Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: R62VpzmrXVCrhHGLQgYJKvQ5r3RWkomN4NkVMS46FnI=
Subject key identifier: FB:45:89:F3:BD:6B:46:A3:F9:1C:6A:0B:61:E9:49:22:AA:65:9D:EA
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01A0C1B1EB46298515D8A59AB5CB2BA8CFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 02:00:57 +0000
Manifest this update: Mon 21 Sep 2026 02:00:57 +0000
Manifest next update: Tue 22 Sep 2026 02:00:57 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: iiYqKPa8FcVWT60yqDQaoQ++vM1dPQVt8eLXO8oyfAE=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:eb:46:29:85:15:d8:a5:9a:b5:cb:2b:a8:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Sep 21 02:00:57 2026 GMT
Not After : Sep 22 02:00:57 2026 GMT
Subject: CN=fb4589f3bd6b46a3f91c6a0b61e94922aa659dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:9e:f2:30:e6:0b:70:eb:b6:13:9c:6d:f8:
64:01:22:86:b8:f6:70:2d:c8:2d:31:b6:74:26:97:
a7:b4:7e:61:6b:96:e7:50:e7:ff:c1:50:8a:b8:8a:
15:84:82:da:32:42:50:5d:7f:7d:c8:03:47:96:18:
c5:94:cf:97:45:88:99:91:83:10:64:39:77:d0:1c:
0d:30:d2:d9:91:06:8f:3b:b9:6c:23:d7:dc:cd:c2:
0d:c9:d5:9e:72:11:63:b3:18:f2:82:85:ce:ea:da:
ff:c8:12:c7:bc:45:62:7f:f8:40:82:b2:45:30:fb:
5d:86:3f:ec:5d:0d:4c:55:58:e4:76:31:23:67:4e:
6d:16:33:5a:42:d3:c7:81:9a:6a:5a:29:4f:ec:bb:
44:01:d4:b0:a9:d2:fb:34:6d:3c:c6:66:52:7e:2d:
b6:ed:1e:2a:a4:d0:e6:27:a0:11:78:a8:e4:7c:77:
30:f1:01:a0:d0:da:0d:25:c3:f1:8e:13:a2:0d:f1:
23:55:5a:d4:54:0e:e8:c3:7c:ab:6f:ba:00:c2:2a:
9d:37:15:29:a6:05:0b:9a:b5:58:57:ef:21:e4:13:
0d:52:67:3e:dd:c6:38:61:8e:82:88:eb:4f:90:9e:
7b:bc:28:29:b4:ac:47:2a:7d:3d:e1:b5:b4:8a:6d:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:89:F3:BD:6B:46:A3:F9:1C:6A:0B:61:E9:49:22:AA:65:9D:EA
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c7:32:db:01:ba:a6:51:b1:0e:21:1e:b9:a5:d2:9e:89:b3:
79:76:58:35:9e:6a:1b:ca:97:16:a0:f6:b6:03:88:0a:71:90:
95:80:a7:ca:10:2c:55:60:7c:da:ed:fb:6d:69:40:44:c8:5e:
a1:14:55:7d:0b:50:46:72:90:46:41:71:7b:f9:68:22:82:a0:
50:67:7a:e1:a2:a7:00:48:02:36:74:fc:9a:f2:ce:3e:a4:e6:
58:5f:36:ee:70:90:47:07:11:c3:68:5f:a7:a8:a0:1b:42:ed:
be:1e:44:a0:a2:d0:62:bf:42:2f:85:f5:72:2e:ac:22:a5:e2:
d9:fa:e6:55:3b:52:f5:eb:86:a9:1f:69:ba:ba:8c:83:59:fa:
fd:a7:21:a7:ba:b2:78:da:a7:54:09:c6:a1:c6:e5:9b:74:0c:
87:19:a1:98:f0:18:21:8a:41:f2:7c:44:ff:44:a4:f9:3b:1e:
e4:e2:ce:88:6d:81:04:99:b4:61:f9:4f:65:a0:f5:8d:82:7d:
67:02:54:d4:91:4e:ae:cf:e4:d2:d9:16:f8:06:77:f8:2b:e0:
60:6b:29:0b:d9:34:54:54:38:42:2d:f0:ad:d0:23:72:cc:f0:
68:5c:6c:42:16:36:fe:f4:bb:83:6a:4c:27:a5:a8:17:39:06:
3f:ca:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:07:36 2026 by rpki-client