Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: KXtHFDuDaHNsO6Y7LO5lJwPzrSePXqi1W5pMrcuUEbk=
Subject key identifier: 62:25:98:FA:26:8E:BC:CB:68:E1:CD:29:9F:9D:75:62:53:E1:39:EC
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01A178F1A1560F5BDA1DB4E2E639D0BFD215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 16:01:03 +0000
Manifest this update: Mon 26 Oct 2026 16:01:03 +0000
Manifest next update: Tue 27 Oct 2026 16:01:03 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: JKECOJJ1Iq+Fua65MTa2A8f4A3KM6NziK8DSjZZsYfQ=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:a1:56:0f:5b:da:1d:b4:e2:e6:39:d0:bf:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Oct 26 16:01:03 2026 GMT
Not After : Oct 27 16:01:03 2026 GMT
Subject: CN=622598fa268ebccb68e1cd299f9d756253e139ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:31:ab:1d:94:2d:26:b5:2d:2d:86:c4:88:
8a:db:f3:ab:91:1e:7f:ba:df:7e:bf:ac:3c:be:20:
8a:b6:16:fc:b2:82:e7:b5:8e:31:9f:6c:70:b6:23:
d4:18:e3:15:69:9f:48:2a:14:f9:12:e1:53:ff:e1:
0c:2b:5f:a9:de:2d:e6:f6:97:58:f0:4b:20:85:17:
1d:f7:95:fe:fd:f6:ca:0a:2c:94:5e:66:e7:3a:49:
5a:15:c3:78:f7:85:ef:61:99:fa:88:5f:17:57:0a:
c5:e1:c3:be:98:b3:f1:65:58:4d:d6:49:d8:1e:a6:
53:44:69:00:56:b9:b6:81:52:91:8a:e1:f2:91:73:
1b:f1:3d:fe:16:d7:a4:bd:51:d2:21:2a:41:64:f6:
0a:fb:df:95:52:c0:84:68:6f:78:0e:c0:be:f3:30:
80:32:74:b3:16:0f:e5:75:79:7e:50:15:17:98:72:
95:fd:2b:0f:c3:88:11:c6:0c:db:ce:ae:dd:63:86:
b6:01:05:ae:2d:13:87:a1:e5:d8:f1:b1:b4:4b:55:
2a:58:e2:4a:a8:22:15:da:95:1c:2d:15:f3:8d:45:
5c:f4:95:7d:64:d2:96:2e:e5:c3:2d:88:d4:81:43:
e3:2e:43:cf:81:ce:a8:05:eb:12:06:4e:ac:25:5b:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:98:FA:26:8E:BC:CB:68:E1:CD:29:9F:9D:75:62:53:E1:39:EC
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:31:a3:cb:9b:8c:6f:6e:21:bd:6a:24:4d:9b:c4:07:b9:
22:49:34:d4:70:16:f6:3b:46:ff:2b:84:c2:87:94:1c:ab:ac:
1f:19:c5:da:c3:10:4a:59:6b:f1:52:5d:ad:e4:5d:c2:8b:1d:
5f:d6:30:71:d8:95:32:96:4f:85:4a:c8:02:1c:c5:5b:4f:98:
90:58:fc:54:79:7f:ce:48:c7:90:00:fa:94:4b:72:fa:7d:8b:
70:ef:73:db:90:5f:a8:89:e9:a0:e9:20:af:d4:05:e6:bc:80:
59:de:36:e7:48:b9:00:53:78:27:88:57:8c:6b:8d:5c:e3:e1:
a4:a5:8c:02:79:07:a9:89:59:a3:ee:1f:91:ac:2d:45:87:d0:
53:36:c0:d2:49:38:b8:39:92:70:bf:38:bb:4e:fc:46:7b:68:
97:a8:47:27:40:fb:3d:d8:8c:07:a5:e9:4a:04:de:b6:5d:d0:
07:94:35:a0:f6:6b:1e:38:ae:68:95:ee:b0:a9:62:af:ca:fb:
d8:af:3f:46:09:68:e8:38:bc:ca:15:e7:7e:f8:6a:08:4f:6a:
62:43:ed:f9:2e:36:f6:79:68:17:bf:94:29:ff:b3:79:68:4d:
c9:4a:bc:05:46:f9:92:3c:5c:f2:63:a1:f4:8d:54:c9:eb:80:
f6:55:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:24:22 2026 by rpki-client