Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: dZIUtp48DwCMyeg3BR7s0XMrdPv8ELjhjWA/C2TEuhI=
Subject key identifier: 81:41:EB:D4:EE:CC:B9:02:4F:B3:C0:B1:7C:78:97:E2:E9:D2:25:7E
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A1AA4D0EF7B7C488602FE256D5210ED5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: 0156
Signing time: Thu 05 Nov 2026 06:02:19 +0000
Manifest this update: Thu 05 Nov 2026 06:02:19 +0000
Manifest next update: Fri 06 Nov 2026 06:02:19 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: 3I8FuIJv9itmpXO4j4Hz4T+fb1IKcM4k8mj98Et7L58=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4d:0e:f7:b7:c4:88:60:2f:e2:56:d5:21:0e:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Nov 5 06:02:19 2026 GMT
Not After : Nov 6 06:02:19 2026 GMT
Subject: CN=8141ebd4eeccb9024fb3c0b17c7897e2e9d2257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:e3:d6:74:56:74:f4:e7:7b:71:3d:fd:35:
87:b6:21:59:d2:88:6c:55:28:b3:7f:c1:45:e1:35:
99:a2:66:2b:f1:7e:91:27:b9:0e:6f:d5:a7:95:d0:
28:98:78:78:44:0b:9a:4c:84:79:d0:c3:20:3a:39:
c4:a0:19:2c:50:4d:44:66:63:4a:59:85:b2:e4:41:
61:ed:09:6e:32:51:63:4d:39:f9:45:5e:40:32:86:
51:5f:4a:0c:1c:f3:32:47:f3:31:15:88:cb:c1:2d:
f3:3b:e9:91:c6:e6:23:cc:c3:29:f7:d9:e6:2b:c2:
dc:86:45:4b:e9:12:93:e9:69:cf:1b:23:84:be:fe:
5b:f3:0a:a3:05:26:20:1f:dd:5b:5a:e7:c2:c8:70:
a0:7a:2a:d4:fe:c8:8b:5f:25:fb:b8:91:ae:45:71:
b4:69:7e:11:22:ef:c1:c4:42:65:96:1d:91:73:f0:
e2:8d:bf:ac:1c:1e:f3:4d:76:9f:6a:58:b5:d8:1b:
06:af:41:9e:ca:8e:ce:ac:56:2a:f7:ab:af:de:fd:
8d:85:2e:91:7e:a0:0f:aa:d2:09:3b:5c:58:a9:48:
d2:e4:cc:fc:60:6d:77:23:a7:ba:50:0b:bc:68:02:
3d:a3:4a:ca:f9:eb:2d:a7:18:5b:6f:31:88:d8:41:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:EB:D4:EE:CC:B9:02:4F:B3:C0:B1:7C:78:97:E2:E9:D2:25:7E
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:f5:a4:ca:eb:a6:d5:b0:97:8f:cf:00:0b:fb:a2:e0:07:
f1:6c:5c:59:5d:ba:f9:8b:d2:f2:c3:a0:57:9a:6c:9a:7d:c4:
82:75:95:64:11:31:5c:ac:78:95:6f:ba:35:e0:4a:62:ce:3c:
f0:0a:20:f4:ba:cd:79:8a:aa:39:49:a6:1f:94:79:19:d2:cf:
3b:8a:5a:35:3b:d5:87:49:eb:df:d6:7f:9d:22:e4:6e:fa:13:
13:f4:2c:89:b1:c2:93:83:f8:24:81:0b:f9:a9:f3:d0:4a:38:
43:51:ef:ea:a2:58:80:d5:fa:59:64:25:eb:55:90:5b:4f:cd:
2f:46:c7:5e:2b:65:a5:b0:aa:a1:01:04:3f:00:e9:a2:4a:d0:
5a:5d:5a:7b:01:b6:20:e6:6e:c5:df:f6:47:fd:95:55:10:82:
41:21:1d:ba:12:c2:a0:e9:00:12:d2:b9:8a:49:ba:8a:47:8b:
0f:e4:c3:8f:09:07:d3:c5:c4:06:0b:85:f2:aa:29:f6:86:dd:
b4:1e:1a:7f:87:fe:7a:1c:c3:55:8d:c3:30:28:44:42:66:5c:
96:1f:6a:07:c1:2b:1e:75:40:d7:e4:83:2e:e9:be:6d:ba:44:
cd:ae:27:8f:8c:9e:07:18:85:74:35:e0:7d:63:c7:64:b2:1c:
58:00:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:43:32 2026 by rpki-client