Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: 8L7N7vsO+ZfxQFdwIDmzuOwitggJ1DWZ5f0Q7XygXkM=
Subject key identifier: 2D:51:B3:8B:59:A6:C4:16:29:04:29:31:4D:01:87:CA:3E:37:59:DE
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 01A10437AC4C4AF3E3790EA76B1E7A742E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 01CC
Signing time: Sun 04 Oct 2026 00:01:59 +0000
Manifest this update: Sun 04 Oct 2026 00:01:59 +0000
Manifest next update: Mon 05 Oct 2026 00:01:59 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: KKq4CDOOI4/Ly9XsECSBxou6/eOiJonPGx4VfEnNs6g=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:ac:4c:4a:f3:e3:79:0e:a7:6b:1e:7a:74:2e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Oct 4 00:01:59 2026 GMT
Not After : Oct 5 00:01:59 2026 GMT
Subject: CN=2d51b38b59a6c416290429314d0187ca3e3759de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:78:0e:86:5a:a7:3a:46:85:10:c3:85:a8:
00:d4:e7:ae:33:74:5a:cf:47:7e:19:6e:78:3f:ba:
84:39:14:ec:50:85:51:73:e7:bd:8d:65:58:b4:60:
93:af:ca:48:9c:50:09:54:ca:8c:ca:f0:bb:77:e0:
57:ca:d6:75:9e:5f:c0:ce:41:20:ec:eb:fc:0e:1c:
87:3e:98:6e:df:f6:bd:75:df:19:f9:e9:0e:03:9e:
8d:33:01:4e:ed:41:d5:39:2b:f5:6a:ae:cb:cc:26:
f8:fe:5f:2e:b3:85:61:dc:6b:08:08:59:ed:ed:8e:
fc:94:8c:9e:74:7c:f3:67:79:a1:74:ac:27:0a:d7:
59:02:8b:72:42:fb:01:c6:b7:bb:a1:0a:e4:d5:a8:
53:c3:3f:ba:61:be:44:71:1a:bc:24:35:41:15:ef:
19:ed:a5:1b:df:58:f5:00:97:1a:65:75:7e:9e:08:
2a:42:97:aa:8f:bc:a7:7c:fc:e2:2d:49:77:a9:85:
b5:49:82:40:9d:47:95:e9:22:0f:b3:00:4a:23:cb:
70:a9:33:2c:a6:1f:0f:0a:e8:2d:37:4b:34:2d:5c:
7a:0c:e2:81:fb:6f:f0:cf:23:a1:a4:a6:24:19:2a:
e0:25:f4:6f:64:cb:43:f5:3d:6f:56:df:3c:45:f4:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:B3:8B:59:A6:C4:16:29:04:29:31:4D:01:87:CA:3E:37:59:DE
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b6:be:8a:9c:c3:58:10:dc:f6:c3:cf:c8:43:f4:a3:7f:76:
d8:e7:5a:d8:cf:8b:65:d1:10:4b:c8:14:6c:46:01:71:ed:59:
72:a8:99:60:20:f1:a5:a2:4b:ba:5b:64:a9:9b:ea:52:d0:33:
74:8e:20:56:4c:42:ac:f0:86:4b:be:b1:f3:33:a9:c4:96:5e:
25:28:3c:c7:d6:f7:55:fd:21:9e:48:2b:90:25:be:59:42:5d:
17:5a:ef:29:71:af:40:0e:30:9f:04:9f:ff:61:62:cc:55:f3:
40:4a:64:7e:35:7b:2b:3c:f7:c9:d6:75:f0:6c:42:0a:d3:41:
d0:af:02:79:c3:a6:f4:1a:e6:da:65:ef:f9:60:3e:36:af:b8:
e1:f7:20:5a:61:31:4b:2b:ee:14:eb:8c:e7:48:7b:8e:4e:2c:
80:3f:2e:9d:25:3f:6f:5c:5e:2b:6f:a7:6a:b0:37:f1:c2:24:
6f:b4:7a:67:bb:02:16:d4:a7:42:01:5c:07:47:f7:31:05:ce:
ec:be:1e:74:12:37:0c:ae:66:ee:72:b3:2a:3e:01:06:de:cc:
45:ea:4a:2b:48:02:a8:c2:32:f0:b5:1a:30:41:c0:56:3b:91:
4c:ff:11:43:4b:34:95:7f:a9:c1:7a:04:e9:8c:3b:ae:f7:7d:
79:39:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:29:15 2026 by rpki-client