Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
File: JjycXuMYJkcwl2-vxykVM-vasK4.mft (raw, json)
Hash identifier: ackarhaSB6r1hB+GD0JdYjVBMrO1D3om9qVqlkKayZg=
Subject key identifier: 98:71:A9:17:7B:BF:19:BE:78:BC:E0:9B:11:29:52:F0:02:7C:CB:88
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 01A0E5518FECE5E921D16A3B4C3AE9259126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:02:02 +0000
Manifest this update: Mon 28 Sep 2026 00:02:02 +0000
Manifest next update: Tue 29 Sep 2026 00:02:02 +0000
Files and hashes: 1: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (hash: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=)
2: JjycXuMYJkcwl2-vxykVM-vasK4.crl (hash: Z4/ubQR1FqhL1Xt2pL8VD6Bmz0xCBstnZGjeI8O5H84=)
3: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (hash: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:8f:ec:e5:e9:21:d1:6a:3b:4c:3a:e9:25:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Sep 28 00:02:02 2026 GMT
Not After : Sep 29 00:02:02 2026 GMT
Subject: CN=9871a9177bbf19be78bce09b112952f0027ccb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:67:cd:30:84:02:4a:97:62:c3:26:dc:96:
07:7c:af:05:a2:b0:25:c7:e4:22:ce:9e:8d:e5:dd:
7f:41:b3:90:16:90:72:a8:63:84:dc:23:72:88:44:
d7:81:9e:e4:74:46:6f:14:71:f0:ad:97:05:6b:55:
5c:ad:d5:de:5a:b3:fb:2c:16:6f:ad:a1:cc:bb:b1:
0a:ed:14:cb:ed:08:b5:9f:42:df:92:e3:f4:4c:81:
2f:d5:8f:a1:8c:f8:ac:4a:86:38:3f:66:d3:8c:64:
d4:6d:a7:4c:6d:c9:f5:4d:0b:a3:64:61:5a:90:a0:
64:c5:3b:56:ee:0d:cb:b1:93:78:d1:48:61:b4:04:
ba:b1:2d:88:ca:2f:62:fc:ee:e0:14:5c:27:54:34:
61:28:fb:33:40:1f:fb:f5:f2:fa:23:e4:1f:70:06:
7a:d2:36:4b:49:ba:88:84:ca:c7:43:35:f3:82:34:
96:87:c3:a9:4f:59:1a:2b:d6:fa:ec:e3:5f:3a:54:
c1:8f:e8:04:4b:dc:9e:f8:fd:0c:d2:3f:62:5e:df:
61:95:a8:47:d9:23:b4:13:f1:fc:4a:f1:be:47:61:
cd:96:47:65:d0:32:42:d4:d3:27:d6:96:39:52:92:
e2:be:74:df:10:1c:2f:d3:eb:2d:4a:7f:3c:2d:9b:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:A9:17:7B:BF:19:BE:78:BC:E0:9B:11:29:52:F0:02:7C:CB:88
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:df:c5:d4:23:a0:3b:65:72:da:cc:d7:cb:6f:a5:05:a8:
17:24:b4:98:0c:94:48:32:bc:e5:36:0d:5a:56:92:ba:94:46:
e1:01:c0:59:9d:69:69:11:b6:59:fd:5e:cf:68:af:87:ec:ea:
0b:be:28:d4:dd:6e:61:15:5d:3f:73:cf:b0:a5:42:ae:a7:c8:
60:9a:67:8e:2a:c5:c8:84:61:87:34:9a:21:9b:c8:09:e1:5b:
ce:ec:f7:bc:9b:6d:d5:d8:66:a1:e9:37:5d:b9:d2:63:9d:93:
79:7e:f5:aa:1b:1f:2c:05:d5:09:8e:00:c4:25:87:5e:bc:c7:
77:3e:c9:83:87:7d:e5:9f:69:49:34:b8:c8:ee:21:b4:83:57:
24:d0:56:19:54:26:79:3d:fc:28:bf:d8:49:24:0c:9f:4f:72:
7c:c2:a5:8f:98:26:9d:c3:38:23:47:f0:f8:8b:47:7b:3e:bb:
0f:78:e1:2c:15:da:3c:4d:5e:c1:1c:5f:f0:5c:40:3a:77:00:
e1:55:8e:ce:93:cc:24:c3:ac:be:b7:c0:32:4d:6c:ed:26:ab:
e6:69:85:68:f7:ad:d5:20:8b:3a:bf:a9:19:31:c6:3e:a6:35:
ad:51:00:dd:ce:c4:8b:9f:fd:fa:27:73:b0:b0:99:a9:a9:b4:
a7:c3:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:57:05 2026 by rpki-client