Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: Cl6fGiFoelZ8E2IkpY7wMvpXfKSKO4AVPXPZMXovB7E=
Subject key identifier: 4A:E3:1B:51:AF:27:51:C7:D2:DA:C5:6B:2D:D0:BD:8C:48:7D:4A:1A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 01A155C108C33653FEC01566B28FA3C7F642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 20:01:16 +0000
Manifest this update: Mon 19 Oct 2026 20:01:16 +0000
Manifest next update: Tue 20 Oct 2026 20:01:16 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: 05YEugbUiUii/5xxolbF2euIRgM+2CYdn3YO69tILgo=)
2: twrQ972oI9ZzJB5lNnpdx6DecVA.roa (hash: R4HcQNJ+RCE6vVMBKIPOjPzd/TdNdxhTx9KPeq1FVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:08:c3:36:53:fe:c0:15:66:b2:8f:a3:c7:f6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Oct 19 20:01:16 2026 GMT
Not After : Oct 20 20:01:16 2026 GMT
Subject: CN=4ae31b51af2751c7d2dac56b2dd0bd8c487d4a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:51:07:27:40:1f:4a:bc:2b:a0:94:7c:43:
4f:62:15:65:39:d3:8f:3c:e9:93:9b:2b:c9:3d:0d:
0f:ef:ef:2f:cd:ff:94:89:d8:d0:b8:c7:2e:02:d0:
dc:49:3a:1c:d8:9d:ad:33:50:e2:5b:37:af:53:b6:
95:2f:5e:6a:69:3f:22:c7:36:48:4e:92:f7:5e:01:
4a:87:66:12:ee:a5:6b:c6:4e:9a:60:26:45:b0:90:
ed:81:0a:6b:6d:36:b2:82:0f:21:f8:10:d8:55:9c:
87:da:1e:26:ae:be:fb:45:91:58:25:58:93:f1:6e:
6b:b9:38:49:f5:03:94:40:6e:5f:58:ed:ee:df:cd:
f1:1e:0a:27:28:96:64:b9:71:a0:c9:d5:ac:d5:d0:
44:b1:89:b0:24:a0:42:b8:da:92:38:4d:7b:7a:8c:
c2:2e:f4:42:9a:a9:a5:96:16:d6:89:73:ee:25:31:
25:ba:16:59:82:80:5c:1f:dd:22:8d:06:52:f8:5a:
99:a0:b8:b2:f4:b4:bb:9f:f3:c2:89:f7:9a:85:74:
c5:9a:d2:d7:db:29:f0:1f:0a:a5:7d:21:57:e7:91:
ed:66:49:fd:52:8a:50:fd:17:e8:cb:6a:08:ef:1b:
50:6b:b1:d8:ba:b4:fb:87:88:d2:f8:cf:15:ac:d7:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:1B:51:AF:27:51:C7:D2:DA:C5:6B:2D:D0:BD:8C:48:7D:4A:1A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ec:cc:c7:44:4d:b5:de:1f:c7:ca:92:72:a5:2f:a9:4c:2e:
4d:1e:06:55:d9:b0:54:63:b8:17:a2:f7:c0:2c:25:ef:36:44:
74:bd:9f:e0:15:4e:12:2c:f5:4c:84:f0:25:97:05:06:25:06:
fa:03:66:a4:9c:c2:15:64:09:7b:28:f7:3f:f9:21:75:cc:db:
82:12:8e:d9:2e:0b:3a:07:86:88:15:5b:ee:82:67:d1:8c:c1:
2d:30:c4:29:10:37:e5:f5:cd:58:df:b9:c2:3e:dc:90:9b:35:
e9:a5:c4:15:20:07:76:d6:f7:74:c1:49:93:51:e4:65:73:11:
3e:08:d1:c4:35:67:08:19:a0:82:ec:e8:8d:64:21:c2:d1:f0:
d6:38:12:ca:27:4b:26:ff:70:60:66:55:43:6a:1e:3c:81:0b:
11:7f:65:59:cf:7b:1c:1a:5a:c5:69:be:7f:39:75:2e:02:a0:
36:c2:8e:45:6d:c1:82:3e:c5:09:c2:68:83:48:8c:fa:d4:20:
bd:c2:c7:f6:3b:1c:7f:5f:a1:ea:6c:9e:45:3f:22:af:ea:2a:
a8:a8:12:ca:fb:91:67:1e:91:1b:45:43:f6:34:90:bd:fb:4f:
ab:d3:f0:be:e9:c2:39:b8:86:c5:c7:22:30:eb:93:94:9d:74:
d9:5d:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:52 2026 by rpki-client