Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: qBMeZohxD/YupDQQE+kRi2F+Gt56Lz2xj4ZEF2VAYhE=
Subject key identifier: C8:9C:DD:00:67:A1:AE:50:C3:65:F2:E2:36:59:4D:9A:53:C1:C8:A1
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01A0CC3547B88E8D801C6FBE7FCE395E172F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1617
Signing time: Wed 23 Sep 2026 03:00:38 +0000
Manifest this update: Wed 23 Sep 2026 03:00:38 +0000
Manifest next update: Thu 24 Sep 2026 03:00:38 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: mBCbLiLvRAVuZp4IEVO18rqGNeTAEhXithwUXysOh2k=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:47:b8:8e:8d:80:1c:6f:be:7f:ce:39:5e:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Sep 23 03:00:38 2026 GMT
Not After : Sep 24 03:00:38 2026 GMT
Subject: CN=c89cdd0067a1ae50c365f2e236594d9a53c1c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:28:ed:30:f2:fe:0f:2b:5f:66:53:b0:8b:
d1:ba:5e:9c:33:db:62:7d:1a:a6:47:ef:1f:2b:74:
50:ac:14:ea:ac:ee:3b:8b:91:8e:1b:bc:a5:c0:da:
08:ad:4f:98:d1:6c:c6:10:1e:09:1b:da:07:e9:2e:
8d:a1:04:45:67:55:4d:73:64:d2:22:33:44:68:9d:
07:14:c6:18:79:64:12:b7:57:58:1b:ab:f4:e0:3a:
2d:80:40:76:df:5e:0a:77:8f:ab:30:a6:18:9d:3d:
6b:cf:b5:41:bf:af:68:e9:18:09:01:35:b8:5e:d1:
77:4f:55:e6:d6:6c:4d:3e:8b:9a:cc:4c:f5:a1:6e:
7a:b0:60:30:57:a6:26:aa:25:c7:b2:b1:ba:c2:3c:
d2:79:5c:ec:12:94:ad:6e:2a:97:7d:93:f3:72:00:
6d:52:e1:9e:a1:f4:75:8d:2f:f8:c8:6d:d7:68:5d:
30:67:87:06:d4:db:b2:18:ef:95:44:a0:c3:08:cc:
d0:37:da:3b:c8:fd:e3:19:44:21:87:d7:54:1a:50:
83:2f:b0:3f:9d:47:7b:73:a3:46:5a:c2:21:df:b0:
86:04:0a:1e:a8:ae:c1:5e:b8:f1:78:25:31:3b:33:
9e:81:bc:62:86:be:b3:b6:72:c5:91:dc:29:b9:27:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:DD:00:67:A1:AE:50:C3:65:F2:E2:36:59:4D:9A:53:C1:C8:A1
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:0c:12:78:48:14:2c:d9:fb:0e:6b:91:85:5d:7f:e6:b3:
70:73:a4:9b:a9:6e:c6:68:f8:7f:14:1d:ca:30:6b:b7:71:be:
33:70:f8:08:85:ce:65:d2:b5:25:7c:16:75:6c:a8:be:c0:16:
17:d5:2c:95:e2:bd:3c:33:bf:8d:6b:65:7a:e0:44:78:d6:d7:
07:e1:67:68:3c:7b:ca:c8:96:e9:54:04:51:bc:82:4f:4e:a4:
7c:5d:5d:ba:c9:32:5e:1c:44:15:54:1f:b7:35:a8:7b:bc:7a:
ab:f3:5c:55:38:13:19:7c:89:22:bc:4a:01:47:78:82:e8:6c:
09:ce:04:27:60:d3:f9:2d:94:b4:ca:7f:2b:a7:1a:ea:d8:49:
89:7f:27:6c:9c:ec:a0:93:1f:2b:9e:64:fa:ee:e1:61:60:7e:
ac:23:88:1a:0f:f0:14:ed:38:bc:49:cb:74:76:19:72:04:e0:
3a:e0:13:c4:bb:b7:2f:b8:36:03:d5:f1:50:44:95:d1:08:23:
43:0b:c9:7b:b1:9a:bf:58:99:97:1b:e3:75:fe:2a:b3:93:9a:
83:d9:54:28:03:50:0d:87:42:e1:d5:3c:62:08:64:c9:c8:22:
39:cc:0c:a3:fc:95:d2:2f:4c:33:5c:3c:02:17:fd:0e:54:6c:
f3:ce:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:50 2026 by rpki-client