Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: QUlP8kVHTsfLPiIhDXdsVBFoOiergx3VsniUsJIPO6s=
Subject key identifier: B3:67:23:6F:A0:D5:BB:EE:0C:E7:B0:E5:D8:DF:45:9F:2C:E1:1B:63
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01A02054EB8472E2702C616FB2101EBC1D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1993
Signing time: Thu 20 Aug 2026 18:00:31 +0000
Manifest this update: Thu 20 Aug 2026 18:00:31 +0000
Manifest next update: Fri 21 Aug 2026 18:00:31 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: zv0sSKuS5CFtUEEQs3XypUIPwiXmLAtmZwlY5UrwopU=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:54:eb:84:72:e2:70:2c:61:6f:b2:10:1e:bc:1d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Aug 20 18:00:31 2026 GMT
Not After : Aug 21 18:00:31 2026 GMT
Subject: CN=b367236fa0d5bbee0ce7b0e5d8df459f2ce11b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:11:fc:ba:9a:e0:ed:81:34:52:92:81:61:
40:84:2d:09:46:6c:93:d4:63:dd:e3:07:ba:bf:10:
1d:0c:7a:cf:75:e3:a5:ce:54:b4:63:2f:79:75:af:
f5:13:ed:2e:20:1b:85:02:cc:e9:28:1e:ad:fc:10:
de:f7:15:91:a6:52:93:ed:ab:60:a7:dd:f6:77:72:
80:28:0b:0c:49:23:94:42:58:7a:2d:cf:ce:5b:0a:
fc:6a:82:01:78:d8:db:fb:fd:de:9e:a5:75:d5:1b:
4a:d9:9e:2a:02:d8:68:2a:1d:14:78:31:9f:e3:f6:
b7:cf:3e:62:cd:df:0c:10:b9:57:99:d8:44:f2:e4:
2b:10:7e:09:e8:12:69:52:aa:1f:45:87:3b:b5:05:
5a:16:3a:a0:3b:c0:5a:79:dd:bf:de:09:c3:02:bd:
e9:bc:78:b4:db:c1:07:7c:bc:98:3e:a1:c9:29:bd:
4d:2e:0f:c4:9e:e9:79:fb:4c:6d:ba:05:32:9e:d9:
40:f3:84:5c:cb:47:fb:f3:2a:a2:db:13:98:61:c1:
11:c0:72:e6:67:a2:43:80:3f:f3:8a:fb:ae:15:47:
6b:8a:e4:7d:6b:55:e3:37:a9:f5:28:44:34:59:71:
55:26:f2:3e:d3:ea:15:96:d6:19:a8:aa:12:1b:8c:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:67:23:6F:A0:D5:BB:EE:0C:E7:B0:E5:D8:DF:45:9F:2C:E1:1B:63
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:35:e2:b3:d4:36:17:14:e1:c7:47:5e:52:8c:5f:c3:6a:
41:12:8a:ee:de:da:f9:ae:e8:f5:ef:bb:25:60:50:a7:d9:3d:
af:2d:19:bf:03:1b:c8:1d:9b:d3:1e:f4:51:8a:37:0a:ff:d1:
51:c6:7c:4d:e5:8f:d3:36:0b:e0:ad:76:f2:fb:bb:61:05:9c:
d0:48:bd:cf:ea:b5:a7:70:8f:d1:67:be:72:87:cb:16:70:3a:
bc:ed:f9:13:a6:d7:ca:83:af:e8:dd:39:6a:c8:69:2c:24:59:
53:e2:d3:ad:9a:48:53:e8:15:0b:6f:57:3c:47:ec:7a:83:28:
cd:c5:d3:6b:06:d3:2a:fe:c9:81:61:6d:a9:08:f1:4e:64:bc:
f2:3a:72:48:09:59:eb:07:7a:c6:6b:d6:65:c3:b9:7c:c8:b6:
c2:41:74:54:fd:ee:3c:40:2b:28:cf:6d:ce:ad:a4:d7:89:87:
01:10:e2:00:e2:92:1f:bc:52:e1:22:b6:8c:48:9e:d3:40:b7:
eb:db:98:bb:05:44:eb:91:d2:37:6b:ad:cd:cb:ea:b5:29:47:
69:68:dc:7b:be:fd:46:fd:60:12:ca:78:b7:46:14:8c:6f:34:
b1:f9:3c:e6:56:3a:c0:fa:73:5b:6f:41:63:6a:b2:5d:ba:63:
db:34:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:24 2026 by rpki-client