Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
File: JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft (raw, json)
Hash identifier: ktLES2L/+sgp4m0ZWpeo2nNIt+bIeeFXsjbCEwc2/Pk=
Subject key identifier: C7:44:14:F2:CF:20:7A:D1:63:B9:C3:55:27:9A:66:92:66:80:ED:32
Authority key identifier: 26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
Certificate issuer: /CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Certificate serial: 01A1310FC4D4AE745CA468BAE13FC27E36D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
Manifest number: 0100
Signing time: Mon 12 Oct 2026 17:01:19 +0000
Manifest this update: Mon 12 Oct 2026 17:01:19 +0000
Manifest next update: Tue 13 Oct 2026 17:01:19 +0000
Files and hashes: 1: CT7CUpJmJPLajKgOQIFrWv5R9bI.roa (hash: kW/49sudv3kAXReOsUWamQV3RVaaDJfvruQZFjeF4XM=)
2: JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl (hash: isgXI3JC+e0i2kfpp+OF7GU5BUZ3FzX+U6MMsepKJf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:c4:d4:ae:74:5c:a4:68:ba:e1:3f:c2:7e:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Validity
Not Before: Oct 12 17:01:19 2026 GMT
Not After : Oct 13 17:01:19 2026 GMT
Subject: CN=c74414f2cf207ad163b9c355279a66926680ed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:de:46:06:ed:ae:9e:3d:26:b5:c8:4d:ab:
08:a5:49:6d:4e:ea:44:61:e7:68:cc:44:fe:fd:c6:
0d:d2:ae:2a:fd:14:1a:6e:0b:68:04:10:c9:88:db:
66:59:08:1f:70:2e:3c:23:bb:b3:37:55:b2:dc:77:
c1:ba:9b:8d:48:f0:d2:b8:ea:ef:4b:98:3e:eb:e6:
f9:13:36:ca:8e:81:03:28:ab:91:93:59:70:a8:b6:
af:bf:66:5e:00:66:44:35:b0:1a:0d:e5:8e:c7:68:
c9:06:ab:82:ab:f4:fa:08:96:70:e5:fc:fc:67:81:
9d:a0:79:8b:81:d7:05:2b:4a:02:b3:5e:f8:9d:d9:
53:56:39:10:10:a3:23:a6:e8:2e:3b:77:17:39:90:
5b:6e:02:ff:c6:ad:01:af:ea:ef:bb:7c:5b:d0:0c:
cb:a0:42:48:93:3c:e8:ac:37:6d:00:43:9b:ff:fb:
d3:94:92:62:1e:36:9e:7d:bd:7f:8b:9d:c8:db:72:
23:66:9e:17:a4:7c:48:79:18:fc:2c:87:00:d3:56:
dc:67:81:75:58:d5:5c:63:d7:78:3d:c9:85:3f:6d:
34:88:3a:58:c0:ef:de:5a:12:0a:9b:90:b2:b0:4b:
3f:34:b2:3f:6a:af:9f:82:ed:cd:a5:64:e2:1a:0b:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:14:F2:CF:20:7A:D1:63:B9:C3:55:27:9A:66:92:66:80:ED:32
X509v3 Authority Key Identifier:
keyid:26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:d5:a7:b1:27:ae:ae:56:62:7c:c4:21:ff:a6:39:79:7f:
fa:2d:a9:48:08:b2:7f:2c:4a:97:8b:be:49:35:7b:85:e3:f3:
18:55:bc:e5:ea:8f:19:21:63:54:25:b4:a4:de:b3:b9:51:a7:
d5:14:2e:01:2e:8b:6c:79:f8:2e:79:af:bc:b2:cf:c8:bb:3c:
98:22:42:0c:60:e0:85:a5:28:95:f5:d5:61:8e:ad:25:56:29:
00:36:b3:63:30:ab:43:7b:16:1b:17:ca:d5:2d:fa:37:ff:cd:
13:11:44:da:3a:1b:3d:70:d4:47:6e:41:f1:29:2c:bb:08:05:
50:2a:a9:d7:9d:f8:73:8c:63:5a:00:13:41:4a:65:4d:05:b1:
d3:71:4b:db:3d:6d:16:18:5c:71:4e:97:0f:ce:ee:07:22:b7:
a6:40:c0:ea:f7:0d:bc:10:e4:fc:66:9d:93:57:ab:75:ac:fa:
51:42:93:43:b5:52:c5:b2:53:9b:a9:40:76:eb:3c:4c:1a:b4:
d8:ab:8b:89:60:34:6e:0a:1a:a1:72:f6:03:20:b7:d0:76:a7:
c8:d9:f5:6d:86:77:bb:f6:c1:04:de:33:28:b3:59:17:f6:2a:
4c:33:cc:08:da:ac:51:eb:8a:41:42:a8:de:a6:2a:61:ab:55:
aa:39:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:40:08 2026 by rpki-client