Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: uf/9ztyvRiXuCLQ+qVrDZoInz8WakNuj3BmeiE4JfQE=
Subject key identifier: 05:90:28:A9:2B:0F:75:67:2A:31:4A:98:AA:AE:7B:8A:77:5E:28:70
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A11DF6168AB025F66B8B228B8933820C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0923
Signing time: Fri 09 Oct 2026 00:00:29 +0000
Manifest this update: Fri 09 Oct 2026 00:00:29 +0000
Manifest next update: Sat 10 Oct 2026 00:00:29 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: enAFgRUDlLVX5rkAbeMgXHIYmRLVCCIIvJaPnaNQwvU=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f6:16:8a:b0:25:f6:6b:8b:22:8b:89:33:82:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Oct 9 00:00:29 2026 GMT
Not After : Oct 10 00:00:29 2026 GMT
Subject: CN=059028a92b0f75672a314a98aaae7b8a775e2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:a7:92:1b:4f:35:c4:3a:54:55:b5:53:48:
56:86:14:af:f8:22:64:9e:a7:e2:19:a8:8a:47:55:
61:92:9c:08:15:5e:ef:83:f2:28:47:f0:88:d6:38:
53:b8:68:6c:8e:ff:da:14:fb:af:94:d2:20:f4:12:
83:16:c5:22:c4:71:45:36:f7:71:7c:a7:9f:33:dc:
1a:e3:77:e2:0c:5d:47:96:bb:70:5f:4a:75:11:d0:
f3:e1:c1:bf:dc:a2:f3:ed:25:76:d5:ae:38:dc:a0:
28:e1:4a:a3:d1:73:db:93:82:32:82:4b:e0:d4:1b:
24:17:ee:e9:e6:b7:9d:39:65:aa:68:b4:75:06:c2:
28:14:03:ce:df:da:ee:b7:18:da:98:0a:22:4a:f5:
44:b7:ca:57:ce:b8:43:5c:4d:4d:eb:32:af:70:42:
15:1e:88:a9:9e:42:b8:7e:a0:87:77:33:48:ae:c4:
43:c5:f5:e7:1e:63:d2:6e:3f:d6:a2:51:5f:61:5d:
9f:f9:fc:8f:ea:d2:66:b6:57:c8:ae:3d:82:7d:18:
1a:6c:b4:b4:c5:76:49:60:f5:fa:c7:8b:54:90:ba:
e7:30:34:8d:bb:e4:10:2d:bd:76:9b:42:2a:0e:8c:
fd:a3:4e:21:19:6d:d0:2c:e2:01:ac:19:14:63:76:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:28:A9:2B:0F:75:67:2A:31:4A:98:AA:AE:7B:8A:77:5E:28:70
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:d4:49:52:8b:7d:4f:70:8d:11:b4:2d:fd:b9:da:43:87:
26:fc:8c:a0:b2:88:00:cf:18:9e:8b:80:8f:6a:22:dc:4f:dd:
21:cd:27:aa:13:f4:3e:3d:63:37:51:91:b7:21:4c:89:8d:81:
32:6c:a4:5c:db:5b:61:e3:8c:d9:81:42:66:c7:4c:26:06:08:
8c:de:ac:bb:89:e0:b9:2c:dc:16:b7:22:b4:7b:56:4c:5e:d8:
00:27:0b:95:a2:ef:6f:67:75:e4:59:df:5b:b3:e4:20:9e:b3:
df:91:7a:ac:19:43:0e:c6:e7:5d:8d:07:7b:74:26:69:68:1e:
8d:96:c0:5c:5c:91:c3:25:01:55:43:f7:e1:41:e9:f0:7f:f1:
7a:f2:74:b4:95:82:12:96:64:a2:b7:71:6d:97:cf:1f:f7:7b:
f8:69:2c:fd:53:ea:18:ea:8a:cb:31:9c:0a:62:03:f4:4d:86:
3f:72:2d:90:7e:08:bd:75:e6:2c:a6:d4:a1:39:1b:e4:e6:ec:
ee:9d:1e:f5:ce:ce:12:77:fe:8c:6a:f9:25:d1:cf:d7:68:fa:
d5:08:57:50:9d:a0:2a:cc:19:fa:05:78:79:cd:3e:2a:07:7a:
88:33:bd:50:95:0a:b9:16:df:50:e1:bf:de:56:a3:44:ee:70:
fd:85:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:28:50 2026 by rpki-client