Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: fV14FT7MuKu/bll7FrzGceX/d/gjuS0cYtqk2MjrO3o=
Subject key identifier: 3B:5E:26:CC:DA:79:D4:03:F4:06:B9:CD:DD:42:11:1D:9E:92:4B:2B
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 01A0EDE6F23979B66FCD531B1F43DEBBEE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0941
Signing time: Tue 29 Sep 2026 16:02:10 +0000
Manifest this update: Tue 29 Sep 2026 16:02:10 +0000
Manifest next update: Wed 30 Sep 2026 16:02:10 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: ESPm1nnIBd/EhIWuOIYbkreM9G0D1CS4xAmiJUW49A0=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:f2:39:79:b6:6f:cd:53:1b:1f:43:de:bb:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Sep 29 16:02:10 2026 GMT
Not After : Sep 30 16:02:10 2026 GMT
Subject: CN=3b5e26ccda79d403f406b9cddd42111d9e924b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:58:75:32:c2:82:a6:81:70:bd:83:1d:e4:
80:5f:a2:94:85:dc:74:e5:5f:4f:92:c4:01:9b:03:
9c:0b:b9:40:0c:f6:7e:f9:75:b4:f8:27:09:01:d4:
08:7c:d4:06:6a:a1:14:4e:f9:91:14:32:c6:fd:33:
6f:4d:fd:fc:5a:fd:20:7d:6a:2a:47:98:cd:bf:a6:
a8:20:7c:7c:dd:fc:9b:99:d4:67:05:34:d8:fc:3c:
0a:1d:d9:b8:2f:c5:c4:39:28:18:b0:7c:1d:45:b7:
f8:01:6a:43:ef:c8:42:71:56:8b:48:e7:07:69:9e:
63:51:a0:51:14:6f:ea:6c:e1:f4:3d:fd:f9:9d:e8:
0c:f7:21:83:45:8f:4f:89:c6:47:30:bc:d6:e3:7c:
3f:46:db:fb:0c:c0:7e:15:99:60:79:bf:39:7b:af:
97:0d:37:90:64:d9:b7:7a:16:6c:b3:d9:cf:ed:c4:
8d:a9:c8:94:c5:32:e6:54:13:70:50:04:03:92:75:
fe:d4:72:d0:16:f4:c5:f6:35:4a:48:78:54:34:22:
19:de:4a:95:aa:7c:89:e6:46:d8:5d:a2:33:d1:b7:
90:72:a0:b0:0f:36:1e:48:cc:f1:6d:bc:80:42:cb:
f3:ab:3a:9c:c1:61:22:9b:fc:40:a7:22:70:1e:a1:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:26:CC:DA:79:D4:03:F4:06:B9:CD:DD:42:11:1D:9E:92:4B:2B
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:99:b3:ee:0a:ad:c8:73:35:5e:05:92:41:07:3a:aa:c5:31:
cd:a0:96:d1:2c:0a:c5:b0:8a:1e:3f:66:6e:ab:9b:70:f0:f3:
25:36:93:13:f7:70:d4:b7:d3:0e:09:ab:1b:25:01:49:ff:02:
89:a1:45:49:97:58:63:72:11:39:44:fc:b9:ee:6f:f0:35:cf:
b8:1d:87:19:ee:91:5d:2c:9e:83:f3:1e:b4:be:83:ff:33:ff:
0a:98:96:81:12:ea:62:c2:34:b9:c7:f4:fc:9f:09:bd:d7:ac:
49:3b:3a:11:d0:2e:de:bf:c8:db:06:8b:39:8a:87:44:b7:e5:
dd:85:1d:d6:15:f6:8c:7e:6b:a9:9b:ff:13:67:3b:91:9a:cd:
4f:b3:71:86:5b:b2:44:5a:fc:cf:28:c4:e0:e9:a5:0f:6d:1c:
d9:29:61:2f:23:c8:22:ab:e9:da:36:fa:c5:79:f8:7e:ea:0c:
99:f4:54:cd:0d:76:d0:d5:f4:fd:94:ab:47:8b:a9:9d:10:33:
41:fe:c4:ad:e2:5e:f0:6d:10:c6:33:58:67:b2:d2:cf:07:ac:
02:21:98:3e:a5:d4:0b:6c:02:65:3c:3b:21:9b:6b:cb:27:61:
70:fb:dd:e8:92:2a:13:61:2f:5a:9f:6e:cf:08:f5:f5:2a:8f:
1a:b4:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 22:04:13 2026 by rpki-client