Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
File: JPJm2DH8J6QqMgiJno32JsRXEAc.mft (raw, json)
Hash identifier: Uwzn6gYcGkPHca14qxZciPW3pIBokU881yZfsH3DwsQ=
Subject key identifier: 8C:8B:F0:7A:21:98:C6:3E:87:76:6D:10:AC:31:F2:14:62:51:98:C5
Authority key identifier: 24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
Certificate issuer: /CN=24f266d831fc27a42a3208899e8df626c4571007
Certificate serial: 01A0E73FD86FB9E6723FD3CFF554CAFC13C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:56 +0000
Manifest this update: Mon 28 Sep 2026 09:01:56 +0000
Manifest next update: Tue 29 Sep 2026 09:01:56 +0000
Files and hashes: 1: JPJm2DH8J6QqMgiJno32JsRXEAc.crl (hash: mV0HbKtHM/jI8ochgEv9tqa2iEBCBH8B1H7F4Od6Xew=)
2: k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa (hash: CisMnnWLCTdGxCNLWXEduRycUM2+pYKyAFoWjqKXGyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:d8:6f:b9:e6:72:3f:d3:cf:f5:54:ca:fc:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f266d831fc27a42a3208899e8df626c4571007
Validity
Not Before: Sep 28 09:01:56 2026 GMT
Not After : Sep 29 09:01:56 2026 GMT
Subject: CN=8c8bf07a2198c63e87766d10ac31f214625198c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:3f:9c:de:de:5f:05:25:97:ce:10:97:5c:
4f:8c:35:47:ad:f0:fb:0c:2a:45:56:94:0e:f2:4d:
ff:72:79:f3:43:a0:78:90:09:b3:bd:a8:17:e2:4a:
8e:8e:58:6b:df:e3:96:71:19:f1:7c:55:d7:af:6b:
63:3c:89:2a:24:12:a9:b6:2f:65:fe:6d:8d:01:80:
79:ab:49:f3:f1:1f:cd:0c:30:3a:36:7a:ca:dd:e2:
a1:64:76:de:99:94:d8:ca:e8:6a:66:e0:e6:00:21:
65:ed:41:48:48:df:74:bc:57:f3:7f:af:3c:91:88:
c7:cd:1c:c5:3e:d2:44:3c:e3:05:66:ce:69:de:e4:
c7:d4:9c:a9:6a:ab:52:c8:2d:d3:9d:4a:88:47:ad:
23:37:9f:2d:b5:a0:4c:81:60:27:1e:d0:a6:25:06:
17:d9:77:58:ba:f7:b1:24:a8:0c:0e:ab:17:00:06:
8f:30:b0:e6:ec:09:e9:26:9c:38:db:81:d5:04:41:
ff:d1:35:4e:f1:7f:3e:b3:25:c5:e4:d9:5f:56:66:
ce:f5:94:d5:a3:ea:f6:b1:5e:93:56:21:15:85:aa:
1d:24:f4:0d:ee:b5:50:a5:45:48:6d:97:4e:84:71:
1a:d2:d6:49:a4:32:14:23:98:cb:91:28:ba:38:38:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:F0:7A:21:98:C6:3E:87:76:6D:10:AC:31:F2:14:62:51:98:C5
X509v3 Authority Key Identifier:
keyid:24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:1a:50:aa:0e:8a:61:a2:13:29:68:97:de:77:66:6d:93:
2c:b7:67:7c:0b:f6:6d:3b:6f:b8:d3:42:70:2e:ee:df:95:ab:
54:3f:02:df:93:91:89:55:67:24:fb:bc:4e:d1:9c:4c:00:4d:
9d:4e:f8:a3:93:33:ff:d2:93:87:02:0f:18:23:e2:3b:75:44:
eb:b6:66:0c:16:46:15:30:d9:e3:2e:9b:c1:ff:72:92:0c:e0:
5f:4d:0c:0a:9d:64:97:f8:e9:60:19:28:90:02:f0:b7:f4:b2:
c6:8c:26:6d:24:71:f0:8d:0c:e5:d0:ce:83:14:15:e8:0a:c0:
0e:00:f2:a0:f5:0d:d7:3a:93:80:c1:92:2e:54:5a:8a:c1:d7:
c3:56:1e:5b:d3:21:54:0b:c7:62:c6:96:ec:9e:58:42:ac:b9:
b8:a7:c8:1e:92:3c:fa:de:4e:bc:04:4b:e4:41:5f:da:dd:61:
e8:4c:dd:b9:9d:52:41:35:d7:ac:24:9e:20:67:ff:b1:84:5b:
a2:ff:58:be:aa:94:72:6e:7f:91:a8:2a:6d:81:2a:06:3b:5f:
4f:41:d7:5d:64:9a:c9:88:fa:a9:32:39:36:1a:b9:97:0e:0a:
d4:9b:40:bd:15:76:77:c6:eb:4c:94:52:ab:4e:b4:d8:12:cb:
65:fe:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:11 2026 by rpki-client