Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: S1/rUkmBrEXiQwtxV9yls8vDcSnfAI15Kx1imMfEhXY=
Subject key identifier: BC:5E:1E:90:82:DA:40:DA:DC:66:D8:62:D9:CE:7D:1D:C9:99:01:2F
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01A180AB4F768B7FB3799BE01E9C0AFBEAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0FA3
Signing time: Wed 28 Oct 2026 04:01:12 +0000
Manifest this update: Wed 28 Oct 2026 04:01:12 +0000
Manifest next update: Thu 29 Oct 2026 04:01:12 +0000
Files and hashes: 1: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (hash: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA=)
2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: NSsNBGhodVq154ZcvQph9mvFng2wcVSnwqEd1Ky2Ek4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:4f:76:8b:7f:b3:79:9b:e0:1e:9c:0a:fb:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Oct 28 04:01:12 2026 GMT
Not After : Oct 29 04:01:12 2026 GMT
Subject: CN=bc5e1e9082da40dadc66d862d9ce7d1dc999012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:0c:38:c9:df:b6:0b:8d:45:7a:c2:6c:44:
68:11:3e:4c:cf:a4:8f:25:b3:bc:2b:ff:e1:98:38:
7e:70:b1:81:1b:68:0c:8a:2e:6c:86:56:52:f4:f1:
65:49:ba:28:e7:48:31:ed:49:f4:82:0a:5d:63:0b:
2d:16:04:e7:db:9d:e0:c8:03:24:1e:d3:06:0e:59:
78:6e:6f:23:fe:a9:af:c2:24:72:24:0a:44:f1:6f:
d1:fa:64:fe:fb:45:53:06:77:20:52:61:48:18:0f:
46:44:c7:19:bb:d9:fe:9c:e9:c6:22:b2:de:0f:e5:
80:b6:87:4b:a0:1a:77:78:7d:61:81:d8:04:d2:0f:
03:4e:ff:f8:78:0f:c8:a0:0a:df:16:cf:c9:02:d5:
2e:8b:ea:8c:54:8e:95:c3:5d:aa:c4:3f:e0:af:92:
5e:fd:67:5c:4e:46:1c:23:64:85:ab:a0:55:11:1a:
f1:32:cb:18:ec:0d:62:09:a6:5e:ff:d5:03:d6:ff:
cc:a9:6c:36:75:5c:62:55:67:cc:fa:87:0a:5d:72:
e6:f9:54:6c:ba:56:1c:6b:11:9d:e2:38:2d:35:08:
27:10:e9:8f:a6:ee:3d:f8:f7:2f:e5:24:dc:df:79:
1e:0f:82:49:04:c1:83:10:ec:20:21:25:62:fe:29:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5E:1E:90:82:DA:40:DA:DC:66:D8:62:D9:CE:7D:1D:C9:99:01:2F
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:32:44:5b:3a:2b:a5:e5:0b:06:bd:f2:3c:54:a3:f1:01:
67:b6:84:e6:ff:af:bf:6b:d9:9c:37:6d:a3:15:5a:56:73:61:
75:8c:a0:bf:34:d9:02:0e:67:fc:c2:4c:e4:f4:96:ad:8f:da:
fa:2e:58:8d:b8:46:ef:1b:3e:1b:e3:db:94:b3:41:2a:5a:9f:
09:19:c5:4c:d4:3c:33:94:58:14:3c:4f:43:7d:0a:d4:94:5a:
64:ce:32:54:1f:53:e6:2f:96:ff:1d:0e:64:d0:f0:5c:ff:7c:
69:73:df:e7:67:f3:af:20:d2:b0:c3:65:3e:12:d5:4c:b1:19:
c2:3a:af:07:b8:f7:dc:78:b2:0b:93:d3:f9:28:e2:5d:32:4c:
99:c0:2c:9a:cd:bb:ee:52:46:e4:e9:8e:87:b1:bf:75:3e:71:
c3:68:56:6e:78:e5:09:d6:5a:70:84:9c:45:1b:1c:eb:79:9a:
e2:1e:60:f9:f1:05:7c:f3:0d:b8:77:1b:6b:50:3c:90:f8:6e:
d1:1e:1e:e7:76:31:e9:25:24:6d:47:6f:6b:2e:4b:50:29:a4:
41:50:d1:c2:0a:45:8b:53:5f:bf:5d:d4:48:c9:56:fe:5d:db:
2d:a8:55:c2:ec:d3:b3:b4:1d:54:99:54:2a:51:27:3b:df:36:
24:b3:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:36 2026 by rpki-client