Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: 58fJf7Ie4udzF+uX9D6WuzhXwiTXoTObjVs/6HHrgzg=
Subject key identifier: 2B:29:06:92:D8:8F:C0:CC:81:C6:40:2E:76:3D:E4:C5:84:72:DC:B5
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01A0DA5F76F70B5E341581DF0589E7E3A6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1A79
Signing time: Fri 25 Sep 2026 21:01:24 +0000
Manifest this update: Fri 25 Sep 2026 21:01:24 +0000
Manifest next update: Sat 26 Sep 2026 21:01:24 +0000
Files and hashes: 1: 1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa (hash: PAIPjGd1pVMf6ElqeD0qtwPAX/uK0ZcotcD7BQI5DL8=)
2: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
3: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: Aja3JdL+diT5RS+AFYtOcSnYWV1Q9RLuXt9kTuc5zCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:76:f7:0b:5e:34:15:81:df:05:89:e7:e3:a6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Sep 25 21:01:24 2026 GMT
Not After : Sep 26 21:01:24 2026 GMT
Subject: CN=2b290692d88fc0cc81c6402e763de4c58472dcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:64:3e:16:d6:14:0e:e6:cd:a4:72:6d:0a:
15:11:0c:45:bb:2b:36:05:ea:24:8b:23:0d:1a:6f:
ee:6e:e2:3f:76:57:20:36:f5:22:85:29:16:97:6d:
52:d7:09:a1:50:0b:4a:86:30:0a:e8:6e:b1:45:d5:
87:bf:77:4c:ff:b5:75:78:ce:05:4f:97:10:37:61:
65:15:a7:fc:2b:74:ad:31:36:ec:bf:5f:5e:05:88:
fa:d9:41:d4:00:0f:27:f0:93:ee:27:a6:dc:37:54:
a9:fc:3a:97:6b:28:00:8b:02:02:34:9b:ef:33:88:
b9:c1:ef:09:10:f4:37:e4:af:60:82:ca:2c:1b:19:
c8:65:b1:dd:32:55:25:d3:fa:b3:1c:44:8e:4e:7b:
64:2c:09:98:c5:0f:26:c0:0e:92:0f:39:fb:1f:44:
62:17:0e:7f:24:ad:f4:5a:32:fb:7c:d8:e9:67:b9:
f4:a7:81:3b:a1:83:7a:4c:a8:25:1a:1c:1f:59:67:
3d:09:9e:bf:21:bb:98:7e:e3:ce:93:ae:32:4f:d0:
8b:6e:f1:35:a3:0c:d7:b0:f5:ea:d4:c6:f1:3d:de:
72:5c:a5:59:de:0c:f7:66:d7:e2:cb:95:a2:33:bf:
69:87:cc:45:b4:74:dd:60:10:c8:2f:a5:41:fa:41:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:06:92:D8:8F:C0:CC:81:C6:40:2E:76:3D:E4:C5:84:72:DC:B5
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:01:21:15:b3:f4:12:b7:f1:71:ca:10:1f:b9:d4:11:aa:bc:
c9:4c:12:45:60:a6:47:6f:8a:b3:cb:03:5d:fa:70:74:35:aa:
2c:3f:95:72:d1:e5:12:df:b3:e2:a4:ae:29:38:d7:f6:74:c4:
17:38:c1:35:02:1c:c8:89:e7:4e:30:e3:ef:32:a5:d2:2c:ac:
4f:cb:bd:ec:a9:b1:a6:ed:9e:36:6d:00:d0:da:52:73:be:7e:
b6:a5:eb:e4:88:95:1f:ec:35:47:87:27:4f:c7:32:6b:e9:b3:
63:8f:20:df:05:f5:0f:87:c7:09:c6:8b:e5:06:cb:62:c5:4a:
be:28:2c:e9:fe:3b:24:7e:b8:ac:3d:f6:cb:ea:f2:d9:ce:50:
f6:f0:d6:a9:30:1d:b4:3c:bb:67:ff:a9:a7:65:ba:75:d6:55:
a1:a3:7c:f0:88:16:f0:85:57:3a:1e:d4:9d:82:25:22:4b:c9:
4d:5c:19:1f:01:4f:91:58:2f:6f:84:54:24:22:6a:81:d8:ca:
7f:0a:e6:77:e8:3a:98:db:7c:41:7e:7e:51:fc:80:2f:81:05:
95:11:b2:f0:c5:90:70:9e:40:38:24:a7:66:3d:dc:89:06:0a:
e7:71:11:c8:d1:d8:34:9f:ea:84:5d:70:a9:51:31:b7:cd:be:
ef:b0:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:15:41 2026 by rpki-client