Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: yTL6Ct5jSKgxwdfN9lAPd27ucy2QeosHqYdMrOqt1mY=
Subject key identifier: E4:3A:5F:B4:3B:0B:A5:C4:03:B7:23:B4:EA:86:ED:75:F0:71:B3:F6
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 01A0E73F69BF1C4B8688A6FDAAD6C32AAA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:27 +0000
Manifest this update: Mon 28 Sep 2026 09:01:27 +0000
Manifest next update: Tue 29 Sep 2026 09:01:27 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: rKj+QrYLkENyOAFwFM7yDQLpuJGUo8VTxKTbYgJEFSI=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:69:bf:1c:4b:86:88:a6:fd:aa:d6:c3:2a:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Sep 28 09:01:27 2026 GMT
Not After : Sep 29 09:01:27 2026 GMT
Subject: CN=e43a5fb43b0ba5c403b723b4ea86ed75f071b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:07:c8:5a:19:71:91:c9:61:7f:96:66:a7:
9e:d5:37:c4:72:a2:7b:67:df:82:15:e5:d3:e1:e7:
52:6a:bd:33:7e:ba:af:2a:14:1d:8e:78:5f:5e:db:
d4:23:5f:f8:67:74:dc:48:10:83:89:44:6a:a6:bd:
8e:9e:1f:37:d9:76:2a:ed:02:bb:77:22:4f:cd:71:
c7:ba:43:3a:9d:32:90:5b:d5:46:ec:46:05:cc:dc:
b4:32:6b:cc:76:8b:c8:f9:23:09:5f:6d:ce:41:ca:
60:70:b2:7c:5e:f4:22:44:1a:24:2c:69:f1:79:13:
90:67:07:20:65:c5:b4:62:e5:69:23:5a:5f:7f:ed:
ae:95:23:be:f3:93:db:6e:1e:72:b5:6f:48:18:e8:
d5:e1:4e:d1:92:89:00:08:7a:a9:3d:26:a4:35:ed:
29:eb:f9:9a:2d:02:c5:28:82:ba:ec:db:4c:d4:60:
9d:2c:0e:6c:b2:77:33:17:65:89:9d:e4:7e:73:99:
4c:8b:cc:bf:66:7a:12:21:ba:54:01:4c:4d:d7:bf:
bc:75:24:e0:19:cc:7e:2b:82:48:fa:68:6d:c6:67:
74:21:5a:f0:2f:8b:d9:3e:b2:bb:6d:9f:c4:2e:2c:
a0:91:ee:81:4a:39:6c:16:02:da:f3:12:ae:d3:ad:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:5F:B4:3B:0B:A5:C4:03:B7:23:B4:EA:86:ED:75:F0:71:B3:F6
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:88:5c:e4:23:68:c6:a8:0c:c7:3f:3c:99:29:50:c0:b8:
ef:bc:2d:a6:82:bc:7b:93:6b:17:c2:f4:bf:6b:82:8a:78:ac:
fa:d3:69:ef:71:ae:a8:b7:54:43:1a:df:93:e1:e2:ab:56:ac:
8b:55:a8:9f:34:dc:12:cd:67:f5:e6:12:01:86:6d:9e:14:27:
f0:a7:90:31:8e:28:a7:2a:e2:87:59:0f:6b:5c:af:30:1d:13:
6a:3a:e8:65:80:5d:a7:91:29:de:d4:70:bb:3b:c5:1d:ff:c7:
87:42:82:1c:8a:85:ce:30:4d:76:85:28:11:1e:b4:3e:0f:42:
0d:85:d9:22:e3:7d:1e:18:85:2e:dd:86:ab:f0:8a:bf:18:2a:
0b:8f:0b:62:20:7a:b5:1b:d1:43:f7:11:74:15:b5:2d:e5:64:
8a:aa:ff:16:80:4f:5b:1e:01:00:b1:84:0f:b0:bd:f6:f7:6a:
a6:dd:27:28:1e:e8:a5:a2:cb:8c:8a:17:83:d2:f7:a1:70:03:
a1:c3:3a:05:ae:73:6c:96:a1:77:33:fd:6f:e0:88:41:bf:e2:
15:3b:34:9f:ae:5a:c4:df:dc:64:b2:69:9b:a0:0c:51:ea:78:
11:c8:36:79:6b:94:b9:57:9d:b0:e5:0e:28:ca:c3:84:85:7b:
f9:33:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:59 2026 by rpki-client