Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: 7WcKyCAlMi46eQpriNYmHEDplQvCI/ZhDol54+HiDiQ=
Subject key identifier: D2:DA:34:EF:49:31:11:35:43:48:53:1B:BE:3D:0B:41:78:7D:F4:F5
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01A0C557E878F25D28C78521836505AAE7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0D81
Signing time: Mon 21 Sep 2026 19:01:07 +0000
Manifest this update: Mon 21 Sep 2026 19:01:07 +0000
Manifest next update: Tue 22 Sep 2026 19:01:07 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: Sd+VE1jINfgjUz9CIDnJluX8ALfUJA2a75IQXDpVZZw=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:e8:78:f2:5d:28:c7:85:21:83:65:05:aa:e7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Sep 21 19:01:07 2026 GMT
Not After : Sep 22 19:01:07 2026 GMT
Subject: CN=d2da34ef493111354348531bbe3d0b41787df4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d6:9b:98:2a:94:3a:de:da:ab:de:3e:61:44:
7d:79:61:4d:a5:b6:4c:2c:a2:a6:75:07:fc:a5:6b:
fa:1b:53:ae:6d:ca:7d:eb:58:1a:f3:e4:e8:94:66:
c7:b0:62:0c:15:db:80:a3:b2:80:79:12:73:0a:9a:
0a:ad:8c:ce:e8:93:e4:fb:09:43:ff:e8:36:1a:5e:
df:10:bd:42:64:b4:57:22:33:98:29:6c:ce:7f:c6:
6b:b6:15:e8:92:df:7d:02:9b:e1:21:63:9f:3d:b8:
62:0f:e8:bc:a2:56:7e:bf:f6:63:49:98:08:54:9e:
aa:ae:ae:3f:9d:bd:0f:5a:89:24:ee:f6:5f:37:ef:
e4:bc:c2:af:b2:90:1f:be:67:53:21:5f:6f:b0:17:
26:e3:62:1b:2a:2c:d8:0c:f2:61:bd:35:08:b0:06:
08:23:6a:d4:70:49:d2:01:65:9c:ad:c0:e1:62:67:
d3:a7:0d:33:72:59:71:a2:32:35:3b:82:84:e4:e1:
7a:9a:61:5d:9e:60:18:34:e5:3a:66:89:0e:5d:fb:
21:6a:11:46:dd:26:cb:a0:44:d6:9e:e3:df:fe:b4:
23:0c:65:12:e9:10:d9:39:f4:b7:40:b0:41:b0:fb:
96:11:b6:1b:89:d4:3b:53:d7:5e:4f:28:79:eb:e5:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:34:EF:49:31:11:35:43:48:53:1B:BE:3D:0B:41:78:7D:F4:F5
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f0:20:30:1f:40:91:64:f5:54:46:2c:2c:05:49:08:90:ef:
95:60:36:27:27:c9:12:78:6b:a8:07:43:c2:99:42:7a:4c:9e:
6a:19:27:c1:db:17:ec:59:69:b5:c3:ce:32:2e:07:e6:f7:30:
6a:1d:55:55:7c:2a:9a:7a:e9:58:91:8e:13:62:76:05:40:f7:
24:a5:0b:89:36:82:b8:7b:c6:0f:b1:2f:11:1f:40:b1:6d:9c:
29:4f:1d:ce:76:14:80:3b:f0:40:3b:be:a7:d8:69:cd:39:6b:
43:8d:14:82:86:77:a3:16:66:e0:7a:5c:0c:1a:39:ce:9d:a6:
ea:d7:db:df:cd:05:7c:e0:34:17:75:10:54:c0:b8:90:c1:e2:
aa:49:60:56:0d:6c:eb:e4:3d:99:c1:35:ab:79:89:9c:33:40:
bb:8d:c1:ed:8f:1c:b6:e5:19:b0:fc:4a:0b:3d:bd:55:44:34:
2a:3d:e4:17:1b:42:69:c3:a9:f3:e7:f7:46:62:b7:80:3b:b3:
20:3d:b9:4f:a0:18:dc:5e:53:85:ef:f8:45:3e:2c:3c:23:08:
8e:3c:d8:40:eb:20:e6:be:89:fd:01:71:72:9c:f9:f0:d5:5d:
92:2e:d9:b5:27:f3:b0:81:25:d4:65:19:56:f3:7d:60:0f:19:
61:a8:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:42 2026 by rpki-client