Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: 57k2f59Ewca7HDVzLY5zyIXubHjYBZGpUlBXf7RP9hY=
Subject key identifier: B6:E6:48:73:35:AA:BC:2E:41:3E:52:3C:EF:58:A6:97:DD:BF:B9:A9
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 01A1AB27404553DED22A625040CBA5640AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1A05
Signing time: Thu 05 Nov 2026 10:00:38 +0000
Manifest this update: Thu 05 Nov 2026 10:00:38 +0000
Manifest next update: Fri 06 Nov 2026 10:00:38 +0000
Files and hashes: 1: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: DcTc7gmTJeeudxOjnyPS+Q4WD/304Tx5u3ecc5u2NcE=)
2: YdEKnNui8kZkJHSxbtIPmvbJjr8.roa (hash: 0ClyNA/E0qLCFvTgVmstwCaGn8TFoS5MPxpcfIn67MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:40:45:53:de:d2:2a:62:50:40:cb:a5:64:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Nov 5 10:00:38 2026 GMT
Not After : Nov 6 10:00:38 2026 GMT
Subject: CN=b6e6487335aabc2e413e523cef58a697ddbfb9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:19:66:e1:64:fa:01:75:03:ea:18:fa:3f:
8f:97:37:72:86:29:2d:e6:1e:6f:18:6c:6f:86:4c:
50:a1:6b:82:65:6f:cb:1c:40:9f:1a:a3:00:28:78:
84:d9:1f:68:6d:f6:1b:84:f0:bf:48:69:e6:60:0a:
4c:a3:d3:bd:17:f1:15:77:37:79:6e:19:69:7a:2e:
cf:00:08:f1:f6:b7:4f:eb:e5:96:4c:11:3d:c8:9a:
3d:29:1a:75:62:76:11:39:77:2f:96:c8:fa:25:4b:
86:c0:bd:5a:3d:de:24:c7:10:e0:1a:e0:6b:17:5b:
dc:3c:06:14:d8:f5:9a:15:e5:b6:05:67:01:1f:a6:
45:64:df:c1:4f:3e:ee:f1:55:46:79:1d:47:c6:05:
46:cb:04:4f:06:5b:1d:a4:46:66:bd:93:74:06:ae:
f2:70:6a:c0:25:28:ad:d4:80:2d:64:98:28:85:dc:
ee:1a:47:b6:29:77:bf:05:df:18:1b:a2:af:36:7f:
72:8f:78:52:00:df:d5:b5:00:54:1c:6b:62:89:22:
ed:86:95:e8:26:5d:24:ea:88:ed:cc:2d:62:9f:c1:
bd:68:46:e9:64:27:cb:e1:f0:7c:8d:36:e8:77:5d:
a1:3c:ad:63:8c:ea:c2:9b:84:b2:62:92:dd:e1:94:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:48:73:35:AA:BC:2E:41:3E:52:3C:EF:58:A6:97:DD:BF:B9:A9
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:be:e1:f7:ce:a1:60:51:c8:96:f6:57:5b:d8:4f:dd:d2:6a:
96:de:07:71:d1:b2:47:fa:22:78:dd:6f:0b:10:04:54:3c:39:
39:06:4c:e9:19:93:7b:c4:12:a8:3a:72:b4:a6:d6:04:ce:23:
76:fc:25:5b:9a:f3:e1:05:0c:8c:bd:86:da:88:71:ad:72:6c:
09:fb:d7:5c:1d:ad:ea:96:39:f4:0a:50:44:80:66:9e:89:3f:
49:49:7e:90:e2:24:22:96:49:c1:0c:14:e3:0a:6b:90:80:dc:
17:e6:27:d4:b0:b4:53:4c:6f:e3:46:4b:fb:40:84:f0:62:c7:
93:34:bf:23:b7:ce:6a:24:f2:c7:96:c1:e9:e8:38:5e:58:c9:
b1:33:20:3a:2f:e1:47:28:1f:cd:19:89:3c:e4:9e:f6:0e:0e:
26:8a:41:1c:b8:8d:31:96:72:1f:d6:24:0a:b7:75:3b:57:a9:
c8:ce:91:43:fa:7a:de:c7:16:50:07:6f:7b:94:3c:64:4b:e7:
23:d6:04:8a:e5:3f:c9:1e:6e:28:5e:05:0e:3d:1c:43:9d:62:
e8:3b:1f:dc:34:8e:63:f4:18:46:dc:59:9f:1c:6d:1c:66:2c:
51:65:27:e9:35:e2:d6:c1:fd:32:c1:11:91:3f:d5:6f:87:d0:
86:d3:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:27:41 2026 by rpki-client