Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: uOR0UcHReA7bYU0MY4wrEhfu7tRE9b4AnU7t92nAohI=
Subject key identifier: 0F:C5:19:05:3C:4B:CA:81:DB:04:AD:1E:6C:68:51:09:EA:F0:7D:63
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01A0D5A69143A2886C02E5E5AD457F7C5561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 1942
Signing time: Thu 24 Sep 2026 23:00:58 +0000
Manifest this update: Thu 24 Sep 2026 23:00:58 +0000
Manifest next update: Fri 25 Sep 2026 23:00:58 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: sMMALGL9FPkJilDA8tpCym0e0pcJgcyl/DGLHuVKxJ0=)
4: NRkgaVVbGPlU9PRi7XOtROH8HCw.roa (hash: cjEd82kk/8w7HH0bDUYDKw8XlWkIMQ64dB85P9sX5Lo=)
5: P2J1nRzzQX1ckJSyajMxiE_aMP4.roa (hash: p7r4VtJbeTT6fBJB2r4iHlIyVAkJmdfB7fMidGSZSww=)
6: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
7: dic-beMQVUVF0zagysWITlXCfjU.roa (hash: D7rvEWiRJKlSjA45JriEa76ARTGZmdX9q7QqLCkAqf4=)
8: f_cerM733PAzffZ3Zf5cTv0AkDA.roa (hash: Rlu/ttDLjzeFI6hWoUDXOiSv/xiv8HyOJ0iPVTPMuoE=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:91:43:a2:88:6c:02:e5:e5:ad:45:7f:7c:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Sep 24 23:00:58 2026 GMT
Not After : Sep 25 23:00:58 2026 GMT
Subject: CN=0fc519053c4bca81db04ad1e6c685109eaf07d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:62:cd:0e:10:98:f5:7e:0e:50:c1:a7:24:
27:e7:00:a7:cc:29:f8:b5:09:52:18:39:fe:88:6a:
52:93:d7:91:56:7f:cf:a6:fb:29:93:63:4b:6f:56:
cf:f3:a5:69:93:17:61:08:97:08:d1:07:ef:31:a4:
bd:fa:19:a6:f1:a6:c0:53:f3:21:7a:a3:ba:7b:6b:
e0:c9:c0:14:7d:1f:ae:f6:fa:f4:f7:be:94:8b:c5:
a4:9b:a7:32:7b:f1:23:25:56:c2:ab:4b:ea:ca:31:
3f:8f:4a:8a:eb:a1:7f:1b:be:32:aa:92:a6:24:30:
93:bc:19:cb:fa:6a:61:28:aa:ae:a5:ef:72:fc:76:
29:2d:d8:5b:fc:2f:e8:64:66:d6:96:73:f6:5b:a3:
71:23:8b:24:be:a7:40:6e:c7:e4:66:d8:9e:79:39:
3d:a4:d2:0b:c5:de:7d:bd:6e:59:8d:bb:ea:97:be:
8e:ec:b8:0d:ad:0a:4b:b3:c1:60:4f:3c:24:81:75:
08:99:ef:bd:42:a2:66:e7:41:04:4e:f3:8c:72:08:
26:ea:31:63:2e:14:1e:75:21:d7:02:ae:34:ca:9b:
45:f5:0a:e1:7c:4f:89:fb:de:96:7d:77:8a:53:db:
45:91:e9:bc:7b:1e:39:de:49:1a:aa:c3:72:d0:a6:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:19:05:3C:4B:CA:81:DB:04:AD:1E:6C:68:51:09:EA:F0:7D:63
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0f:31:55:18:d5:87:e4:9c:91:e6:15:84:8f:09:f0:98:e0:
95:92:23:ed:77:b4:70:18:9e:41:d7:cb:71:70:9a:5f:a8:e9:
d1:9c:ac:ef:fd:d4:d3:83:d2:fe:06:e1:e7:0b:0a:b1:db:02:
9e:d2:51:2d:95:db:74:fe:5a:03:da:01:79:e0:d1:13:e8:be:
53:ca:5b:92:cc:1c:61:89:08:ad:61:9f:3a:73:71:c5:eb:27:
65:47:3b:fc:1c:15:08:8c:22:04:ba:f8:c5:45:e3:77:d3:20:
d0:bb:13:f2:eb:90:4a:99:fa:a8:3a:b1:95:40:31:2d:89:84:
12:2b:23:68:34:96:ad:5f:ba:90:83:b6:44:f8:29:bd:17:50:
a2:91:a3:60:de:94:44:4f:06:fd:78:cc:de:2c:a2:92:97:0c:
ab:4f:88:b0:65:0a:e3:54:15:b6:6b:2d:46:08:ff:15:39:04:
98:b0:53:50:7d:08:fe:cc:dd:94:60:0c:c1:e3:8a:60:a6:df:
38:f2:65:fa:f1:00:65:82:ca:d7:71:2b:de:d6:ff:f2:c9:d1:
4f:4f:bc:1b:53:e9:33:21:38:06:12:8a:c6:78:60:91:0a:c3:
d0:40:9b:b9:6d:84:97:d5:56:16:40:07:c3:aa:e1:aa:82:93:
1c:db:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:06:38 2026 by rpki-client