Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: 0QziOE7s7CMdmljr5VyIAicC6nxdotwDBeUmeF21h38=
Subject key identifier: 1A:26:12:41:FE:FF:B0:EE:7E:E2:10:D0:0C:A9:BB:91:DD:75:4F:85
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 01A0D200367CC6FE314673484238DF371871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0A28
Signing time: Thu 24 Sep 2026 06:00:24 +0000
Manifest this update: Thu 24 Sep 2026 06:00:24 +0000
Manifest next update: Fri 25 Sep 2026 06:00:24 +0000
Files and hashes: 1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: SP/clrvkhi6aWatVZi/FQLO6X5qd3/oGGJy/G01mwnc=)
2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:36:7c:c6:fe:31:46:73:48:42:38:df:37:18:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Sep 24 06:00:24 2026 GMT
Not After : Sep 25 06:00:24 2026 GMT
Subject: CN=1a261241feffb0ee7ee210d00ca9bb91dd754f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:fb:6e:a8:bc:77:b1:14:ce:39:d2:5e:0c:
36:ac:94:11:5d:21:a6:54:14:9a:76:f3:90:63:e8:
83:f9:8f:f2:a9:b8:9a:3f:94:ea:20:43:26:33:8a:
4f:1e:92:0c:7c:c6:77:d9:22:d6:a3:11:08:55:48:
64:14:6e:e7:c3:2a:ba:fb:11:12:7f:d0:83:0b:5d:
f2:60:e6:2f:2f:d8:fd:f1:70:26:81:ef:a3:39:c6:
4f:81:cc:56:e3:71:96:f0:85:95:66:0d:07:13:28:
31:4d:9e:4a:ad:cf:67:b0:bf:28:0a:78:99:1e:f7:
16:07:57:3d:54:cb:b4:e2:99:cf:e2:9e:99:f2:ae:
b8:9e:13:b6:6a:f1:b5:a3:19:43:37:29:8d:89:0d:
2f:5d:55:ee:e6:e8:89:25:c7:90:47:5c:17:38:14:
7d:b9:87:a2:d4:c5:6d:d9:de:69:f9:d2:8b:67:b8:
fa:6f:d3:59:59:16:83:69:35:ff:9e:2d:23:99:6d:
18:ef:a2:e5:01:83:45:76:bc:d5:42:7e:52:c6:0c:
08:d3:79:bd:2b:60:26:7a:a6:04:04:5a:13:fe:45:
4d:fc:f0:c5:45:d2:bc:2d:9a:5e:4d:02:d4:bc:8f:
ce:d9:b4:df:aa:1f:95:1c:90:56:a2:5a:98:af:d6:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:26:12:41:FE:FF:B0:EE:7E:E2:10:D0:0C:A9:BB:91:DD:75:4F:85
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:32:b1:bd:07:6c:63:bf:66:cd:9b:e9:8b:28:01:65:fc:
6b:77:f3:37:73:23:fc:38:9b:49:0b:43:3e:99:51:ec:80:54:
2d:0d:8b:76:18:f8:69:cd:4a:b9:1d:15:68:b8:df:f4:e9:43:
99:6c:3f:6c:4e:0b:a8:48:7f:10:55:f6:ab:cb:27:64:df:6d:
76:e0:f4:b9:4f:ec:93:a2:5f:8d:c0:11:a5:da:80:c4:4b:2b:
c5:18:29:d9:1e:40:b9:b1:be:7a:29:90:dd:d2:6f:0b:e6:55:
b0:d8:fe:27:08:61:43:b1:29:2c:ba:c8:26:86:1b:3e:cf:2c:
0a:e8:fa:ff:4f:c7:ed:3f:40:0e:e6:52:78:a9:dd:f2:32:30:
5a:ff:4d:16:26:aa:77:5a:78:c6:fb:82:dc:f7:40:6b:a8:27:
07:da:a5:90:45:a4:5b:1b:7b:d3:d3:9f:80:f2:e9:d4:1c:63:
bd:90:be:53:68:e3:46:bc:34:f3:38:93:08:a8:dd:cc:e1:28:
0e:f2:d6:6d:d6:54:7d:95:17:b1:ca:0e:86:a3:07:a1:ec:f6:
29:99:12:4f:59:4a:f1:e7:e7:88:2e:38:9d:2d:93:a8:89:26:
b2:b0:aa:0f:ea:80:70:8e:e1:bb:46:61:11:d8:1e:fd:32:d8:
a1:5a:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:50:06 2026 by rpki-client