Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
File: JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft (raw, json)
Hash identifier: DyzNv5vD3Xoxyt2zBC1l5ABPngND5r5iCzVtBq65KhA=
Subject key identifier: 81:2C:E3:1E:AD:8A:1A:1F:1F:A2:E2:95:F6:EC:44:53:00:2F:8E:72
Authority key identifier: 25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
Certificate issuer: /CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Certificate serial: 01A0C82138AE6C99856E82E75B2D8B686877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
Manifest number: 5C
Signing time: Tue 22 Sep 2026 08:00:15 +0000
Manifest this update: Tue 22 Sep 2026 08:00:15 +0000
Manifest next update: Wed 23 Sep 2026 08:00:15 +0000
Files and hashes: 1: JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl (hash: G24Emx3WBkxuQWhcR0boFDOATHYlffK0IOiEilxd2Xs=)
2: klrosDEOjckTGs7uNWRpWVh-PXA.roa (hash: Mee86lzuSd1BMBKUUa6c68fXrs93E31ysp5BpoC8Y9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:38:ae:6c:99:85:6e:82:e7:5b:2d:8b:68:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2562225d32c20db0b81e582015b7be5c3e0996b4
Validity
Not Before: Sep 22 08:00:15 2026 GMT
Not After : Sep 23 08:00:15 2026 GMT
Subject: CN=812ce31ead8a1a1f1fa2e295f6ec4453002f8e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:f2:60:48:bb:ce:65:47:c5:fe:99:31:0b:
95:0c:ad:1f:de:99:bc:24:47:03:98:1c:d0:c2:be:
ee:2f:d2:50:9e:a3:ce:a4:b4:f2:d3:f8:3b:4f:b9:
49:58:0e:5c:51:ba:13:c9:fd:e1:b3:70:02:b2:31:
a8:7c:65:1b:bf:8d:f4:32:af:cb:ff:26:fa:c4:e1:
cd:8c:22:53:fe:d7:09:49:b0:15:e0:b0:b8:32:78:
69:6d:07:08:f6:65:77:e4:11:f2:8f:53:77:6e:ae:
f6:52:2b:1c:82:1c:ee:d5:4c:81:f5:77:bb:b8:43:
d7:aa:ff:e6:cb:2a:74:15:74:98:79:59:3a:7f:ae:
dc:93:59:dc:f1:0c:b7:c2:63:61:f3:c4:64:97:ea:
be:82:d3:fc:69:dd:46:14:63:52:a2:be:0d:32:e4:
29:e4:37:82:d2:40:5d:ce:02:54:a4:1b:74:65:a0:
bd:6a:71:11:1b:93:2b:1c:e7:f7:4e:49:dd:aa:16:
64:53:1e:4d:3a:4d:1c:86:5a:50:e7:af:82:2c:ad:
4c:99:b3:9d:fa:66:83:e1:0f:b1:33:93:28:f8:06:
20:98:9b:19:9d:b6:83:cd:7e:1a:41:08:8e:0e:65:
82:40:72:9d:fe:c1:e7:c3:2e:1c:63:55:94:18:1f:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:E3:1E:AD:8A:1A:1F:1F:A2:E2:95:F6:EC:44:53:00:2F:8E:72
X509v3 Authority Key Identifier:
keyid:25:62:22:5D:32:C2:0D:B0:B8:1E:58:20:15:B7:BE:5C:3E:09:96:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWIiXTLCDbC4HlggFbe-XD4JlrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e7374c-99dd-4c56-b920-a364c2ffd49f/1/JWIiXTLCDbC4HlggFbe-XD4JlrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:e7:45:04:2b:00:c8:4d:00:c1:33:c8:f8:8c:2e:fb:c3:
49:f5:dd:64:7d:82:97:db:2c:b8:33:28:25:58:36:3f:62:6f:
48:07:22:d6:a2:66:12:68:dd:92:21:b6:ac:fd:a3:c0:90:6f:
09:24:62:91:00:1a:05:2b:7d:b4:e4:a0:e1:dd:89:ff:90:d3:
b8:ae:b6:a4:0a:57:27:a0:d9:d5:5f:30:18:e0:ad:16:9c:5d:
af:44:48:7c:17:18:77:76:ad:d6:ab:57:c7:a0:6e:b0:8c:cc:
09:a1:7e:f1:47:10:18:fe:52:1f:23:f2:01:7e:72:92:40:2b:
a5:ea:5b:52:70:b2:91:55:49:8d:a2:b5:22:55:f6:c4:26:5d:
1d:ed:0d:65:4c:a2:86:12:9d:94:05:5d:d1:f3:7e:5b:4f:27:
a5:a9:52:83:f7:7e:93:61:f3:16:c3:3b:52:64:93:cc:92:9a:
0f:6c:99:95:cd:1b:eb:7f:d7:c8:9b:31:6f:42:1c:14:8b:1e:
ef:c8:3f:5f:ba:80:39:6d:bc:60:cd:2a:89:73:d6:91:be:ea:
18:33:50:58:81:d7:af:16:1b:0e:3f:4b:62:1c:3e:bf:08:c2:
66:ef:bf:3e:58:c4:75:0a:01:3e:6a:74:69:60:0e:d6:ea:fc:
49:33:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:01:44 2026 by rpki-client