Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: YSo5BVFvySnriXDZRsJ3j9ToMY/q9C81oi2uXfxH2yI=
Subject key identifier: 92:95:BC:5E:FC:29:5D:FC:E8:4B:99:53:05:57:C9:C4:58:B8:B1:31
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01A14EAC388746A1BD1A586FCB7DE22885F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0F5E
Signing time: Sun 18 Oct 2026 11:01:11 +0000
Manifest this update: Sun 18 Oct 2026 11:01:11 +0000
Manifest next update: Mon 19 Oct 2026 11:01:11 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: gnaRA8JU2Iq8LemTH+OiXkBa0iZmx+5e9X21CGeOt/c=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ac:38:87:46:a1:bd:1a:58:6f:cb:7d:e2:28:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Oct 18 11:01:11 2026 GMT
Not After : Oct 19 11:01:11 2026 GMT
Subject: CN=9295bc5efc295dfce84b99530557c9c458b8b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:08:ee:fe:f1:25:89:b2:58:f5:0f:5e:3f:
b8:d7:16:27:c6:a8:78:e5:97:d0:04:cf:17:e4:25:
a3:8b:bb:64:f5:5b:e5:dd:2a:6d:10:13:9f:48:3c:
93:e0:eb:9e:48:88:d4:94:ed:19:a8:db:6d:e0:e5:
09:81:7c:3b:39:2b:5a:9e:45:da:19:cd:79:97:7b:
05:a2:15:ef:6b:ed:a4:dd:04:2e:b0:d4:14:80:01:
f2:10:ae:34:90:f4:9f:76:91:9b:e2:36:85:2d:02:
e0:93:a6:e8:a3:29:6b:e9:20:e9:f3:7c:d4:34:3a:
1d:92:bf:53:93:2b:9f:c1:cf:52:a5:e0:c6:b1:46:
09:55:5c:ca:ff:c7:e3:b0:b9:4d:02:9f:8e:9c:97:
c0:6b:87:bb:08:f8:c3:98:41:59:e4:5a:54:ab:3e:
4a:ba:24:07:c8:1d:80:57:1d:10:9e:63:5f:fa:77:
a4:d3:2e:7d:2a:82:d8:7e:5f:82:eb:48:38:03:7a:
bc:cf:d5:28:3a:6a:ea:6e:a1:92:b8:28:ff:57:e9:
24:5f:f3:50:f8:f0:6f:89:77:3e:cc:18:3d:ac:ac:
9a:aa:61:5c:68:90:f2:36:64:33:68:50:2e:7e:38:
38:b8:1b:4b:1a:24:61:5b:b9:64:b6:db:58:da:94:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:BC:5E:FC:29:5D:FC:E8:4B:99:53:05:57:C9:C4:58:B8:B1:31
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a2:c3:2c:8b:d7:99:1e:e9:d1:ab:f5:43:e0:31:57:d9:69:
13:b6:4d:53:37:09:e9:09:59:bc:55:50:c3:bc:8b:5c:4f:96:
05:1c:5c:d0:eb:f4:92:e1:e8:1e:19:f5:b2:26:aa:08:15:b9:
0c:7d:53:af:77:bd:29:67:74:82:05:e9:4b:f9:a7:a1:ee:ea:
0b:c5:ff:8c:20:84:02:10:e9:ed:7d:e8:07:2f:85:7b:bf:06:
b9:54:4e:33:41:34:d7:f9:c5:21:82:c7:25:a5:53:b6:10:4b:
71:17:2d:69:7a:0d:19:3a:96:9e:b4:bf:31:c7:77:64:54:27:
36:66:93:e6:cc:a3:29:02:4e:50:99:c5:37:6e:19:71:90:60:
ce:39:3f:07:80:3b:fc:25:50:2d:5e:cc:23:bb:ef:8a:cc:fe:
24:14:74:70:fb:01:1c:37:38:c0:2d:e6:91:ea:b7:5c:97:c7:
c1:e7:ff:69:b2:20:f5:11:e4:dd:cf:71:8d:ab:f2:c9:f8:aa:
dc:31:17:b0:11:8b:b8:33:e7:a4:d2:e9:09:ad:0d:99:43:95:
02:28:e0:8b:b7:63:ea:3a:63:e4:36:77:14:ad:8f:ef:55:37:
a7:4f:d5:18:97:fb:81:8e:a1:7b:54:5b:04:e6:4c:be:4f:96:
6b:89:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:19:32 2026 by rpki-client