Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: +x40TnLDHvUuG534tnRQQuu+2eO04d7J4N47hlurq7Y=
Subject key identifier: B2:D7:49:04:04:4C:E6:33:61:C6:CF:04:A4:01:1C:C0:3C:83:1A:76
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01A0D87278F5A75171986B676F9CFF3C9A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1A78
Signing time: Fri 25 Sep 2026 12:02:55 +0000
Manifest this update: Fri 25 Sep 2026 12:02:55 +0000
Manifest next update: Sat 26 Sep 2026 12:02:55 +0000
Files and hashes: 1: 1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa (hash: PAIPjGd1pVMf6ElqeD0qtwPAX/uK0ZcotcD7BQI5DL8=)
2: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
3: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: GG3d+Mmq+wba+/UAWsMiFDt5WDXgbeOrHReHc/AY3hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:78:f5:a7:51:71:98:6b:67:6f:9c:ff:3c:9a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Sep 25 12:02:55 2026 GMT
Not After : Sep 26 12:02:55 2026 GMT
Subject: CN=b2d74904044ce63361c6cf04a4011cc03c831a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:56:02:28:48:48:25:65:97:6c:46:fb:9e:
f6:e1:1a:4a:8d:d1:3b:f3:7a:13:85:3f:77:f4:e1:
f8:a3:13:ab:00:e6:c8:e0:d0:3f:ea:b6:20:56:e1:
31:2b:f3:2e:db:5d:14:f0:0e:c5:76:91:a8:6d:a8:
9c:49:22:78:c0:b0:4d:48:0f:9e:ad:fe:06:08:ff:
b1:1b:42:4f:14:3e:b7:7b:03:00:9c:fb:72:79:6e:
70:e3:07:22:2c:fb:b9:ba:44:30:73:86:66:56:11:
9c:f0:c4:aa:8c:ef:64:02:3f:00:57:cd:01:92:9a:
f7:90:7b:93:43:09:20:7b:ef:76:11:00:fe:6b:51:
59:72:4f:6b:9c:fd:0b:3e:c8:50:e8:0d:a2:42:db:
ab:90:67:e4:c4:e0:c6:e8:ad:f2:d1:ef:39:5f:4c:
8e:df:79:40:e2:35:37:c2:09:ef:7a:63:f9:4c:c2:
39:2a:e9:b8:34:fc:02:60:98:14:fb:a1:91:d8:f1:
59:7d:3c:79:62:70:8b:32:d5:88:03:8a:d1:06:ca:
de:77:f9:44:ab:41:ad:27:8d:e1:cc:69:4e:b1:66:
04:a9:ee:41:df:01:93:eb:29:14:4f:01:fe:49:60:
2b:e5:4f:64:a1:20:74:db:98:b1:66:1f:14:c1:e1:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:49:04:04:4C:E6:33:61:C6:CF:04:A4:01:1C:C0:3C:83:1A:76
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:40:09:24:91:2f:97:31:31:13:de:59:d7:e4:02:a3:b9:
e2:d5:de:22:b0:f7:0a:d7:a4:33:66:91:ad:2e:f5:ca:03:10:
32:44:06:be:40:f4:bc:9e:4a:89:f7:cc:2d:fa:a0:0b:83:f5:
1d:58:20:fa:20:37:3f:06:96:86:33:57:fb:a3:47:f9:d0:1b:
b8:52:8f:a0:59:4c:4a:4f:92:61:8d:41:fc:c3:91:f3:0f:f1:
b6:be:bc:d2:9e:67:b3:ac:d9:77:ce:3a:e6:5f:27:39:58:7b:
d4:3b:c0:e8:92:4c:42:8f:51:fd:82:ed:d9:25:5c:a2:3f:62:
8f:84:dd:b6:31:d3:d4:d1:b0:b1:ae:8b:c9:ca:17:59:a2:e3:
ea:53:d4:a2:0c:79:2e:bd:85:9a:4b:45:ef:1a:40:c2:3d:64:
c1:c5:2a:5e:ac:7b:29:25:3d:b7:50:c0:0c:a4:30:b5:d9:30:
be:89:63:2d:a0:aa:03:bb:40:53:c5:a6:3d:7d:32:22:6b:42:
2b:5c:bf:d1:02:99:ee:c0:30:8b:e6:7f:db:53:70:bb:5b:ba:
a3:9d:51:ba:59:38:c9:b9:2a:b9:01:88:b7:61:0b:51:0f:63:
75:42:e1:c9:99:0b:3a:22:ff:91:ef:88:ad:e5:4f:51:51:37:
df:dd:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:55:38 2026 by rpki-client