Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: E566lJbe7jopFZ5HvfQpIHaJKkwc1gRBg0sNbpcELsA=
Subject key identifier: B4:7E:48:AE:DB:E2:67:14:2D:5F:AE:C1:1E:6C:65:49:AB:CD:71:20
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01A10FCD234936ADB4384A2A88A4EF1FB67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1A0F
Signing time: Tue 06 Oct 2026 06:01:04 +0000
Manifest this update: Tue 06 Oct 2026 06:01:04 +0000
Manifest next update: Wed 07 Oct 2026 06:01:04 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 010l0w3ZFToVJveb3W/gdGZLk5pplMIakQFlSBDpKkE=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cd:23:49:36:ad:b4:38:4a:2a:88:a4:ef:1f:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Oct 6 06:01:04 2026 GMT
Not After : Oct 7 06:01:04 2026 GMT
Subject: CN=b47e48aedbe267142d5faec11e6c6549abcd7120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:3f:08:0a:e5:14:3a:d0:62:60:39:92:f4:
9e:c4:25:a4:86:03:1e:7c:56:dd:f7:7e:f9:06:e5:
67:34:cc:55:28:23:cc:e5:eb:89:b2:82:5b:2a:b1:
1a:0f:17:56:a6:30:d6:48:45:91:4c:6a:81:cb:08:
94:e4:be:42:07:8f:e2:0d:5c:e8:fd:02:bd:fc:0f:
5c:a7:f9:9b:10:b4:13:fd:30:58:4e:2f:a4:2b:0b:
f6:cb:ff:02:83:4b:af:e9:63:5f:0a:19:f7:2c:0e:
6d:0c:f6:2f:fd:45:13:b9:cd:2b:11:da:78:06:13:
dd:0a:9d:55:12:6d:cc:02:b2:5b:43:25:90:a6:80:
86:c6:c6:3c:6c:34:f6:c0:e6:25:77:c9:1e:b3:de:
1c:d4:d0:5c:c5:89:3f:db:da:8e:1f:84:00:38:1f:
92:43:95:ce:b0:0d:0c:70:25:c1:ab:b1:82:83:e9:
3a:31:40:74:ed:5c:25:64:c7:46:50:3f:12:3d:48:
04:57:ca:1d:71:59:98:bf:7b:38:ca:b0:37:6d:bb:
c5:ea:f3:38:df:f7:59:0d:90:eb:0d:39:d8:fe:1c:
98:d5:8a:87:2e:11:f9:02:0d:ec:b4:f9:1e:b3:5a:
a4:b7:02:81:51:75:ae:79:ee:fd:ab:59:5f:47:38:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:48:AE:DB:E2:67:14:2D:5F:AE:C1:1E:6C:65:49:AB:CD:71:20
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8d:bb:9c:d5:b7:66:66:0d:be:78:d0:9b:69:35:a5:61:b4:
eb:1e:2a:48:bb:34:32:3b:42:1e:3e:fa:ac:81:86:03:37:db:
9d:b3:3b:36:cf:c3:26:7d:84:d8:c2:df:91:bc:cd:46:d3:57:
ae:fd:b5:90:4f:e8:84:68:47:f4:32:c2:90:12:a5:95:ba:3b:
43:40:3f:03:b3:96:88:76:d1:d3:b3:45:fa:ff:83:98:a7:ef:
e7:f1:b5:24:a8:21:93:24:56:62:72:2f:65:6c:a7:d3:77:b7:
87:04:75:b7:ba:06:a8:87:41:6c:f9:3a:97:94:79:16:26:d6:
d3:ed:92:98:36:1a:2f:46:5b:bf:44:b8:e6:0b:55:13:9a:e5:
11:0d:94:aa:cf:db:f1:0b:44:df:27:f9:60:ac:3a:9f:1f:1b:
89:7e:2f:1c:4a:f9:29:0a:5e:5d:e9:ae:07:1f:01:17:cc:9a:
19:b9:fc:fc:87:72:e1:53:c6:8c:14:ef:a8:67:34:ad:16:54:
e4:a3:cf:99:62:a2:80:c4:82:3a:22:ba:ff:97:28:53:48:62:
3b:70:16:9e:a9:b1:06:4f:b1:dd:d0:eb:58:25:4c:3b:90:62:
b0:c6:5d:e1:c3:06:d0:24:3c:38:cf:b7:cf:ba:b7:b9:d0:40:
94:f9:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:58:46 2026 by rpki-client