Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: z7ILmTOBCm5eaVIIZjpIUtq3hO5qHB+Lzm2um+WIZZk=
Subject key identifier: A5:A8:DA:00:DE:02:98:4D:EE:D5:4E:DA:5B:7A:76:09:E9:4C:75:F9
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 019FF9B6F0272913BEDC55EDF37A476034B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:02:23 +0000
Manifest this update: Thu 13 Aug 2026 06:02:23 +0000
Manifest next update: Fri 14 Aug 2026 06:02:23 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: UedzA5RehfsSz851L9aVmA8868OamsdGXWQErPcq77A=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:f0:27:29:13:be:dc:55:ed:f3:7a:47:60:34:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Aug 13 06:02:23 2026 GMT
Not After : Aug 14 06:02:23 2026 GMT
Subject: CN=a5a8da00de02984deed54eda5b7a7609e94c75f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:9f:88:62:a1:9d:4d:b0:ff:0f:b6:6d:fa:
32:bc:58:7c:b0:83:40:ef:d5:7e:78:c3:8e:1d:97:
70:b6:5c:aa:43:a3:f3:65:78:20:06:d6:2a:7e:32:
46:86:12:26:2c:ac:2d:ad:0c:54:17:83:6c:3a:80:
ab:b5:1a:a4:ad:ab:1c:a4:76:64:c8:51:35:b2:a7:
b8:bd:e1:1f:6f:2e:ca:56:2e:28:9a:06:fe:e6:77:
7c:59:e0:4c:0c:f0:e2:6e:2a:e8:e8:12:00:64:03:
7e:ce:76:13:28:56:06:3c:dd:49:f7:cf:b7:3d:fd:
70:a5:b8:9f:bf:a4:86:9b:d0:7b:cb:89:c5:de:4a:
73:87:93:96:ff:71:f3:22:1d:19:db:83:f0:2d:10:
97:a6:ef:14:71:75:16:33:42:47:7a:df:68:84:3a:
93:34:2a:64:2a:d8:f2:2f:3a:00:d3:7a:16:b9:31:
00:14:67:a2:7b:7e:0a:54:b4:de:e7:44:d5:d0:46:
d5:1d:ce:de:ea:08:01:49:da:fe:e1:04:1b:d6:00:
41:31:9e:6b:ec:5d:2b:c3:ba:24:92:28:76:e4:f2:
8d:b7:80:44:d9:80:65:7f:3c:05:0d:e0:da:b0:ae:
b2:89:8f:c2:82:4f:0f:40:1c:f9:3a:69:db:c7:23:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:DA:00:DE:02:98:4D:EE:D5:4E:DA:5B:7A:76:09:E9:4C:75:F9
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ed:03:6b:8b:5e:53:bc:f3:5f:f3:86:cd:d2:ac:4d:1b:f0:
d6:68:a8:f7:20:b8:24:f2:82:77:5e:d0:ea:4b:4f:41:ae:42:
fc:00:13:8a:70:14:33:23:6a:97:e9:e8:13:a2:c7:15:b8:6a:
9f:fa:bf:b1:82:3a:66:7f:4c:10:d4:3b:e6:de:a1:aa:47:bd:
bd:76:e4:c5:41:08:33:55:53:18:b0:a9:29:dc:78:f8:a0:92:
30:4f:dc:f6:fd:fb:1d:d7:3f:bd:81:0d:9e:3a:25:be:46:89:
60:bd:59:00:a9:83:f8:f5:fd:b0:4f:b7:97:e7:e2:19:e7:f7:
f2:a3:74:65:04:83:23:01:87:7e:ec:f7:c2:3c:bf:17:70:fa:
45:c3:9b:5f:ff:b6:e2:f3:6c:fc:cd:e8:bd:2a:e4:de:8c:8c:
53:5e:e4:9f:0c:33:8d:d3:8a:60:c1:5f:cb:b4:cc:a3:ec:2d:
34:c7:81:3d:1e:96:b7:26:f8:39:43:cc:b9:b6:c8:fc:d0:c4:
24:89:98:c4:e2:e7:dc:00:9b:99:01:16:c6:2c:53:5f:32:25:
7d:43:13:a6:4a:0f:40:a3:a8:1c:d9:43:ea:21:20:10:f7:85:
df:8a:0e:97:c4:55:e1:1d:5e:6d:05:2a:f6:00:9e:fb:ab:2c:
a6:5d:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:48 2026 by rpki-client