:de:b2:4a:d1:
f8:f4:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:03:19 2026 by rpki-client