Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: GA70qT75FSr1RLg/E/8Vywrr1W9aHfAyOE6bTEDir6s=
Subject key identifier: 90:CC:DD:18:93:21:BB:7D:C9:DC:EC:F6:51:30:B3:70:B7:EC:4D:CD
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01A0CF36728FA6B3067B593B18F01F296182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0F1C
Signing time: Wed 23 Sep 2026 17:00:46 +0000
Manifest this update: Wed 23 Sep 2026 17:00:46 +0000
Manifest next update: Thu 24 Sep 2026 17:00:46 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: 5RWR8/s1cwrXcm/foKG+hAJ/yHjTfzx5LFPccsfWSuM=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:72:8f:a6:b3:06:7b:59:3b:18:f0:1f:29:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Sep 23 17:00:46 2026 GMT
Not After : Sep 24 17:00:46 2026 GMT
Subject: CN=90ccdd189321bb7dc9dcecf65130b370b7ec4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:1f:04:fc:d9:f8:92:af:53:9a:fc:7a:b9:
79:ec:52:c8:02:89:64:8a:63:43:3c:98:e0:b7:5d:
96:c5:d1:df:87:31:c6:a8:a1:9d:05:90:97:f6:f0:
4b:8a:37:0f:5c:29:ba:15:89:31:1d:51:4b:82:b3:
8e:bb:30:47:26:a8:cd:b8:60:fb:5c:86:a3:18:bf:
0a:88:fa:2d:26:ed:ab:85:13:56:ba:6b:d2:8a:8e:
6a:47:97:37:6b:1d:6a:ee:a9:3c:0b:ea:59:30:ed:
0d:8f:b4:3f:08:19:4c:c6:03:8b:2f:57:64:85:d3:
02:d7:c3:d1:cc:34:f6:0b:af:0a:4a:ea:0d:c1:7d:
8e:33:95:d4:72:c3:d6:04:c6:c3:81:bc:58:14:af:
27:11:ab:31:68:b5:4c:46:4c:df:7c:86:02:cd:08:
bd:c3:df:1b:63:52:b2:b9:18:85:85:cb:bd:8a:7f:
b5:13:96:f9:54:31:99:49:64:68:33:45:84:a5:f3:
73:b1:be:de:52:6d:a5:65:c9:f7:f9:e9:e9:de:d8:
ba:3f:8e:81:55:91:16:bb:0c:e9:ba:ec:25:21:ad:
0e:ee:23:2e:77:b2:c0:24:bb:97:be:48:d3:d1:70:
fe:ca:4c:24:81:d8:17:25:60:4d:21:ec:29:85:36:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:DD:18:93:21:BB:7D:C9:DC:EC:F6:51:30:B3:70:B7:EC:4D:CD
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:de:68:01:d7:24:c3:47:61:c7:63:f2:74:f5:f4:38:8e:
8a:bf:27:94:65:49:51:dc:d6:76:98:5e:db:31:e3:cd:67:a4:
27:d0:17:b3:c9:51:d5:bd:db:51:6c:2d:54:b1:ca:50:9f:be:
ca:dc:bd:5f:8e:fa:77:3c:84:c4:e7:c7:05:7a:62:79:dd:dc:
eb:89:6d:96:ea:af:8b:30:e2:21:0c:d0:2d:93:73:67:3f:a5:
fa:b1:8d:1a:df:1f:0f:65:12:a9:4d:f3:0d:b7:40:63:9b:29:
67:92:2c:80:da:fa:51:2f:1d:f6:77:4e:19:59:61:ca:15:fd:
dc:70:59:72:7a:93:f3:7a:55:97:07:9d:c7:ca:ca:71:fe:ca:
49:d7:11:0d:94:b1:1f:9b:77:b5:e2:f1:fc:2b:2e:a8:83:45:
0f:a9:13:2e:4d:2b:14:7b:22:bf:b1:b5:94:28:81:ea:ea:34:
22:04:ab:4d:4b:2d:29:8b:fc:6d:11:b7:48:22:8e:16:00:25:
5c:1f:e3:ae:62:9c:f8:eb:f2:a0:5a:d8:dd:18:3d:02:43:40:
fb:d8:6e:40:31:2c:0b:be:b7:94:d5:59:97:01:a0:9d:d2:77:
2d:a6:c8:53:19:65:6d:3a:21:60:3e:5e:80:13:b4:71:b7:a3:
76:61:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:09:16 2026 by rpki-client