
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: TxwXH86S0AL1eaJerts9OTnOZjPSGNICXfI8dad3R5k=
Subject key identifier: 23:A4:6E:16:A5:40:76:BD:31:92:8B:3F:E5:23:3A:33:96:5C:DA:20
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 01A11A509C2B107EBF39D95443FA152C4F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: 01DC
Signing time: Thu 08 Oct 2026 07:00:52 +0000
Manifest this update: Thu 08 Oct 2026 07:00:52 +0000
Manifest next update: Fri 09 Oct 2026 07:00:52 +0000
Files and hashes: 1: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: q5l4Bd4ZvEwiJU4muxDBaNMU//NbroqEhltuzY9G2qs=)
2: y0t4f3SYiNI2RVeLlWE56pwZqao.asa (hash: 7OCsijFOaHb7cmOa3vj0zykIPZySXdI6fNcvKKq6Oig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:9c:2b:10:7e:bf:39:d9:54:43:fa:15:2c:4f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Oct 8 07:00:52 2026 GMT
Not After : Oct 9 07:00:52 2026 GMT
Subject: CN=23a46e16a54076bd31928b3fe5233a33965cda20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:78:1e:5e:10:fe:ed:9b:ad:4d:28:30:5d:
e0:69:50:33:34:af:7d:30:f7:51:3a:1f:3c:2e:ac:
ad:8f:52:bb:e8:24:66:c6:45:0f:61:d8:66:f6:12:
ed:fc:b0:10:13:ae:84:0a:7a:ca:6c:39:e5:f5:bc:
f3:ca:c1:df:52:bc:6d:78:36:67:6e:18:f9:9d:6f:
74:2d:d7:4f:e2:eb:48:b9:48:7e:70:ba:a9:37:f5:
fa:19:d1:b3:12:e5:87:0c:05:40:23:f0:99:c2:7f:
94:17:9a:42:1c:ae:ca:2f:6e:c5:0a:e6:79:dc:91:
06:07:aa:a9:6b:01:ba:57:24:96:af:63:b7:96:87:
3e:8e:f7:bb:82:08:74:46:e3:c3:c1:22:b0:f3:c5:
59:a1:4a:26:71:37:f5:e7:8a:a5:98:db:94:b6:03:
22:fb:2f:f3:12:46:18:52:66:d3:b8:dc:7b:d7:d9:
b5:19:87:5d:63:ce:1a:8e:67:7b:0e:01:3a:16:3b:
01:64:88:b8:f3:a0:cf:42:d8:9e:79:95:5b:69:83:
75:66:c8:cf:58:5b:f2:16:c5:5e:90:d5:d1:a9:4c:
b1:fa:93:ca:7c:44:c1:30:3d:53:31:29:8a:5f:c5:
0c:37:98:e2:5b:a8:ef:ce:38:5d:03:6f:e1:9c:c1:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:6E:16:A5:40:76:BD:31:92:8B:3F:E5:23:3A:33:96:5C:DA:20
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c8:cb:f4:cb:2d:94:d5:53:3d:78:af:fe:a8:20:c3:29:f1:
f5:0c:a9:1c:9d:2d:51:ae:3a:35:09:f0:22:a2:74:53:68:33:
bb:6c:0c:8c:0d:55:e6:0c:a3:11:94:0b:e9:c5:fc:09:f6:31:
13:3f:b7:f9:f3:c0:22:16:74:72:90:61:27:61:4f:07:f9:92:
f7:d0:68:15:eb:f0:98:70:ca:14:d0:18:e4:86:f7:3d:95:2d:
35:41:bf:2a:1f:ed:88:14:dc:57:0b:9a:14:f7:9e:6d:1b:73:
ac:41:c3:82:db:37:be:9f:82:f7:cf:31:c8:f6:3d:37:23:71:
d2:4c:29:2e:a6:5e:cb:ac:6c:61:62:91:29:48:62:84:97:83:
03:58:cf:70:a9:f4:e7:04:b4:c3:e8:02:ab:5d:21:ba:51:1e:
ef:67:fc:13:6e:58:6b:1a:be:c0:af:8a:b8:f9:8e:8d:b6:fd:
ed:58:8d:fe:61:95:d4:3a:f9:cd:0d:00:b9:a9:21:95:5c:a5:
8e:f8:32:b7:de:8b:b3:2b:0b:d7:0f:48:77:bc:a5:9f:65:70:
cf:59:d5:0f:6f:94:06:6b:6e:81:bd:ba:5e:d0:e3:20:6d:f5:
99:5a:df:ca:05:5c:47:e9:c3:8c:f1:40:9a:6f:e0:15:4e:dd:
06:dd:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:57:25 2026 by rpki-client