Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: 2wpyrOZX9XVLkM0DcAdqux48WpAmT+igKREJ7eFZ40Y=
Subject key identifier: 57:31:19:C5:90:09:16:F5:EB:57:6D:0A:93:69:63:69:4F:E2:04:77
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 01A0E174F8A4CAB05045AA2AF74E579BB07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 06:02:14 +0000
Manifest this update: Sun 27 Sep 2026 06:02:14 +0000
Manifest next update: Mon 28 Sep 2026 06:02:14 +0000
Files and hashes: 1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: CjJVymUMQCCaeKCxtcFZI/ATEgKbKLBAXxTAvpGbTCE=)
2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:f8:a4:ca:b0:50:45:aa:2a:f7:4e:57:9b:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Sep 27 06:02:14 2026 GMT
Not After : Sep 28 06:02:14 2026 GMT
Subject: CN=573119c5900916f5eb576d0a936963694fe20477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:cf:2d:d1:8c:64:42:7f:43:ea:a7:20:1d:
9c:9f:e7:6b:59:1b:09:30:83:f3:17:9e:48:13:2e:
98:c3:d4:1b:a5:a0:28:2f:f5:ae:d5:de:71:90:28:
a4:0b:34:c6:af:74:07:f8:7f:5a:be:6f:f1:7a:2d:
cf:67:a9:78:0d:0d:d0:fa:2c:b2:3c:6e:69:61:ee:
04:74:0b:7c:0d:07:93:a0:0d:ae:43:81:a1:7f:f2:
55:bf:95:0c:9e:e4:b5:73:65:2f:ea:eb:ba:ef:0d:
ee:01:c7:7c:aa:55:50:4c:b4:b9:1a:8a:51:da:c6:
6a:58:66:a8:85:c5:71:c8:ce:5a:f8:34:60:c9:08:
1a:43:4d:95:ef:f6:c6:9d:73:23:09:41:4d:84:56:
42:b2:0f:40:ea:a8:78:29:c4:29:32:27:4d:9b:b3:
0e:f6:b6:74:c9:ec:97:30:0e:13:ce:82:25:2c:2c:
12:41:87:50:99:74:d2:d2:0d:29:e1:e7:ac:3f:bf:
c2:b3:3f:66:a6:19:46:ba:e7:31:61:f4:47:0d:4f:
c5:dc:cd:3f:22:59:da:f0:69:3c:94:f3:02:91:e9:
49:bc:20:ef:1c:e5:91:97:df:a8:be:ce:f2:fd:fb:
84:68:68:fe:3e:3d:1a:01:68:7e:24:ce:73:bb:c1:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:31:19:C5:90:09:16:F5:EB:57:6D:0A:93:69:63:69:4F:E2:04:77
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:b1:f9:22:d1:06:ae:26:6f:35:b8:59:d2:e6:f1:c5:28:
f1:1a:6d:99:bb:7e:84:ee:c0:54:0c:93:e1:88:08:7e:b5:ea:
c9:9d:f0:ce:4a:d4:e2:70:8b:2d:bb:a2:24:58:ca:c6:d3:d6:
59:e4:84:1f:87:79:71:d2:cd:4f:e1:ef:3d:76:7e:bc:d8:26:
96:c7:43:34:dd:60:d4:ba:60:c7:44:75:9b:30:8e:3e:b9:23:
e2:9e:ff:7a:c8:c0:65:31:b9:22:af:d4:ee:3e:c3:2c:60:c7:
29:12:df:88:38:5d:cd:6c:37:c3:18:3f:8b:5a:da:93:24:22:
57:7c:b4:83:e4:42:5b:47:e1:ba:c9:70:4d:0e:1a:69:cb:7a:
66:74:35:32:8a:8a:31:d4:8f:ca:92:c5:79:44:3a:ca:8f:81:
09:e7:71:30:92:5f:31:0b:64:4f:2f:8f:50:c2:9a:bf:75:37:
d5:72:68:b3:ac:3a:5c:49:48:7c:18:f6:2e:20:91:2e:c4:f2:
6a:0a:2d:8c:70:2e:c9:eb:28:1a:26:87:eb:2c:fc:06:b2:d8:
f0:93:9a:c9:ae:59:ef:7e:41:01:46:80:50:88:7e:a9:6b:95:
b6:1a:3b:4c:a5:b6:bf:cc:79:a0:cd:a5:98:d3:d1:26:a4:52:
2a:ac:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:24:28 2026 by rpki-client