Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: 2bG19tWTCvTzoqrExmek/0b0QQDrMKDcVFQYnYugdHI=
Subject key identifier: 63:F0:37:6B:57:64:B4:2B:AD:EC:35:67:5E:91:39:3A:68:3F:7D:77
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A1DE7156C0F6D6760DACB001EE7D839CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:02:12 +0000
Manifest this update: Sun 15 Nov 2026 09:02:12 +0000
Manifest next update: Mon 16 Nov 2026 09:02:12 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: H8zSn71z1W7b61eY1SUhujPFsoIGot7TJ20LYc9b0lQ=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:56:c0:f6:d6:76:0d:ac:b0:01:ee:7d:83:9c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Nov 15 09:02:12 2026 GMT
Not After : Nov 16 09:02:12 2026 GMT
Subject: CN=63f0376b5764b42badec35675e91393a683f7d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:c6:44:a5:84:84:dc:eb:d0:30:39:93:2a:
94:27:9f:25:82:f5:85:fb:fe:47:61:d9:75:14:dd:
cb:1d:fa:41:71:b2:67:49:1d:73:7d:a0:6d:8a:61:
80:bf:d2:70:0b:7c:a0:66:74:a3:40:58:0b:5e:ef:
d9:cb:5e:3a:1c:7a:22:0f:8a:15:cd:f0:11:c6:09:
fe:e4:53:18:3b:46:fa:59:83:15:34:fd:28:5c:aa:
a9:81:36:49:da:62:c2:fc:fc:60:56:a9:d1:cd:63:
4b:4e:84:62:8d:04:e0:30:75:38:df:ae:6f:74:03:
00:63:f6:44:99:ca:77:4a:4e:87:c0:78:a0:ba:a7:
bd:4f:dd:16:a2:5f:7e:59:8f:94:22:bc:7a:f9:92:
b0:54:3b:bf:ed:b2:61:42:3e:fd:45:de:7f:33:19:
06:93:67:10:72:0f:a2:f6:0e:49:ee:17:12:8c:ef:
31:6e:5c:6d:47:e1:24:b7:73:72:59:3d:f5:50:02:
36:c3:be:45:db:2f:56:59:19:0a:b8:14:f3:32:b8:
e7:ff:65:5a:a1:bc:7e:b5:e7:dd:3c:c2:26:c5:5e:
3a:f5:41:13:64:dd:01:cf:70:15:30:71:48:6e:5f:
17:71:7b:c6:9e:96:d8:33:c2:45:25:e0:ca:a0:da:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:37:6B:57:64:B4:2B:AD:EC:35:67:5E:91:39:3A:68:3F:7D:77
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0b:f7:25:d1:11:f0:25:62:72:a2:30:12:85:d8:8e:10:1b:
75:38:60:80:3f:94:03:ce:f5:67:dc:cd:d2:22:3f:e3:0a:32:
1a:77:ed:a2:64:b0:50:81:5f:b6:53:03:f5:26:76:93:7a:0c:
11:23:8d:54:1c:5f:39:5a:14:c6:88:83:94:f7:1a:62:7a:67:
15:f8:36:c2:bc:d8:85:2f:92:20:ac:bd:f4:7a:2d:2a:ca:45:
89:03:34:c2:12:6d:f7:e0:06:a5:50:0e:61:ee:98:9c:64:fe:
36:f8:c6:21:5b:2a:5e:be:47:06:12:e2:c7:3e:08:61:a5:34:
43:79:00:7f:16:d3:90:a4:f1:55:7d:e7:20:37:52:29:f7:69:
53:89:c3:21:42:e6:9b:17:d4:ca:6b:91:35:03:c4:0c:07:e1:
37:f9:b8:aa:11:98:08:f9:e1:ee:63:f8:6b:33:47:9e:9f:8c:
4f:7c:84:6d:dc:5e:3b:17:ab:0a:d3:25:2b:c0:04:61:fd:cd:
3b:05:0e:79:93:9f:fc:92:56:00:c2:93:2f:9a:7a:6c:f2:c1:
99:da:60:79:62:b4:1f:55:ea:20:79:75:b9:73:5c:47:23:28:
96:a3:25:0b:22:8a:ee:bc:a7:ba:b3:84:3c:0e:08:c8:72:06:
6f:af:6e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecVbA9tZ2DaywAe59g5zqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTlmZjFjNmY2ZTJjODUwYzI5OTExNzlmZTUyMWJjMTE2
Njc3MDMwHhcNMjYxMTE1MDkwMjEyWhcNMjYxMTE2MDkwMjEyWjAzMTEwLwYDVQQD
Eyg2M2YwMzc2YjU3NjRiNDJiYWRlYzM1Njc1ZTkxMzkzYTY4M2Y3ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLGRKWEhNzr0DA5kyqUJ58lgvWF
+/5HYdl1FN3LHfpBcbJnSR1zfaBtimGAv9JwC3ygZnSjQFgLXu/Zy146HHoiD4oV
zfARxgn+5FMYO0b6WYMVNP0oXKqpgTZJ2mLC/PxgVqnRzWNLToRijQTgMHU4365v
dAMAY/ZEmcp3Sk6HwHiguqe9T90Wol9+WY+UIrx6+ZKwVDu/7bJhQj79Rd5/MxkG
k2cQcg+i9g5J7hcSjO8xblxtR+Ekt3NyWT31UAI2w75F2y9WWRkKuBTzMrjn/2Va
obx+tefdPMImxV469UETZN0Bz3AVMHFIbl8XcXvGnpbYM8JFJeDKoNqIPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPwN2tXZLQrrew1Z16ROTpoP313MB8GA1UdIwQY
MBaAFCWp/xxvbiyFDCmRF5/lIbwRZncDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQv3JdER
8CVicqIwEoXYjhAbdThggD+UA871Z9zN0iI/4woyGnftomSwUIFftlMD9SZ2k3oM
ESONVBxfOVoUxoiDlPcaYnpnFfg2wrzYhS+SIKy99HotKspFiQM0whJt9+AGpVAO
Ye6YnGT+NvjGIVsqXr5HBhLixz4IYaU0Q3kAfxbTkKTxVX3nIDdSKfdpU4nDIULm
mxfUymuRNQPEDAfhN/m4qhGYCPnh7mP4azNHnp+MT3yEbdxeOxerCtMlK8AEYf3N
OwUOeZOf/JJWAMKTL5p6bPLBmdpgeWK0H1XqIHl1uXNcRyMolqMlCyKK7rynurOE
PA4IyHIGb69uDA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:49:25 2026 by rpki-client