Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: vPpCwkfyzV059OhAK1Z8dn6mT2ASoj8sRde0hRpeR4Q=
Subject key identifier: A9:CB:7B:AB:2D:7A:B7:48:6B:18:CE:11:92:02:AD:D5:8C:5A:5D:AF
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A06E39B50EEFAF35AE445BF68D8133CA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 08C8
Signing time: Fri 04 Sep 2026 21:01:10 +0000
Manifest this update: Fri 04 Sep 2026 21:01:10 +0000
Manifest next update: Sat 05 Sep 2026 21:01:10 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: DmBfVxk1C7PZrOV/olMg53nq1CrMZYr+7sIe8o3WNXs=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:b5:0e:ef:af:35:ae:44:5b:f6:8d:81:33:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Sep 4 21:01:10 2026 GMT
Not After : Sep 5 21:01:10 2026 GMT
Subject: CN=a9cb7bab2d7ab7486b18ce119202add58c5a5daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:e7:00:67:d1:90:95:a7:1a:29:f7:bf:94:
c5:38:02:94:dd:9b:cc:e4:10:df:30:34:55:f8:f0:
80:bb:a6:c3:d7:fe:8a:4f:2e:42:e3:20:fe:a1:0b:
10:bf:8b:ff:7b:9f:d5:4e:f8:7f:0a:a1:6e:c7:f2:
0e:95:70:b9:c5:a8:f2:2a:50:5b:e9:52:a0:f8:d8:
1d:75:bb:a8:95:f0:a6:59:af:e2:ec:db:e7:96:e1:
69:5e:c7:82:fd:dd:12:0e:f4:fc:ee:57:dc:dc:00:
c2:fe:54:95:a3:7e:6c:fd:8d:24:85:f7:14:61:c1:
4e:d4:32:d9:e7:81:f6:28:ba:ce:62:40:e7:ab:ad:
ae:c4:78:25:68:40:19:cb:3e:2d:af:9d:13:73:3b:
87:86:02:5e:42:25:2a:0a:58:4e:94:ce:e3:73:b7:
19:1f:04:b9:81:7f:32:8f:38:b9:06:dd:00:3f:62:
c8:b2:a4:7f:5a:75:a6:21:eb:23:1e:73:35:da:42:
a9:ae:44:9e:c8:9d:ce:d7:5f:48:6f:c3:14:0b:27:
8f:72:1e:01:9e:95:87:cc:72:04:79:7d:cb:bc:ee:
8b:e6:53:42:76:7b:af:82:bc:fb:af:6c:0c:a2:df:
cf:bb:57:ec:8f:98:78:16:23:ed:c0:a3:4e:7b:40:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:7B:AB:2D:7A:B7:48:6B:18:CE:11:92:02:AD:D5:8C:5A:5D:AF
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7c:36:84:02:85:71:0e:7c:97:ea:ac:44:14:50:6b:3f:79:
34:c7:15:46:47:ad:30:fb:3f:a9:56:94:c4:a3:84:c9:d0:eb:
8d:02:70:6f:62:66:be:a1:76:61:25:47:b4:90:3f:1b:2b:95:
3a:47:c2:79:a5:94:fe:bf:eb:a4:e2:7b:44:72:b1:10:f8:54:
a8:88:65:31:b5:f8:e5:fb:93:ff:04:2e:7d:d0:47:2b:a8:f9:
a7:d3:b6:a3:56:e9:2c:09:c5:30:19:6e:3d:4d:36:5d:3e:08:
7b:03:36:33:de:9a:3d:b0:8f:5a:f6:92:70:31:d7:64:69:ef:
44:16:f1:73:12:54:50:59:a6:5b:e2:5c:df:26:00:bc:62:f0:
ac:0f:cf:b3:a3:e9:2e:1a:1c:5d:cd:65:dc:54:79:e8:10:59:
d9:e0:02:89:5a:46:9d:fb:38:6d:d0:22:cc:df:a2:8e:c6:63:
69:9e:bd:29:7f:5e:20:a6:05:b1:ac:83:0a:32:ae:73:60:e1:
bd:3f:4c:2c:06:75:44:13:a0:2a:73:3c:86:4c:ec:d6:77:24:
20:f8:66:5d:d7:2c:7c:7a:9b:ff:8b:ae:4a:8a:a7:c8:2d:aa:
8b:90:90:4b:33:f6:85:eb:da:67:27:e6:97:b3:79:1a:e2:15:
29:3f:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:36 2026 by rpki-client