Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: 0UmYRKOpncOIOvdb+ttmxROTuR/dOqnq7yDZOSooNwA=
Subject key identifier: 5C:99:86:93:93:11:1A:FC:F1:AF:4F:A2:2B:6B:45:61:3A:2A:70:0C
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 01A0C1E88DE569C07114678FC0EEFE1C832A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 1A25
Signing time: Mon 21 Sep 2026 03:00:38 +0000
Manifest this update: Mon 21 Sep 2026 03:00:38 +0000
Manifest next update: Tue 22 Sep 2026 03:00:38 +0000
Files and hashes: 1: P2oeyWo8SpEDQbw0DLQ8DP_geQk.roa (hash: PEQ4xvXLXvHc+J3GPvJUsqvRxaO/0pnd2viLxQ0rLmw=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: ggVZahvmm+G+MUESxy1mrDU1406B3iDLHo7PhQ/Itg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:8d:e5:69:c0:71:14:67:8f:c0:ee:fe:1c:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Sep 21 03:00:38 2026 GMT
Not After : Sep 22 03:00:38 2026 GMT
Subject: CN=5c99869393111afcf1af4fa22b6b45613a2a700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:f3:6b:a6:d7:ba:4e:b9:9c:75:4c:71:4e:
60:2a:fa:a0:8f:8a:d4:76:20:29:58:3f:a4:bb:b9:
00:dc:50:83:9e:72:52:d9:7c:d4:a8:bd:b7:da:c6:
c7:e6:0b:96:de:7f:fe:a4:07:a9:b8:49:da:12:cf:
cf:80:13:dc:52:23:0b:87:21:0c:8d:69:fe:23:a9:
d1:db:fb:c7:21:42:1d:c4:a4:4b:f5:de:ac:b8:50:
96:11:4e:4a:51:35:9e:bb:e7:4a:d3:36:7b:a5:2b:
e3:40:0c:79:e5:9f:ab:b8:a0:6e:1b:03:6f:5c:14:
e7:20:53:64:80:5c:2d:89:31:9d:b5:a1:3c:87:2f:
c3:49:e8:e1:7e:00:7c:42:55:2b:dc:f3:fe:fe:92:
33:a8:ef:b1:b7:69:6f:62:29:97:36:2b:eb:63:7b:
6c:cd:9c:a4:c7:fe:01:ad:8b:4c:d2:66:fa:8c:b7:
03:d7:dc:ba:a6:50:97:14:2b:32:70:40:fb:0e:91:
de:e1:87:d3:08:32:16:29:13:ee:22:9c:58:2a:9b:
d0:71:99:95:1d:5e:41:0e:73:bd:da:45:75:63:33:
90:ec:c9:00:c3:d4:a8:d0:85:d6:fa:81:16:48:03:
d7:c9:dd:93:dd:e0:4e:ae:f5:ad:02:5d:23:ac:96:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:86:93:93:11:1A:FC:F1:AF:4F:A2:2B:6B:45:61:3A:2A:70:0C
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:de:71:54:cb:87:bc:8d:49:78:c7:d2:43:58:bd:c7:36:7f:
b1:5d:bf:96:aa:f3:f1:4f:19:52:72:7b:f4:48:68:30:ca:fd:
11:58:dd:07:cb:40:fd:2e:0b:59:6c:d5:86:b2:44:00:a8:4d:
cb:e7:2b:24:61:a4:59:33:e3:c6:38:08:a5:c7:24:6c:6d:39:
66:3d:76:84:74:83:8f:3c:61:84:2a:72:33:f8:44:f5:21:db:
d7:fb:ee:e1:ba:cd:42:2d:3f:1c:f5:0c:f0:50:87:4c:92:ab:
dd:21:6e:cb:42:78:40:ef:c9:a7:3c:f4:38:5a:4e:2a:f1:fa:
06:5b:5c:05:d7:4d:15:16:3f:1f:4e:b2:7a:92:e1:41:5c:2d:
b6:cb:22:9d:e8:06:09:fb:fa:ac:6c:99:10:4f:8e:ed:91:cf:
f7:18:4f:6e:7a:f5:c5:45:d3:78:bb:bb:3b:b4:8e:24:b0:dc:
de:ba:6c:3c:c1:25:b7:16:48:56:33:bb:a1:f7:f4:0f:ba:1b:
81:25:11:69:0b:9c:c8:84:4f:7f:f6:56:72:c5:bc:cc:7a:50:
a7:65:60:0a:b4:9a:76:d9:07:b0:04:7a:78:f1:8b:1e:d5:71:
01:7b:ff:a0:36:c2:23:22:4d:69:28:6e:61:de:be:a3:cf:6c:
33:83:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:14:39 2026 by rpki-client