Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: 0k6BhP+vv/m2gcjZ6R6sASnWj9g5n5B4E+nLgrzUCyo=
Subject key identifier: 4F:9C:50:FF:4C:24:58:33:FF:5C:2B:E7:E8:59:71:7C:F0:AD:8F:B5
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A11C07B2C69BB5C30ABA25D40C1C91C8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0922
Signing time: Thu 08 Oct 2026 15:00:28 +0000
Manifest this update: Thu 08 Oct 2026 15:00:28 +0000
Manifest next update: Fri 09 Oct 2026 15:00:28 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: oFoQiFL0TmKXASdq11FIpnhAQ3wCQHfFa6F+hCZORvA=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:b2:c6:9b:b5:c3:0a:ba:25:d4:0c:1c:91:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Oct 8 15:00:28 2026 GMT
Not After : Oct 9 15:00:28 2026 GMT
Subject: CN=4f9c50ff4c245833ff5c2be7e859717cf0ad8fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:f0:08:fb:cf:6f:6e:4e:ec:8c:4d:ca:c0:
30:e3:56:2b:fb:51:8a:0d:48:65:14:d0:61:45:85:
64:b0:1c:41:f6:37:97:21:e8:c5:bb:84:9b:0d:de:
0d:80:29:36:fe:9b:d5:0d:5f:c6:21:74:a3:ad:2a:
e5:29:c4:5a:d0:ba:94:a9:88:5b:44:26:26:da:0e:
04:4d:49:32:7a:7a:60:51:cf:af:8e:1d:17:88:5e:
e4:90:db:17:ed:73:3b:aa:c0:4c:ee:5e:8a:05:83:
07:8c:f6:0f:c4:24:21:4a:40:a5:e1:5c:3d:46:9f:
bb:1a:c0:10:29:d6:38:8a:1e:b2:33:11:94:80:35:
8d:4d:92:70:5c:84:a3:ba:c8:cc:09:c3:22:32:ff:
96:ac:50:4b:ea:4d:58:50:ab:ae:e7:d9:c0:0d:f8:
71:ab:5e:38:81:5d:51:6f:81:ef:e3:62:3f:12:3c:
0c:c9:1e:c3:32:3b:38:dc:7d:dd:fd:d8:86:55:6d:
e7:7d:11:09:bf:b1:d8:d5:3f:c6:3f:d5:70:cd:2d:
e1:17:43:14:9c:42:93:db:7f:4a:a4:71:b0:ad:e8:
bc:de:42:2a:0a:a4:4a:a8:57:24:cd:18:c4:91:d0:
62:11:9d:2a:39:9e:20:41:ec:2d:e9:bc:c9:b3:02:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:50:FF:4C:24:58:33:FF:5C:2B:E7:E8:59:71:7C:F0:AD:8F:B5
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:94:3b:07:d1:6c:49:4a:ae:c9:0b:0a:7b:67:e8:f0:35:
78:a8:cd:94:fe:cb:c4:02:92:ee:c5:9a:d6:78:91:9d:34:bc:
11:1e:c8:be:c8:3f:09:81:d0:6e:54:d3:fb:65:39:ba:fa:2e:
8b:a6:4a:77:d9:79:6d:1e:a7:40:94:e5:93:8f:86:80:82:3b:
f4:09:9a:7a:05:ae:18:a3:9b:a4:cb:84:0a:59:7f:09:16:a7:
bf:fc:ef:fa:ee:71:3f:70:b5:d8:a1:d7:77:bd:dc:ed:6c:d1:
92:55:5a:88:d5:79:e5:f9:e7:c8:a3:08:35:af:0d:87:7e:32:
42:22:b7:53:e7:b1:ba:bb:35:a7:83:f0:ec:93:ba:ab:1b:c1:
b8:99:fd:5a:b6:fe:b5:36:83:c9:b3:f5:c0:0a:84:6c:5d:f4:
c6:70:db:46:08:6e:5f:1d:d9:8a:a7:11:8d:0a:5e:ed:49:95:
14:e8:30:bb:5f:b0:5f:2a:13:ca:94:49:d1:80:de:b8:6a:44:
ae:65:73:57:76:18:d9:3e:e3:02:31:03:ae:28:bd:02:2e:81:
bf:60:16:c5:fa:90:3d:80:a6:80:bc:48:0d:a1:34:43:b7:5a:
f9:02:ca:8a:51:9f:70:98:c6:9b:99:2e:8a:08:6a:7a:98:d0:
0d:c3:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:50:50 2026 by rpki-client