Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
File: Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft (raw, json)
Hash identifier: 0gQibn/NW5ws+NbR3WUohqHmh4ij+cNutSGFyEZCc2Q=
Subject key identifier: 64:0D:30:D5:26:56:C6:C3:FC:48:0B:77:B0:46:1D:93:37:6A:1C:7E
Authority key identifier: 26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
Certificate issuer: /CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Certificate serial: 01A0C858772985EBC3E72BF2EC682E1653FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:35 +0000
Manifest this update: Tue 22 Sep 2026 09:00:35 +0000
Manifest next update: Wed 23 Sep 2026 09:00:35 +0000
Files and hashes: 1: Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl (hash: x2rIgHbqShuiunZrc5Xg5aV2ZkNnzzF0ipNioYn4P7s=)
2: gvef48JXo1j7ZIIHvaaFbWy4pN8.roa (hash: 60oMLYPg6N0/DunwA9zatVT67Q2Jj0J5vjnOjDO2jPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:77:29:85:eb:c3:e7:2b:f2:ec:68:2e:16:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264e01d4fd90263681e9cbd6783ec8b0a61e6ebe
Validity
Not Before: Sep 22 09:00:35 2026 GMT
Not After : Sep 23 09:00:35 2026 GMT
Subject: CN=640d30d52656c6c3fc480b77b0461d93376a1c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:23:32:52:64:33:b8:c3:8d:92:4b:4e:71:
20:36:6f:0a:0c:9b:c5:62:e7:53:01:80:18:02:5e:
05:35:a3:38:4b:b3:ed:9c:87:17:e2:ee:1f:82:8f:
fe:0a:80:ac:32:5e:f9:30:db:a9:33:a4:be:b4:78:
25:96:b0:53:66:fd:e6:6b:2f:0d:44:d3:39:6f:50:
f6:a4:8f:9b:86:4b:cf:95:f1:db:fa:d3:9e:c8:13:
29:eb:67:2f:86:88:48:2a:6e:f7:49:45:9f:8f:e9:
ec:bd:d7:7b:1e:5b:08:3e:e7:cb:a4:e4:76:52:6a:
c9:30:b6:c1:d4:52:22:8d:3f:dc:78:0a:71:9e:86:
40:bf:c8:a5:b9:48:5e:2f:c2:86:58:8b:00:40:2b:
f7:c1:ff:74:21:1f:e4:fd:2e:d6:64:76:e1:09:9c:
0e:5c:09:f5:ef:8e:fe:b2:0f:75:18:57:17:cd:f1:
ec:d1:14:01:fe:a4:98:b2:27:2d:e7:8e:35:0c:5a:
d8:a6:1d:d4:5c:dc:32:5f:ad:4e:63:c0:f0:cc:02:
ee:93:2f:c1:d5:e0:ad:63:9b:12:78:ec:04:d7:c0:
93:d2:ea:b3:ca:75:36:90:d8:c4:81:d8:3f:40:b8:
6c:7a:4d:de:da:b0:ec:1b:26:d6:a8:10:b0:b7:32:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:30:D5:26:56:C6:C3:FC:48:0B:77:B0:46:1D:93:37:6A:1C:7E
X509v3 Authority Key Identifier:
keyid:26:4E:01:D4:FD:90:26:36:81:E9:CB:D6:78:3E:C8:B0:A6:1E:6E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk4B1P2QJjaB6cvWeD7IsKYebr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Jk4B1P2QJjaB6cvWeD7IsKYebr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:09:1f:7b:6f:6b:b2:4f:57:6c:ae:2e:0e:06:37:53:74:
d9:13:b1:f3:98:df:2f:81:35:10:36:db:a6:d2:09:0c:8f:c8:
7b:6f:ae:31:c6:40:3f:fb:02:0e:74:57:6e:d4:ef:87:75:89:
8a:28:e8:e4:53:21:9f:0b:d4:f2:b8:d3:b5:34:0b:bb:2d:3f:
ff:6c:e6:2a:88:8b:71:75:e0:8d:35:a0:06:b4:53:fe:1c:db:
5b:cd:82:e2:bd:b7:27:40:3d:66:45:4c:3c:4f:d6:5b:87:7e:
25:22:52:aa:d7:95:5f:49:d2:93:7e:1f:5e:e3:34:60:f9:da:
39:c2:14:d8:f6:bf:b9:e2:a2:7f:3f:2c:76:19:7c:3e:8d:b8:
a7:38:22:e3:e4:b7:3a:07:31:66:b1:19:9b:23:f7:eb:d3:6c:
45:95:05:3e:a8:17:71:ea:70:a3:77:5a:b8:47:d7:30:80:f7:
8e:63:1a:88:30:27:27:20:f9:18:3f:57:ff:50:79:b0:08:23:
4a:0e:83:84:e4:15:05:fe:27:5c:06:86:55:3d:20:02:40:df:
a5:8c:75:3f:20:67:09:1e:88:6f:2e:f6:21:14:aa:9d:16:f0:
b9:3c:80:88:ee:69:5e:7e:96:46:65:e1:7d:39:8d:98:a3:97:
36:89:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:59 2026 by rpki-client