Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
File: Jmscgrse0MbVtor0ikkZbgg8qUA.mft (raw, json)
Hash identifier: UjNHk1ok0GkQToqotzX3K+Cv6BCSwDEnilKKMDXdeGo=
Subject key identifier: 23:44:0A:CF:F6:16:D6:12:A6:52:28:A3:89:28:51:84:7A:25:02:C2
Authority key identifier: 26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
Certificate issuer: /CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Certificate serial: 01A0C28D6624E9D3D31240B4399B945E6990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:41 +0000
Manifest this update: Mon 21 Sep 2026 06:00:41 +0000
Manifest next update: Tue 22 Sep 2026 06:00:41 +0000
Files and hashes: 1: 0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa (hash: Z/MGgq3usUbBDj63sBfwekaCeZ5MTpb0EczCqCY/mHo=)
2: Jmscgrse0MbVtor0ikkZbgg8qUA.crl (hash: ODVgkJgTEbLueQHVoCpDpG8uGqSZxo/mNSns0SdJENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:66:24:e9:d3:d3:12:40:b4:39:9b:94:5e:69:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Validity
Not Before: Sep 21 06:00:41 2026 GMT
Not After : Sep 22 06:00:41 2026 GMT
Subject: CN=23440acff616d612a65228a3892851847a2502c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:c8:55:3b:42:be:d1:f2:30:4f:6f:64:74:
72:24:7c:b7:48:ef:7f:6c:44:db:87:4d:3f:31:49:
72:df:a5:20:ec:e9:24:e3:2d:65:8a:28:8e:5f:cc:
a8:4d:e4:00:5e:fb:83:32:71:c5:3e:e4:c7:de:bc:
53:6e:4e:38:40:91:44:5a:1d:ee:96:6f:45:18:22:
8a:af:94:35:01:2a:2f:96:0a:e4:39:0d:9d:4e:bd:
82:1e:a4:49:b3:09:40:bb:42:cc:16:ef:42:48:84:
67:e6:fe:6e:67:f0:e7:6d:78:c6:f3:22:7f:96:a5:
e7:85:e3:7d:0a:de:da:5f:a5:2a:60:6f:55:66:10:
f4:36:72:e3:28:7f:e3:b3:2f:9e:3e:88:e1:78:db:
b1:9c:fe:cd:94:a3:b0:5c:99:a6:4c:85:ed:ee:88:
fc:bb:8f:ba:ea:56:49:22:60:50:27:56:a4:b2:55:
dd:47:43:e6:76:00:b1:0f:8c:cc:40:c3:35:01:a6:
8f:74:4e:83:97:60:53:94:b1:ad:71:51:03:60:3c:
fc:d0:77:24:44:63:2d:7e:8a:5c:60:82:f8:37:c4:
db:1f:bb:24:5d:7b:3e:7a:76:f6:36:80:64:82:82:
54:41:3f:f9:1d:a1:7f:e1:17:32:b7:2a:aa:32:95:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:0A:CF:F6:16:D6:12:A6:52:28:A3:89:28:51:84:7A:25:02:C2
X509v3 Authority Key Identifier:
keyid:26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:00:a2:8e:d7:10:58:03:ae:9a:7f:57:e9:d4:80:83:d5:
61:e9:66:2f:df:73:0a:e1:6a:03:77:67:11:28:e3:6c:a9:77:
75:7b:b2:76:d0:f5:d0:eb:bf:96:c5:0f:c5:d7:31:3e:60:87:
df:bc:ac:2f:5e:d1:7a:5b:ec:b3:bb:51:16:a9:dd:ad:23:89:
b5:cb:cf:da:60:4f:f1:4c:24:95:6b:7e:05:1f:05:64:89:26:
6a:c5:b8:45:31:33:56:93:96:55:d1:75:b7:21:b0:a9:13:8f:
95:04:37:06:c7:2c:1f:ae:19:04:0f:2a:33:65:01:df:6b:a3:
a2:f0:1b:9e:98:c8:28:db:ee:e3:25:bf:e5:f4:fe:94:19:0b:
f1:5e:95:d6:ea:78:a3:ec:99:e5:d5:a6:ad:2d:46:30:70:63:
e4:d6:34:04:06:cb:35:e4:a0:0c:6b:92:4b:ca:44:8b:e3:40:
7c:8d:8a:5e:df:e1:52:19:1e:ea:93:45:ab:ff:f8:31:7c:d4:
f8:32:7a:d6:73:9c:db:d5:17:89:93:a4:d3:be:b7:e4:b9:b9:
27:6e:ef:c1:d2:7f:e1:cb:fa:3a:f1:8d:56:f2:55:b0:06:86:
63:39:9c:dd:fe:ef:b1:51:a9:8d:a2:ee:6d:3c:a3:28:09:88:
50:e4:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:21:33 2026 by rpki-client