Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: IqMzVMLzPgZvCcviFS2xOQ8VDlDSLh4lm1rm/zoWQ9Y=
Subject key identifier: 40:83:0A:B5:C9:5F:BF:2E:07:EA:64:81:65:97:B6:F4:E1:B0:61:0E
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 01A103249FC18E5162C0A1CB21652DB80D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 066E
Signing time: Sat 03 Oct 2026 19:01:34 +0000
Manifest this update: Sat 03 Oct 2026 19:01:34 +0000
Manifest next update: Sun 04 Oct 2026 19:01:34 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: HxF02zxycwxo288f0WeymofmpsUc6vTrDKQfiRvKTk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:9f:c1:8e:51:62:c0:a1:cb:21:65:2d:b8:0d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Oct 3 19:01:34 2026 GMT
Not After : Oct 4 19:01:34 2026 GMT
Subject: CN=40830ab5c95fbf2e07ea64816597b6f4e1b0610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:19:bc:51:ad:32:3b:cf:27:5b:37:da:ca:
27:03:15:34:75:ef:c0:da:6d:1c:16:fb:82:c2:07:
8b:47:02:83:7a:80:1f:c4:ce:66:7d:ca:1c:ea:33:
be:16:93:63:a3:51:69:7d:74:cd:ac:d4:f6:4a:76:
fa:0d:92:3a:cd:cb:50:f0:e7:62:b3:27:cf:84:da:
fd:c3:cb:ab:35:7a:74:e5:4f:36:d0:ef:86:71:c9:
14:ba:28:64:8b:80:18:4f:e8:b7:11:63:49:ff:8d:
4a:b5:c9:0e:dc:23:4b:11:8d:23:7a:a8:44:6a:b5:
3f:fd:ce:a3:b9:10:92:8d:b8:b9:6f:e3:c9:ba:93:
94:f2:35:94:2a:2a:a9:21:19:5a:29:9d:f0:fa:8f:
91:b6:64:b2:4c:a0:e4:70:da:9c:52:24:ca:64:31:
8f:5d:f4:1d:d1:0b:a1:a2:1b:22:64:7c:a3:e6:4a:
45:3a:81:5e:a8:09:8b:57:a2:73:0c:43:f3:37:82:
a0:12:5b:32:9e:9b:57:8e:17:e5:e4:49:60:45:87:
a6:df:de:df:55:e5:a1:1b:60:28:8c:20:d7:93:73:
84:8e:38:7f:b8:fa:64:85:b9:87:c3:20:f1:f2:14:
20:35:05:6f:b2:55:ed:a5:b1:94:16:0c:89:fd:34:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:0A:B5:C9:5F:BF:2E:07:EA:64:81:65:97:B6:F4:E1:B0:61:0E
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:47:40:7e:d4:76:77:20:9c:86:7d:45:10:a6:3c:0d:f7:
64:e5:ee:93:e7:f7:d9:97:00:f3:51:86:9a:8d:31:09:3c:d1:
ed:71:61:be:7d:4d:c1:26:fe:49:74:6b:46:d6:b5:07:74:ee:
41:2e:04:64:84:36:db:ad:83:2c:c9:11:a6:04:4a:a3:c8:ce:
84:34:cb:76:a6:ad:b7:01:18:e2:4b:8d:66:80:ef:06:7f:84:
f9:7f:fd:61:41:be:23:d0:48:05:e7:45:be:1d:da:0f:09:dd:
d6:5c:3f:92:c4:e5:47:79:96:80:d8:b4:1c:24:69:aa:4c:a2:
bb:33:d8:97:22:1b:cc:51:da:a9:8c:8c:6b:9f:a0:12:b9:64:
94:20:95:52:5f:89:83:45:e1:b0:85:be:98:21:4d:18:4c:b7:
2f:50:b1:a8:06:f7:74:45:d1:2e:cb:03:eb:55:08:51:b2:40:
00:21:3e:66:7b:2d:45:be:cd:2e:6a:58:6c:30:f1:27:b8:58:
25:aa:7b:d0:fc:9b:7a:8d:b2:09:89:ab:c0:17:07:3f:66:a7:
b7:c9:6f:a7:ca:0f:09:34:07:7e:c1:97:d0:7d:19:3b:3b:83:
60:f0:17:ca:f7:38:b3:fe:ed:2c:0f:15:48:3c:a5:07:c4:96:
ab:6f:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:06:49 2026 by rpki-client