Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: cVf28vZOXnjVBPyTza8hZ9MqFgpenxSbQK2U5GPw3R8=
Subject key identifier: 4D:43:A2:A6:9B:15:F2:37:6D:18:4B:6E:D2:4C:21:15:95:15:62:A0
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A0BCC2389A3624FA5C7D412F9BB5D0F0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:40 +0000
Manifest this update: Sun 20 Sep 2026 03:00:40 +0000
Manifest next update: Mon 21 Sep 2026 03:00:40 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: Mpnu9MAnltfZmAGfyW6f/jr7sCOqG3q/x9tsdpQFUVw=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:38:9a:36:24:fa:5c:7d:41:2f:9b:b5:d0:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Sep 20 03:00:40 2026 GMT
Not After : Sep 21 03:00:40 2026 GMT
Subject: CN=4d43a2a69b15f2376d184b6ed24c2115951562a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:50:69:77:4b:35:89:32:0b:74:9f:e2:be:
1f:8d:e6:96:9f:f3:71:8a:24:03:50:b4:a3:63:4a:
8c:ab:a4:f9:1c:37:e1:de:c9:15:ef:42:8f:e5:db:
03:15:e2:ed:aa:97:ee:88:89:16:07:70:f3:27:94:
75:65:6a:93:8e:dc:82:d8:0b:32:eb:99:91:05:db:
2a:f5:c1:31:fc:68:c3:9e:0d:07:ce:70:6f:1b:4f:
b3:88:1b:60:4b:74:68:70:a3:3b:7d:44:84:55:f9:
26:d7:b0:63:87:50:38:e2:22:6f:d2:54:cd:db:e3:
16:eb:85:34:cd:1e:3c:67:59:5e:fd:d1:8b:12:e4:
ee:d8:c6:4c:ba:e4:60:9b:6b:62:68:2b:db:51:17:
52:97:f0:5f:ce:d8:cb:bc:49:ae:8b:a8:05:2d:46:
7e:cb:79:0a:32:1a:93:76:50:c5:39:d3:3d:0c:0f:
d1:1a:d4:9b:f9:dd:79:ce:81:2e:be:97:1b:63:08:
c8:c8:29:51:e0:6b:88:2e:6a:85:e5:95:ea:6f:ee:
91:86:df:b5:6a:75:4e:69:de:f9:07:a1:1a:8b:d9:
a8:95:d2:ec:7f:ee:b7:bf:a6:0f:bb:11:23:20:31:
86:74:95:61:dd:13:1b:d8:41:34:ce:38:2d:19:b6:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:A2:A6:9B:15:F2:37:6D:18:4B:6E:D2:4C:21:15:95:15:62:A0
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:87:1d:9d:01:0f:89:d4:35:5c:5f:e0:95:54:49:52:b8:cb:
63:99:5e:9d:4e:02:ff:ad:4c:79:57:0f:6e:b1:14:0d:68:51:
fd:c6:cf:06:3d:34:c3:9a:ba:47:c1:a8:72:8a:47:1f:fd:85:
8d:15:df:52:1b:e3:af:d6:20:94:e9:24:c1:f4:61:34:31:ba:
a2:55:3e:1d:df:13:d8:de:2d:46:09:8b:34:fc:9a:af:51:c7:
6d:16:09:e5:b6:95:ec:09:15:b0:62:60:ec:06:a1:c7:ec:5c:
fc:e4:c3:f4:2b:e4:40:e0:1e:49:7c:ac:23:f3:cb:82:fc:f7:
82:69:49:c7:4f:36:d2:3e:ab:e7:d7:33:84:24:1f:eb:3a:de:
f9:df:6f:d5:30:aa:ac:f6:19:37:20:c5:1b:aa:25:48:8b:b3:
0a:2a:94:86:f8:6c:94:57:39:e5:94:fe:84:cb:17:82:f7:34:
06:f0:47:55:4e:a0:2e:db:ff:11:6f:d5:c0:8a:ec:9d:4c:f9:
cc:40:b9:19:0f:02:8e:a1:ce:31:78:91:63:70:ac:fe:56:af:
f4:ba:a3:d1:1d:d9:20:13:c0:cf:3f:74:c6:11:9e:aa:b9:34:
0a:74:31:f6:ca:f7:b1:71:e7:11:a3:4b:2b:c0:1e:58:fc:b9:
c0:bb:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:48:16 2026 by rpki-client