Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
File: JJT1GjsX7o__wrzFz7I2osBtMBQ.mft (raw, json)
Hash identifier: KWWH74R8L21isEllzO4ehenunYYX2ztDdlhKx+6PGis=
Subject key identifier: 23:09:D4:3E:63:DC:EA:3C:6D:E0:98:54:4B:A7:4D:53:04:57:3B:3C
Authority key identifier: 24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
Certificate issuer: /CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Certificate serial: 01A1005B14B6C6BF79A061F01535E0D7B895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
Manifest number: FE
Signing time: Sat 03 Oct 2026 06:02:11 +0000
Manifest this update: Sat 03 Oct 2026 06:02:11 +0000
Manifest next update: Sun 04 Oct 2026 06:02:11 +0000
Files and hashes: 1: 8B-p0w7Z7j0dOO6u8yPFRmJC2eI.roa (hash: 6voDi7M4n7VVEn89oNd75Yj/U+JyFcJrtu+YtLFQn9I=)
2: JJT1GjsX7o__wrzFz7I2osBtMBQ.crl (hash: uI7T1hQOhp9DFi128/eNBRcUkec6xxWAdjApbeEmeic=)
3: WP_E34plJ0O3N0S7JYCB7lN7wmA.roa (hash: w7tp2TDpf5fEZdFoSaHNL5/XjscaOJcFum6Cz+q+sLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5b:14:b6:c6:bf:79:a0:61:f0:15:35:e0:d7:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2494f51a3b17ee8fffc2bcc5cfb236a2c06d3014
Validity
Not Before: Oct 3 06:02:11 2026 GMT
Not After : Oct 4 06:02:11 2026 GMT
Subject: CN=2309d43e63dcea3c6de098544ba74d5304573b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:93:c4:cb:ad:a5:ed:f4:9c:66:bd:c4:08:
b0:e3:e8:30:b7:e4:65:44:68:8d:a7:a3:90:62:1f:
81:e6:96:d7:1d:c7:b3:6e:f3:ce:71:13:7e:f5:8e:
a4:3d:cb:42:b4:5b:94:ed:cc:4d:28:23:b7:ab:c8:
4a:9b:ed:84:08:42:14:45:88:3c:8f:a0:b0:2f:5a:
30:a6:13:39:89:c1:a0:65:d4:76:54:46:6f:7b:ad:
56:ee:92:66:1f:16:79:68:2c:3e:93:23:c6:3b:5a:
ea:06:72:7a:99:ab:a3:b5:39:a3:df:ba:b5:da:38:
30:a2:37:ec:fb:12:35:05:37:d5:17:56:8c:f2:86:
f3:f6:d3:82:84:aa:22:f2:05:42:0a:f0:ef:83:4f:
b5:41:b4:85:26:13:78:ad:48:37:d0:d8:c1:ac:69:
fb:47:9f:81:ec:6c:42:ec:98:27:a2:a7:87:39:63:
17:47:28:fc:53:2b:75:78:b9:a7:d8:ec:1f:05:b9:
a1:3d:4f:5d:ec:aa:26:29:86:bc:f6:fb:3c:4d:fe:
c6:23:fa:3d:b0:62:67:41:60:14:4a:5f:99:e3:58:
15:b5:f7:49:be:64:80:70:69:66:0f:20:3a:c4:4e:
60:37:51:f1:34:d8:dc:f3:0b:f0:f1:ac:01:a3:e3:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:D4:3E:63:DC:EA:3C:6D:E0:98:54:4B:A7:4D:53:04:57:3B:3C
X509v3 Authority Key Identifier:
keyid:24:94:F5:1A:3B:17:EE:8F:FF:C2:BC:C5:CF:B2:36:A2:C0:6D:30:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJT1GjsX7o__wrzFz7I2osBtMBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/JJT1GjsX7o__wrzFz7I2osBtMBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:db:d4:5d:17:24:bd:46:aa:66:e0:07:4d:02:81:8f:65:
83:fb:1d:b9:f7:be:40:cc:81:8d:f9:a3:e6:24:63:e4:36:09:
72:54:1a:81:08:2c:93:6d:a1:24:27:70:cf:e9:18:d8:94:35:
2d:e7:a8:9f:fa:e3:54:c6:2b:e0:78:0d:0b:c2:a1:23:bc:1d:
47:75:2b:1b:62:36:6e:4a:cc:f2:30:46:de:b7:ee:c4:7c:98:
06:51:66:15:53:72:1c:54:ef:ff:78:a5:89:4b:e0:db:19:ff:
3a:c6:af:c0:0f:97:92:b3:81:4a:8c:ae:96:33:a4:3c:b7:d0:
45:77:3a:0e:15:6c:96:a2:fd:5b:bc:e7:30:1e:ab:ef:fc:31:
e5:5e:b4:98:e3:9e:f0:00:70:fd:b7:77:cc:a2:37:dd:66:76:
19:aa:cb:ea:08:a5:e9:c6:47:ea:2e:4a:ff:e8:e7:9c:f1:68:
1d:ec:23:16:f8:98:cf:72:ed:71:28:63:65:f4:ba:e1:4d:60:
56:cb:13:41:ed:8b:90:8c:00:04:0d:60:1b:12:87:0b:1b:06:
41:7b:0c:39:b9:69:aa:af:56:38:20:f6:09:43:cb:8c:93:9e:
75:fe:64:9c:a8:26:c8:08:b8:4b:ff:5f:27:2b:41:67:a5:87:
31:d5:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:23:39 2026 by rpki-client