Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier: YqkQU5FT5A2POkP7P2t7tSJhSGJXOa/zdPJ59jHLKMc=
Subject key identifier: E3:2F:EB:F3:2C:61:B2:A6:15:6B:78:86:85:21:59:13:12:DF:15:C4
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 019A2409C33AE904DDDB03B553E45C995B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 05:00:10 +0000
Manifest this update: Mon 27 Oct 2025 05:00:10 +0000
Manifest next update: Tue 28 Oct 2025 05:00:10 +0000
Files and hashes: 1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: ivKWwPFu5yUwErnX2pYKaW8HCcxk5HZRbyoreznj7uk=)
2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:c3:3a:e9:04:dd:db:03:b5:53:e4:5c:99:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Oct 27 05:00:10 2025 GMT
Not After : Oct 28 05:00:10 2025 GMT
Subject: CN=e32febf32c61b2a6156b78868521591312df15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:da:3a:c8:a7:82:f4:f3:bf:b9:34:53:a4:
01:1d:7a:90:81:25:78:73:5a:ff:26:dd:44:6c:2c:
e7:8a:72:9b:e0:fa:53:73:18:10:17:2e:29:9c:95:
26:98:49:9a:fe:5d:fe:9c:e2:c3:9f:78:19:df:c0:
11:c0:2e:cf:c4:d2:1e:63:e3:a6:22:31:46:65:c4:
b4:f2:4a:53:2a:aa:82:20:38:48:d9:96:20:48:3e:
b1:98:1d:bb:59:b2:84:01:52:18:4c:6e:49:68:e4:
54:c5:fc:24:8c:6f:9a:d4:69:78:21:a5:20:91:40:
f5:da:92:e6:a5:0a:55:6b:06:2a:63:85:fa:0c:3f:
af:5c:d0:18:2e:95:bc:48:a4:c2:f9:ae:31:fc:c4:
2a:0d:d4:cf:68:8a:0f:ec:7e:8b:fc:08:ba:73:ed:
4a:00:df:da:2b:95:b8:10:13:17:88:4d:33:1a:e5:
d7:3a:a4:25:de:2d:ea:26:ce:a8:51:6a:7f:c9:d6:
70:68:84:63:16:55:80:4c:6a:ba:75:01:47:57:02:
48:e2:6f:3b:c2:4a:83:8b:00:41:2d:31:e1:60:a6:
ef:95:ae:b0:c3:cf:65:cb:5d:bf:70:9a:81:75:f5:
fe:07:d5:62:ff:17:b1:18:e8:63:e1:4c:19:59:67:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2F:EB:F3:2C:61:B2:A6:15:6B:78:86:85:21:59:13:12:DF:15:C4
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:93:29:95:d0:23:f5:eb:2c:bf:2f:2f:86:a4:57:03:b4:25:
99:8d:5c:2c:62:85:dc:d7:9a:ae:ff:5d:88:f4:1d:92:77:e1:
c5:32:d8:fd:ea:2c:69:e5:b6:75:f6:68:5c:bd:51:10:c9:4d:
45:b0:11:3a:cd:8f:c3:e5:80:59:4e:b5:5d:f3:c7:6f:06:4c:
7d:1a:a4:e5:a0:83:83:a7:eb:f8:5d:32:15:5c:aa:54:c0:64:
51:55:e7:3c:c3:e1:12:14:83:a3:60:a3:9b:10:d3:3d:88:9d:
c6:24:c0:30:4b:69:f0:97:37:9d:90:44:77:f1:e7:70:e0:ea:
c3:f0:77:1d:37:d6:e9:12:4c:a1:ff:8a:31:73:e3:6f:fe:9a:
c0:08:02:f4:59:c7:78:cf:5d:26:aa:be:5d:e4:69:ec:a1:02:
a1:8a:a2:c1:55:85:65:00:d4:69:91:1f:fb:53:7f:93:14:c9:
9e:11:84:85:de:fc:61:3c:5d:2e:fc:c1:a6:e1:e8:02:18:82:
a5:cc:51:06:22:c7:37:2d:fe:58:4f:f4:30:95:e0:e9:e8:17:
59:56:5b:65:14:e5:7d:58:9a:b7:89:2b:69:02:d1:7e:18:b8:
1f:02:9d:a4:aa:86:d2:00:49:89:05:91:e2:7a:0b:3e:5a:dd:
9a:5d:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:45 2025 by rpki-client