Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: Js/aR41TZxR4yQk8pc8m0/Vseq7oJizui65fVnWDa4Y=
Subject key identifier: 35:A1:54:29:76:65:2F:62:AB:45:A8:F4:97:7B:11:79:2A:99:A5:87
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01A0C28CF9966B025B66AB1ED5D27F945B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 19E7
Signing time: Mon 21 Sep 2026 06:00:13 +0000
Manifest this update: Mon 21 Sep 2026 06:00:13 +0000
Manifest next update: Tue 22 Sep 2026 06:00:13 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: qV/Yi49kexP6XKCJ4oCEAO3uoQJT6aX9tTSnEvCZFiY=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8c:f9:96:6b:02:5b:66:ab:1e:d5:d2:7f:94:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Sep 21 06:00:13 2026 GMT
Not After : Sep 22 06:00:13 2026 GMT
Subject: CN=35a1542976652f62ab45a8f4977b11792a99a587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:85:73:3a:bd:73:51:c9:5a:2a:14:02:cb:
05:ac:3f:a3:48:62:ec:40:3d:b1:01:a5:27:96:f9:
18:ae:cc:2c:c6:60:8a:b0:08:bf:fc:97:db:65:5b:
ae:d5:ee:96:ff:21:cc:d7:98:13:3d:54:9a:8c:ad:
0a:01:fc:f5:9b:4b:07:64:c2:ce:fa:86:30:a9:76:
07:06:88:5e:96:0c:f4:37:76:91:2a:a0:25:04:e8:
b7:4d:c4:33:2f:a4:d2:11:af:ea:e1:9d:25:2b:c3:
18:03:94:1c:33:60:f6:c9:7d:25:89:25:21:09:36:
ad:0e:36:ed:44:e5:f9:96:9b:3e:a9:ae:c1:ad:e6:
46:f4:ec:07:e7:52:a0:8d:7f:1c:ad:bb:b4:a2:ab:
51:33:16:c4:95:9d:b6:5e:f7:a5:35:8c:c4:5e:ad:
44:db:b9:f4:fc:15:39:99:4b:d0:ee:ab:a1:17:f9:
7b:ad:d7:0a:02:8f:d1:57:e0:5a:13:09:80:bc:8d:
fa:a4:83:6b:be:11:10:14:37:26:ec:f2:ed:f6:c1:
64:2b:16:f2:3c:c4:b5:c9:05:c1:8e:19:a6:3b:a6:
d0:99:ed:d1:fb:5d:ce:00:e9:3d:b8:a5:01:46:b2:
d7:b6:7c:6c:1e:5d:27:4d:e1:fe:10:a5:8e:8d:91:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:54:29:76:65:2F:62:AB:45:A8:F4:97:7B:11:79:2A:99:A5:87
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:cf:c5:4d:54:f7:40:bc:ef:8e:24:a9:09:fb:85:81:53:
dc:6f:01:c6:f6:ad:09:45:de:f3:3f:0e:e9:df:e7:93:c7:1b:
08:2e:12:e4:74:cb:72:dd:bf:0d:10:f2:98:7b:1d:ff:66:50:
49:e8:81:2f:ba:b1:c2:1d:d3:2d:37:d6:67:43:72:ba:45:7e:
1d:ba:80:af:c0:08:70:0f:fa:37:a9:1c:05:80:97:62:20:a1:
7d:bc:fe:f1:94:b2:c0:3f:2f:31:76:62:9b:44:03:6c:2e:2e:
1c:4c:12:f4:0c:7b:a9:37:32:1b:78:57:05:1d:eb:e0:ee:c2:
c0:d3:cd:d4:94:b6:a9:d2:bc:a6:f8:85:c4:93:3a:ac:e1:b3:
72:66:82:0f:de:0f:b8:17:c9:c1:e7:c7:aa:4c:47:35:48:21:
34:43:dd:b2:5d:21:7f:f2:61:7a:c5:99:e1:6e:5f:04:43:1d:
ca:60:fd:41:da:91:99:13:0a:70:b5:29:2a:e2:16:05:e5:23:
6a:84:bd:3d:fc:61:b5:f5:76:e9:a3:8f:32:1b:21:02:2e:65:
79:39:ce:b4:f4:8c:88:14:5d:65:6a:b9:72:cd:b6:60:8b:83:
49:22:11:3e:fe:50:3b:6f:bd:4a:47:ba:51:a3:58:b8:b1:2d:
09:13:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:44:06 2026 by rpki-client