Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: lOnnZjOvv+ai27y7cj4AfRJmbKS5bM7reZFr9E5INWk=
Subject key identifier: 68:E3:50:BF:9D:8F:30:DB:2B:85:F0:0C:37:07:DA:AA:85:EE:C4:C2
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01A113AA515FBF6CDF7C76104C45AF276E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1A11
Signing time: Wed 07 Oct 2026 00:01:31 +0000
Manifest this update: Wed 07 Oct 2026 00:01:31 +0000
Manifest next update: Thu 08 Oct 2026 00:01:31 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 1mv/03ztd0x4oDvo0Bwx4eFfMO/vwMfmYNTD+VPpISo=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:51:5f:bf:6c:df:7c:76:10:4c:45:af:27:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Oct 7 00:01:31 2026 GMT
Not After : Oct 8 00:01:31 2026 GMT
Subject: CN=68e350bf9d8f30db2b85f00c3707daaa85eec4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:3e:2d:f1:3c:7a:e9:ee:3a:6d:20:e2:af:
03:da:18:b9:c8:b0:66:65:35:f6:4b:5a:b0:33:0e:
46:eb:50:1a:e8:d7:94:a0:51:a9:17:09:f8:e3:1d:
7c:4e:80:85:28:1a:2f:d3:60:51:e5:c7:6d:1c:28:
81:b3:5b:6d:f0:7e:40:de:0b:ad:8f:23:0d:9e:1d:
54:93:65:cf:97:ef:3b:de:36:86:32:fd:03:06:af:
07:b0:e1:e6:c0:bf:42:1c:7f:b1:a0:17:5f:66:73:
d0:40:79:c9:d4:96:36:5a:9f:3d:05:e1:b3:b6:ca:
04:d4:c9:fc:be:e5:74:3d:1c:46:1f:39:a8:56:d9:
74:19:84:08:d2:e2:26:f9:d2:74:02:95:36:19:9b:
18:b7:97:25:6c:ad:3a:05:ee:e6:7d:1b:06:ac:d8:
29:f9:61:a2:d2:6c:28:90:2c:7d:7f:8c:d8:25:bb:
76:e9:69:b2:df:52:1b:75:4f:9a:39:96:48:86:fb:
34:85:41:87:0a:55:9f:5e:b9:f5:e1:33:ca:0e:3a:
7d:22:05:85:6b:ff:4f:53:5e:ca:cf:a1:97:4a:72:
b9:23:7a:72:a2:40:85:5c:ad:d9:74:60:2b:90:40:
b0:a5:e9:f7:a0:86:2b:72:25:5f:fc:b4:fe:10:cd:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:50:BF:9D:8F:30:DB:2B:85:F0:0C:37:07:DA:AA:85:EE:C4:C2
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:0c:f0:2c:37:e6:48:98:18:0e:a6:b2:f8:20:bd:fe:c9:
34:c6:10:5f:c7:c8:ec:b9:e2:ea:ac:a9:d1:d3:8d:fe:89:44:
d6:45:7b:99:d6:48:4d:46:ec:d6:78:68:bd:a4:11:b8:1e:e2:
52:11:60:fb:9d:9a:ed:bf:e7:78:9e:b5:89:3e:b4:4f:e4:a1:
9f:89:c2:8e:6d:a8:75:e7:55:57:c9:6e:83:99:e1:f9:29:04:
f4:8f:52:31:0a:b9:9c:68:6a:e7:fb:35:01:0b:1c:c6:74:e5:
7d:68:00:87:a2:84:f4:bb:1a:a7:3f:c2:68:8b:a9:0e:31:1b:
ea:0c:2e:95:a1:2d:b1:c9:ae:2c:09:7c:14:f7:07:47:07:98:
4f:ef:04:5b:28:f5:5b:6c:f8:1d:36:c2:75:b1:da:16:62:77:
3e:6f:10:62:9c:eb:33:73:2c:37:f4:02:63:6f:27:ac:12:0e:
0a:4b:17:52:6c:5d:cf:c7:93:88:4b:2e:81:a8:ac:18:8e:71:
7b:56:4b:5c:57:e4:36:3a:7b:d0:5c:e8:34:f3:42:9e:51:13:
51:48:90:44:e2:b9:4b:09:6b:d1:3c:5d:51:0f:06:c2:45:14:
23:23:42:23:13:09:2e:92:f0:40:91:8a:62:14:01:6e:e2:22:
a2:67:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:03:39 2026 by rpki-client