Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
File: JPJm2DH8J6QqMgiJno32JsRXEAc.mft (raw, json)
Hash identifier: JKgs2pdGP2WXWYTsHbQYaMPT01r15M/kgmK8ax+EKUQ=
Subject key identifier: 1D:C2:9A:1B:87:C8:60:90:2E:C6:13:7B:06:D5:A4:63:E3:9B:49:44
Authority key identifier: 24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
Certificate issuer: /CN=24f266d831fc27a42a3208899e8df626c4571007
Certificate serial: 01A0BEB03AC6C0DEF40B4E5FF2C217780EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:15 +0000
Manifest this update: Sun 20 Sep 2026 12:00:15 +0000
Manifest next update: Mon 21 Sep 2026 12:00:15 +0000
Files and hashes: 1: JPJm2DH8J6QqMgiJno32JsRXEAc.crl (hash: XAh2LTxRQl1qr7g8a25Mzscbd79H/ys+niFcV0Ttt4E=)
2: k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa (hash: CisMnnWLCTdGxCNLWXEduRycUM2+pYKyAFoWjqKXGyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:3a:c6:c0:de:f4:0b:4e:5f:f2:c2:17:78:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f266d831fc27a42a3208899e8df626c4571007
Validity
Not Before: Sep 20 12:00:15 2026 GMT
Not After : Sep 21 12:00:15 2026 GMT
Subject: CN=1dc29a1b87c860902ec6137b06d5a463e39b4944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:94:05:12:22:d4:29:b3:34:02:e0:3b:d0:
09:95:06:99:25:c5:b2:cd:90:8e:63:0b:00:a7:e4:
21:25:20:96:0f:78:d1:ca:ef:6b:50:8b:1a:da:70:
55:ca:67:22:3c:33:3f:b1:00:3a:0a:81:82:17:04:
48:ed:ed:00:57:8d:64:f7:31:82:e6:6d:a0:3d:f7:
25:79:c7:a0:69:82:1e:36:5e:95:5b:d8:4b:e1:66:
4f:fd:be:9d:16:c6:18:58:04:0a:cc:b4:8d:51:ca:
a1:34:17:a2:53:15:6a:8b:04:19:26:05:89:49:c3:
f8:8c:d1:09:d8:c0:25:bf:72:cf:e5:3b:8e:1d:e3:
e7:15:4a:34:a5:aa:e5:b8:62:2a:9c:cd:96:9c:8e:
3f:52:b4:d2:4c:5d:8e:ba:6e:04:12:d7:60:da:10:
1b:31:8c:35:59:85:0f:09:74:8f:e1:38:fa:4a:02:
8e:43:74:47:cc:d4:52:bb:71:86:87:d8:62:30:bc:
bc:e7:c4:3e:a3:46:f0:4f:1c:df:31:46:76:89:3d:
d9:15:c0:f5:0c:d1:0f:da:ce:cb:c3:52:58:13:e5:
30:51:74:c6:c9:88:ef:c3:52:1c:ab:08:99:08:a2:
1d:44:f7:8e:ba:3b:02:5f:09:74:19:0a:5c:bc:54:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C2:9A:1B:87:C8:60:90:2E:C6:13:7B:06:D5:A4:63:E3:9B:49:44
X509v3 Authority Key Identifier:
keyid:24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a7:80:6a:a2:44:60:b6:df:6a:e2:94:5e:e9:82:01:74:3c:
24:1f:6e:df:bc:96:3d:ef:87:11:fb:8c:9e:66:50:a6:2d:e0:
e6:35:0a:44:45:bc:bc:48:83:78:1f:dd:4a:e3:29:bf:1b:c0:
f0:19:83:45:3f:76:a9:88:90:69:ed:33:99:49:b4:f8:62:f5:
06:d4:eb:fd:b5:70:84:bf:d8:bc:66:e4:f1:24:d4:30:e5:ab:
13:60:aa:d6:d2:ce:e1:7a:b4:27:6f:80:e0:e6:a9:4b:c7:b6:
0e:90:40:3b:6c:b9:26:cf:71:e8:f3:dc:6d:1d:84:9c:e0:8f:
5f:55:c6:a8:0b:c4:de:41:ec:05:2b:4e:e4:c7:2d:a9:b4:4f:
37:5d:91:3c:42:ac:0a:77:16:3b:0e:98:00:21:2c:d0:71:0e:
93:51:37:59:a3:9a:7c:09:3c:9f:df:9e:01:dc:74:69:ff:22:
5a:64:ad:88:18:57:e8:24:14:11:68:14:b5:05:54:fa:9f:f7:
87:cf:9f:4e:b6:d6:60:d0:13:7c:86:15:e1:81:44:c9:70:84:
a9:be:00:99:45:8a:de:a9:7d:09:b3:1a:18:83:7d:f0:ec:ec:
85:1b:4f:b8:8c:46:19:4a:e6:77:d9:30:08:ce:c6:32:29:df:
4b:df:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:28 2026 by rpki-client