Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: pAcJb5Tda03IFiSEKIwLfRY/mf2VcikFCYdwSQsvjmw=
Subject key identifier: EC:CC:7D:5C:56:91:F4:9C:03:A8:53:9B:0D:C9:EF:07:33:76:BF:2F
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01A16D23E25CDA82592C43F8806C9CDA54A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 094C
Signing time: Sat 24 Oct 2026 09:00:30 +0000
Manifest this update: Sat 24 Oct 2026 09:00:30 +0000
Manifest next update: Sun 25 Oct 2026 09:00:30 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: v8UgQMFyN/BFebsUIvKZFivrCp9Xkzeq7KdvrJ1MALc=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:23:e2:5c:da:82:59:2c:43:f8:80:6c:9c:da:54:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Oct 24 09:00:30 2026 GMT
Not After : Oct 25 09:00:30 2026 GMT
Subject: CN=eccc7d5c5691f49c03a8539b0dc9ef073376bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:c3:83:bf:99:16:92:fc:78:ad:7a:ad:49:
32:05:2f:ac:2c:f3:56:7d:18:f7:eb:19:b2:aa:c0:
35:85:09:c9:72:28:3b:10:65:04:7b:91:a5:36:ac:
8f:6e:e6:91:43:da:35:49:45:7b:bc:f4:a6:6d:92:
db:a9:9e:41:ea:fa:5e:51:d7:7b:6a:92:39:de:7c:
96:16:85:1c:ce:e3:7c:5c:58:35:01:fe:44:93:65:
b4:1a:98:9e:7f:6f:cf:f9:25:97:dc:f3:63:64:e5:
f6:b0:0f:ed:94:fd:c0:13:45:d6:b4:76:33:cc:33:
70:fc:d9:72:2a:02:77:e9:31:74:40:6c:51:31:bc:
34:3b:1a:ca:fe:7b:22:3c:ac:44:75:07:ed:de:6f:
91:4f:c7:01:e1:4a:8c:d5:0e:4c:14:b1:0c:81:bb:
f4:fd:4f:aa:7c:53:9a:f6:9e:57:64:cf:5a:c6:6a:
83:95:82:98:05:0f:dc:73:19:1d:d2:b7:12:6b:bd:
15:d0:2c:06:9c:5f:7f:22:20:9d:ba:78:9f:2f:67:
4f:47:14:e9:16:f9:72:e2:5c:a0:b7:1f:7b:44:cb:
b4:ae:1f:d2:fa:38:cf:d4:7d:33:5d:c0:5f:fe:54:
52:94:25:a4:e9:cd:3d:71:9a:fc:19:26:dd:bd:ed:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:7D:5C:56:91:F4:9C:03:A8:53:9B:0D:C9:EF:07:33:76:BF:2F
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5d:ac:98:2f:38:a7:68:c3:f6:4e:24:54:47:4e:d0:ff:81:
7a:3e:aa:9c:55:4e:c0:af:06:5b:ba:00:3a:6a:45:2c:31:2a:
1a:14:e7:fd:4b:1d:ea:08:81:24:2c:f0:f3:60:bc:ef:db:06:
58:20:1f:6d:1b:bd:d5:58:63:88:b2:39:e2:50:5d:ce:54:75:
c6:10:ec:16:a2:ab:e1:4a:32:1e:e8:46:82:38:f5:92:5e:ff:
76:17:3f:78:ed:10:67:29:3e:97:26:c0:e1:a2:f6:eb:57:71:
1f:29:77:fc:46:4b:30:72:ab:0c:67:84:a3:64:24:15:07:0a:
df:ae:23:de:18:d9:6c:6c:91:f6:0b:10:40:64:8c:fb:69:99:
8a:39:67:b9:b5:6e:aa:9b:e0:a9:fc:6c:db:5b:b0:b5:e1:f6:
15:98:a6:f3:e6:76:b4:5d:6d:a7:36:6d:67:54:33:8f:d4:c7:
54:85:a3:e7:4e:66:f6:fd:bb:64:64:38:de:a5:20:5b:51:68:
8c:1c:c7:02:d6:b6:07:0f:18:6e:21:62:c5:24:5e:44:e1:82:
6b:7a:40:01:02:d4:8d:09:54:7a:93:e9:69:fc:b7:5f:94:7a:
24:59:43:b3:bc:f2:ce:16:25:68:f7:85:7f:01:39:f9:a5:fc:
ce:42:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:38:54 2026 by rpki-client