Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
File: jnPGu6-gEmUCatdHSsu5UWMvndg.mft (raw, json)
Hash identifier: LPJS+Kt2Wbj5vFpeYmS0uFot6rOkPq9+v+0YXSKQmzk=
Subject key identifier: CA:2C:29:1B:86:1A:35:2F:08:8D:6E:C4:AE:A0:5C:FC:50:96:AC:6D
Authority key identifier: 8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
Certificate issuer: /CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Certificate serial: 01A1799643024194ABDA9FD8D9C0D7FCE2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
Manifest number: 35
Signing time: Mon 26 Oct 2026 19:00:52 +0000
Manifest this update: Mon 26 Oct 2026 19:00:52 +0000
Manifest next update: Tue 27 Oct 2026 19:00:52 +0000
Files and hashes: 1: 0YjvgGTB0wJJhPhruP9KWCrNfCM.roa (hash: SIDuBF2N4OpZPuOpczIx+4rZBA6xn+jhTzoF+9TQdnE=)
2: iJTx14YVCd4rwVwaxUeywBf18lI.roa (hash: xQ7tSwmLx2KH0J0v4ZVAraiurkhkyKXt/qozzxQ0gmI=)
3: jnPGu6-gEmUCatdHSsu5UWMvndg.crl (hash: 9WYix5LoqebIrOVkKIkHTPjpm6YeLO71OEfiNvTJRpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:43:02:41:94:ab:da:9f:d8:d9:c0:d7:fc:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Validity
Not Before: Oct 26 19:00:52 2026 GMT
Not After : Oct 27 19:00:52 2026 GMT
Subject: CN=ca2c291b861a352f088d6ec4aea05cfc5096ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:e0:6b:36:0d:47:0c:0e:c0:61:8b:a4:fc:
09:59:fe:3b:e4:a4:85:0e:32:c1:9c:28:17:5d:9e:
ab:a1:ab:55:44:c2:ad:d0:d3:89:10:d6:eb:c1:32:
36:0e:c5:45:18:70:6f:ab:9c:ae:7c:0c:a8:6b:d9:
2e:5e:a2:9b:51:72:88:19:48:8e:98:f7:79:b8:c7:
ae:df:a5:c3:84:2c:54:ce:98:b6:f1:c6:0d:f7:e0:
89:89:12:3c:55:17:7b:0f:1b:af:3a:62:e2:66:9e:
c1:c5:a8:60:cb:66:d1:99:2a:8f:5c:ec:90:f1:de:
f4:55:cf:6f:f0:38:9b:13:85:0a:79:05:56:12:a5:
3f:f9:9e:03:e7:99:39:9e:1c:99:5f:d2:fd:ee:d2:
4c:39:bb:e0:41:44:b4:0b:f7:97:5c:ec:6c:34:c6:
18:50:e1:e1:d2:16:48:a9:2d:78:c3:b1:ca:9b:2f:
6e:3b:f9:5e:fe:42:1e:c4:67:ba:aa:d8:09:51:61:
a3:a5:1d:af:50:73:ae:5c:95:33:5b:2d:94:fc:42:
99:00:68:dc:87:a4:87:52:19:9e:95:ba:28:a5:3e:
76:d0:f5:a9:fd:38:b8:a5:74:92:94:a6:3f:a5:24:
2c:6a:ec:64:e3:7b:ae:78:27:7b:50:41:d0:83:a2:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:29:1B:86:1A:35:2F:08:8D:6E:C4:AE:A0:5C:FC:50:96:AC:6D
X509v3 Authority Key Identifier:
keyid:8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:da:89:e0:0a:df:0b:e0:01:3b:6f:82:d3:cc:5b:7d:d0:7e:
c5:65:16:52:f6:71:28:25:4f:01:e6:91:4d:75:6c:0d:5c:10:
95:af:b9:ec:e6:37:d4:cc:a0:c0:b4:cf:09:76:2f:7a:58:9e:
0a:be:f5:88:e2:7d:b5:2b:da:78:06:b6:b0:bd:4e:11:76:8f:
db:54:12:97:db:dd:ab:72:4d:34:97:0e:97:77:02:03:a8:ad:
0f:69:68:41:a6:dd:6c:e1:af:27:5c:f8:7c:94:4d:23:f7:d9:
d3:8e:22:29:a9:6c:49:aa:87:16:32:7c:66:b2:5a:86:af:e5:
a0:ab:71:0e:04:23:81:5c:04:a1:d3:c1:0f:59:01:4a:2b:e5:
c1:1a:21:74:6d:ff:97:f6:00:27:29:38:5b:e8:2d:33:70:75:
d0:79:c6:8c:90:d9:2b:c0:3e:44:70:ef:5f:9b:af:5e:e5:c6:
4a:71:54:9a:a6:fe:a6:7c:7d:8f:a1:89:93:5b:71:8c:ae:32:
c7:1b:75:58:5b:c8:6f:6d:a8:99:61:b2:a8:09:e0:94:37:b5:
74:ef:c0:14:dc:6c:54:5f:30:f5:22:20:81:54:59:06:a3:28:
64:07:10:f8:d2:83:2b:36:29:86:41:1e:da:fa:19:9e:10:fa:
fa:c4:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:57 2026 by rpki-client