
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: tHam8WignRArDcmgvHDHSyYj+3Nqh+bLSbNnAjcAiKc=
Subject key identifier: D1:29:09:74:7C:2D:A4:C6:55:D8:77:8E:12:CF:4A:58:DB:27:F7:B4
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 01A0D45D2200DBD6DF24090E99DBCF925F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 18E0
Signing time: Thu 24 Sep 2026 17:01:08 +0000
Manifest this update: Thu 24 Sep 2026 17:01:08 +0000
Manifest next update: Fri 25 Sep 2026 17:01:08 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: eeJhHSSmFJPUBkr77kb+lkMKAsgQEpDbovZXkcdi/jA=)
2: b2rG26UgVRG8w0IZDQFTt47nkS0.asa (hash: JCJ+TLu/jPVnxxZeI2DePwxG4LHTh7Ix8TBP1/ceRkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:22:00:db:d6:df:24:09:0e:99:db:cf:92:5f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Sep 24 17:01:08 2026 GMT
Not After : Sep 25 17:01:08 2026 GMT
Subject: CN=d12909747c2da4c655d8778e12cf4a58db27f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:f2:cf:62:e0:14:9e:ff:41:ba:47:7c:bc:
2f:4e:c7:76:59:0a:cf:0e:13:5c:1b:7c:d3:bf:ea:
04:00:f5:0b:66:ff:c1:ae:48:26:e5:27:53:db:12:
92:58:4b:f3:91:cf:44:bb:7d:b4:ef:c8:ec:65:81:
0d:7b:68:91:44:15:83:c9:02:7e:ff:74:0d:a8:08:
c3:f1:97:4a:60:16:ee:8d:0d:9c:25:c8:98:6f:10:
13:9e:1b:f1:4b:2b:49:46:96:22:98:aa:89:1c:6a:
29:d5:b5:fd:a3:2c:45:65:66:15:a3:49:c2:64:49:
12:7a:af:d4:c2:55:75:51:85:b6:5a:c8:c1:e7:48:
4b:a8:60:2e:11:30:2e:a7:57:fe:ce:b9:13:a3:99:
81:5e:67:35:97:2d:93:e0:fd:9b:7a:cd:d0:8c:1d:
26:69:9c:37:44:e0:f7:b7:4a:f7:30:03:9b:e8:c6:
fd:b9:f0:e4:9c:ad:74:2a:2f:aa:e1:ee:19:54:4b:
c0:8e:b8:da:2b:93:da:a6:a5:aa:97:9f:0b:ac:04:
f0:0a:fd:b8:3d:1b:bc:79:e9:0e:08:bf:98:73:14:
0c:fd:9d:c1:53:39:e2:5e:40:d9:22:33:47:af:09:
66:a0:4a:20:1a:fd:02:b6:fc:37:b6:c7:87:d7:ed:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:29:09:74:7C:2D:A4:C6:55:D8:77:8E:12:CF:4A:58:DB:27:F7:B4
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d8:f4:9b:ac:0a:09:ac:54:02:c3:9b:3a:51:db:9b:6e:ff:
5d:09:99:77:e0:b2:fa:b7:c9:65:4e:94:87:49:26:e8:ed:e8:
e9:b7:20:9b:c3:a5:16:e3:29:84:56:87:40:02:c5:e2:5a:2e:
03:ff:09:c4:d8:f3:d6:d9:78:9c:6f:b5:9d:a5:28:8f:be:77:
ed:ea:ce:6f:8f:6b:94:7e:47:c7:5a:26:69:de:69:30:3f:c5:
e3:21:50:22:4b:de:58:eb:b6:c1:68:45:03:f7:b4:db:34:ef:
6e:36:c2:63:87:83:cb:ac:db:58:1e:f9:b4:66:40:36:b2:11:
67:1e:a4:7b:1b:42:19:c6:7e:d3:6a:95:f6:12:90:b8:8c:10:
ed:c1:e6:a4:52:8a:6f:8d:14:f4:fb:13:eb:fc:6c:84:a8:80:
9d:fe:20:21:e6:51:49:8e:99:7d:a9:8c:32:f4:1c:88:ef:ae:
82:d1:0d:d9:ef:90:ac:a6:88:a6:fe:2a:69:37:d3:68:54:b1:
54:b1:34:50:99:be:79:94:59:70:9f:85:59:f7:23:96:c6:85:
a4:33:6a:c5:b8:f1:11:20:9e:fb:f0:12:ef:dc:2d:c1:5e:0c:
98:e3:58:08:02:d3:52:3d:20:5a:94:2b:a0:c5:d7:6c:64:9d:
54:d9:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:18 2026 by rpki-client