Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: asjABaTLvmuHwSgtBpAbutYuqDXaDp8tiv6pdUEnTho=
Subject key identifier: 74:B0:0E:30:B7:C3:B9:8D:6D:8E:64:55:BE:CA:D9:68:AF:8B:92:C8
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 01A0E8535E442199FB02B8106652D9C2F993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: 01C4
Signing time: Mon 28 Sep 2026 14:02:52 +0000
Manifest this update: Mon 28 Sep 2026 14:02:52 +0000
Manifest next update: Tue 29 Sep 2026 14:02:52 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: o5lH8pFJfCD8D34jHaHJYjSU3zgW44gw6+j4tA0xEwA=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:5e:44:21:99:fb:02:b8:10:66:52:d9:c2:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: Sep 28 14:02:52 2026 GMT
Not After : Sep 29 14:02:52 2026 GMT
Subject: CN=74b00e30b7c3b98d6d8e6455becad968af8b92c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:d4:16:01:6d:d2:b3:a8:c5:6b:f3:d9:e4:
ae:61:15:19:eb:37:49:90:00:7e:fe:ce:7b:37:63:
3e:d1:42:a7:0a:46:2b:12:4b:38:80:c9:d7:9c:d8:
f9:c1:7c:b3:eb:fb:4d:53:a9:25:59:fc:26:30:ac:
8e:52:b7:aa:2b:36:8f:7c:d9:72:f6:e9:7e:4d:48:
df:c1:7b:53:c5:a7:80:ce:5b:3e:b7:a6:c3:de:2c:
b7:5f:0e:74:2e:df:95:a0:c3:75:18:2e:d2:69:b6:
96:93:71:15:37:2a:77:62:a9:2e:93:65:f1:5d:06:
73:22:f2:dc:10:e4:57:d8:52:c1:b3:53:fe:ba:c7:
d1:aa:ac:d4:ea:89:a2:0a:ff:12:01:ac:9f:28:07:
0d:5d:1f:0b:8f:06:e4:79:70:3c:6a:a4:03:94:b4:
95:8f:81:95:74:f5:6c:71:67:d9:08:72:38:18:91:
60:f7:f9:37:72:0d:80:e0:cf:b9:30:91:e1:43:24:
af:65:f1:f5:5c:20:fb:5d:55:d8:b6:f8:23:e1:17:
04:cb:46:bd:3b:59:b5:1d:ce:2e:34:59:3a:17:4d:
d1:d8:44:c1:a6:ef:34:5b:46:47:ae:4d:33:36:5b:
1a:c9:db:c8:91:86:4a:fa:f2:f6:b0:9f:d8:f9:30:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:0E:30:B7:C3:B9:8D:6D:8E:64:55:BE:CA:D9:68:AF:8B:92:C8
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:69:e4:f3:42:9d:ad:ff:1f:7d:11:21:8d:43:e6:76:3c:
ee:83:61:9a:93:2c:84:d1:57:0a:28:27:68:30:e5:9e:9b:ff:
99:cf:b9:56:ad:12:de:ce:79:3d:32:92:39:53:e4:fd:ab:15:
dd:96:00:cd:1c:ae:01:2d:a1:14:0c:09:8c:12:cd:3e:b4:f4:
24:26:3d:9e:2b:98:7e:84:68:79:0b:6b:37:32:46:ad:dd:b3:
9d:18:ad:f3:f4:2d:c3:4e:9c:cb:1b:28:b3:89:41:43:3d:56:
f6:9e:f0:38:e7:5a:1c:28:b9:50:ba:4a:6b:ca:95:b0:c2:9e:
9b:da:47:63:5e:1a:9d:92:96:98:fd:35:b1:4f:6e:c6:b9:6e:
24:06:b0:5d:8c:6e:07:39:5f:91:61:37:76:af:dd:87:e7:49:
21:da:bf:63:db:6a:d9:f7:2b:62:1f:ef:b2:9e:6f:a5:c9:61:
e8:ed:6c:cb:b8:77:4f:3d:6b:02:d9:b4:ee:f6:dd:d7:11:ba:
0b:17:b7:f0:18:35:8a:13:81:99:c7:c7:79:18:07:c2:d2:bd:
4e:e6:f9:ac:b2:e7:f4:91:2f:27:9a:14:a7:74:9a:4b:10:97:
f5:c3:6e:ce:d0:84:1e:f7:90:a8:3e:b1:9f:6b:dc:61:ab:33:
e3:15:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:08:32 2026 by rpki-client