Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
File: JcD6eLaa0vVeql_nVQHcRcnpE5U.mft (raw, json)
Hash identifier: P/oUTsKwfFzU3QinDRnUl3qF6tU/JP7R+Z4yQcT2n+c=
Subject key identifier: CF:18:41:2A:95:7E:7B:AD:1E:6D:37:10:21:10:B4:50:4F:E3:4D:46
Authority key identifier: 25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
Certificate issuer: /CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Certificate serial: 01A0D9BB5E5AA1E21A42903086D3F9582385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:10 +0000
Manifest this update: Fri 25 Sep 2026 18:02:10 +0000
Manifest next update: Sat 26 Sep 2026 18:02:10 +0000
Files and hashes: 1: J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa (hash: WWFjE+lIB3z6WE11pSejgMWzVwphSyxuCF61My1RNok=)
2: JcD6eLaa0vVeql_nVQHcRcnpE5U.crl (hash: hK8LwbvColakTKQzoiFAbyKTdj8p6r1SQJXnfcPpM+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:5e:5a:a1:e2:1a:42:90:30:86:d3:f9:58:23:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Validity
Not Before: Sep 25 18:02:10 2026 GMT
Not After : Sep 26 18:02:10 2026 GMT
Subject: CN=cf18412a957e7bad1e6d37102110b4504fe34d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:74:c4:31:50:5c:14:28:60:19:25:9c:b9:
36:70:fe:0e:ba:fd:26:65:5a:ae:2f:d5:e4:99:80:
4f:0c:2f:bf:b3:30:94:04:15:87:d5:8e:db:e1:76:
3b:6e:c5:1b:cc:ba:b0:b4:ab:c2:a1:38:cb:6d:88:
e8:41:d0:03:b9:26:7d:11:59:c8:16:3e:4e:e3:1a:
05:dd:c8:a6:2c:49:55:43:24:6d:c9:c1:74:af:aa:
62:fa:93:bd:d9:c1:39:f5:c9:d1:ea:f9:d3:e9:49:
59:40:df:8a:aa:50:26:2e:12:52:82:31:b5:13:1f:
64:1a:e1:f6:ad:0d:40:be:e1:68:04:9f:f3:30:e8:
af:d4:07:42:c8:46:6d:c2:8e:43:44:4e:6f:19:e3:
f7:2e:d8:38:14:0a:6f:a9:90:24:b9:24:67:b1:f9:
6d:8d:88:a5:d4:e3:61:31:d8:be:f9:73:5d:58:f7:
20:89:85:f8:36:37:5b:b5:19:7f:e6:f7:71:d2:27:
b7:d7:b1:b8:ef:83:dc:8f:c4:2c:69:74:f9:64:2d:
98:b5:be:e5:e5:e5:91:44:2f:0c:ff:6c:85:b7:9f:
a5:d0:34:aa:43:ec:52:50:4f:10:b1:5e:08:85:73:
de:be:ff:a6:4c:98:ed:d5:98:7f:d8:30:ea:4e:d0:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:18:41:2A:95:7E:7B:AD:1E:6D:37:10:21:10:B4:50:4F:E3:4D:46
X509v3 Authority Key Identifier:
keyid:25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:20:f6:24:4e:84:18:f1:82:8f:7d:da:d8:73:ca:58:ad:
49:9b:83:aa:3e:be:99:f4:81:d7:fd:50:21:19:60:5e:ee:49:
36:40:a2:cf:93:dc:b9:5c:5c:72:95:75:74:fc:6a:5c:a5:a1:
e7:d8:fd:d5:0f:2f:85:bb:2a:fb:d4:6c:55:0c:09:d9:b3:14:
05:62:a9:36:53:83:f6:75:b0:91:7a:68:5d:e8:e7:a7:d8:d9:
ab:c8:7c:16:3f:6b:f1:be:e4:de:47:59:a7:cb:d0:be:40:e7:
5b:9a:bf:75:a8:4e:4d:ff:b7:7f:7c:90:6e:24:79:58:82:bc:
c6:03:ac:70:49:97:26:25:10:80:6d:83:5d:ea:1d:70:8a:33:
61:ce:44:22:9d:15:4b:32:fb:e7:02:6c:ec:ba:34:ea:91:ee:
cf:6f:ea:88:1c:98:dd:ee:1e:5a:a0:70:e3:03:d0:fa:b4:03:
9d:be:1f:01:31:e6:29:9f:19:5c:6d:65:c4:76:3b:6c:d4:90:
fd:87:b4:41:a1:1a:da:d4:e5:13:88:f6:d6:08:a8:ff:45:66:
b6:9d:1e:7f:53:7e:f9:08:8c:06:5f:0e:7e:1c:01:14:5a:7d:
64:b2:01:d0:1f:70:f6:b7:59:6b:6c:f1:73:d7:06:9b:16:6c:
94:5b:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:25 2026 by rpki-client