Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: v1Akz+qoRRMPOE4+kiOmZYThGNXrxD5Tu1K9eoTZKEs=
Subject key identifier: 5A:52:19:DE:66:A5:4E:88:09:B4:8B:70:2B:9B:7D:88:8F:F5:6F:50
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 01A0DCF29238631A17DBFC649553936CD777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 0D52
Signing time: Sat 26 Sep 2026 09:01:19 +0000
Manifest this update: Sat 26 Sep 2026 09:01:19 +0000
Manifest next update: Sun 27 Sep 2026 09:01:19 +0000
Files and hashes: 1: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (hash: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps=)
2: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: iI0MSStLLelezG2i/1OqN7aFbtGjpw20jfidYHebBjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:92:38:63:1a:17:db:fc:64:95:53:93:6c:d7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Sep 26 09:01:19 2026 GMT
Not After : Sep 27 09:01:19 2026 GMT
Subject: CN=5a5219de66a54e8809b48b702b9b7d888ff56f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:a0:4b:45:3b:92:f3:e4:4b:aa:f1:ee:ba:
de:df:08:2d:f3:a1:e5:c4:50:73:d3:3c:09:06:88:
96:c6:fb:11:5d:9d:62:a5:7d:54:0c:ea:83:6b:c3:
a2:04:34:c1:fe:f5:af:f9:0e:8c:8a:ff:2b:17:7e:
ed:33:74:4d:ad:40:22:05:eb:3a:68:28:bd:4f:a9:
cb:05:91:5d:d5:02:bf:2b:cd:ed:96:f1:9c:1e:50:
dd:84:56:72:c7:fb:d4:98:87:e5:1a:ae:12:0a:ba:
ea:a5:d9:87:ca:ce:db:31:e9:3f:19:43:f5:7e:29:
0b:a6:2e:24:4f:28:aa:93:97:be:06:6d:00:cf:ea:
09:9e:be:73:9c:55:bc:73:e9:a9:d6:c7:f7:82:8f:
c0:27:c8:98:f5:54:47:dd:c7:84:cc:98:b0:5d:40:
82:d2:e6:c9:7e:41:a2:39:7e:80:86:31:19:36:e3:
96:26:70:89:28:87:6c:60:87:de:ef:64:c5:0e:dd:
92:dc:a6:04:c0:f5:dd:3a:52:08:b8:f8:0e:e8:6b:
a4:5a:92:3c:00:6c:b5:95:fc:38:e0:29:c5:ab:b1:
74:f5:72:a6:1b:86:ee:42:b2:01:a1:7d:66:88:f5:
6a:52:fc:14:a2:1b:11:a2:dc:b1:a3:b9:f5:59:9e:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:19:DE:66:A5:4E:88:09:B4:8B:70:2B:9B:7D:88:8F:F5:6F:50
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:34:c6:f1:5d:77:d6:96:a7:fa:31:7a:9b:5c:ce:5c:aa:37:
98:b4:fd:72:9c:18:cf:e0:05:2f:57:30:a4:4e:3c:d1:3f:75:
62:f8:d7:14:5f:68:f4:6a:93:7c:43:6b:15:3b:4e:47:44:94:
c8:31:58:36:67:1b:2c:64:3e:46:0c:4f:65:e6:57:c6:d3:ce:
c7:06:13:79:cf:82:14:47:5f:ae:b8:e1:ef:ff:24:15:36:a9:
da:31:3d:f0:a7:dc:1c:47:95:66:d8:ec:8b:4a:90:e2:2d:08:
56:21:1c:79:1b:ce:f9:32:8c:e3:ad:03:19:56:f9:18:27:8a:
ef:af:4a:39:62:cc:fb:1e:fe:1d:14:40:47:f2:c0:94:24:b4:
a4:12:30:98:90:eb:63:2b:ac:f8:11:ec:46:7f:08:9a:d8:21:
06:be:44:b7:ff:fd:76:81:ba:16:a4:18:e7:21:bf:9d:9c:42:
b1:7b:98:64:b2:5f:92:e4:a1:27:3e:94:f2:3c:7c:3b:e1:f1:
98:31:4f:06:5c:9d:15:06:5f:18:6b:e3:e8:fd:ab:5d:d7:c7:
71:76:96:12:53:1c:ce:52:8a:7d:76:64:48:30:58:88:61:5f:
30:76:26:b0:9d:a4:2a:6a:39:83:85:d2:13:23:0f:e8:f5:b9:
80:04:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:47:25 2026 by rpki-client