Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
File: JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft (raw, json)
Hash identifier: 4DztFoFpSOEgFEBILJEcow8wo2SyDkDtLEKEqQEn9FA=
Subject key identifier: 4C:DC:DC:B7:25:ED:8F:73:D6:9A:E8:CC:E6:F2:95:6B:65:B0:2F:1F
Authority key identifier: 26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
Certificate issuer: /CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Certificate serial: 01A12F20E73A96297C76B113739EB165CC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
Manifest number: FF
Signing time: Mon 12 Oct 2026 08:00:47 +0000
Manifest this update: Mon 12 Oct 2026 08:00:47 +0000
Manifest next update: Tue 13 Oct 2026 08:00:47 +0000
Files and hashes: 1: CT7CUpJmJPLajKgOQIFrWv5R9bI.roa (hash: kW/49sudv3kAXReOsUWamQV3RVaaDJfvruQZFjeF4XM=)
2: JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl (hash: uVIpZxzZkwjnubb5BQa8nDQxiw8L6IWJaGZR72H3hiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:20:e7:3a:96:29:7c:76:b1:13:73:9e:b1:65:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2634e9f8f7c4cdd8e760a2abb5a353006939f963
Validity
Not Before: Oct 12 08:00:47 2026 GMT
Not After : Oct 13 08:00:47 2026 GMT
Subject: CN=4cdcdcb725ed8f73d69ae8cce6f2956b65b02f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:71:e2:5b:56:32:e6:45:5c:5e:03:66:c2:
b6:92:42:89:35:aa:90:82:4d:75:9f:88:b5:a2:3a:
10:f1:a9:eb:96:d1:e7:df:ee:82:5e:8d:5f:81:9b:
3d:db:04:41:95:b9:fe:f5:ea:7b:50:56:1f:a6:52:
26:df:4b:fa:e2:f7:a9:8e:5d:b0:40:90:cc:b7:59:
73:34:b2:89:52:32:aa:94:12:7c:11:b4:1c:37:94:
34:24:39:2a:42:c0:84:14:8d:26:28:19:3e:29:be:
d8:f6:1a:d7:5b:5d:c2:8e:94:18:a7:24:88:13:69:
75:20:a0:98:3f:2e:4d:a7:6e:2d:68:72:dd:33:3c:
6b:ce:c3:b7:d3:25:a9:f3:76:3c:2d:a6:71:c5:fa:
2d:24:d8:93:45:3b:13:04:59:7e:19:ba:d1:a7:1e:
83:ce:55:21:d8:4b:ff:29:5a:ab:b8:1c:ad:a7:26:
17:c9:d8:9d:e6:6f:2d:f1:09:f4:ad:a4:d5:17:50:
49:6d:e5:01:9d:8c:67:a1:8d:dd:2c:53:ce:3e:e0:
d9:9e:41:ea:34:02:35:dc:22:f4:4a:f2:30:dd:41:
8b:ce:5c:8e:05:75:61:97:71:95:eb:87:ff:3f:0b:
4c:d3:9b:fe:49:02:c9:12:45:0c:8d:06:53:07:e0:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:DC:B7:25:ED:8F:73:D6:9A:E8:CC:E6:F2:95:6B:65:B0:2F:1F
X509v3 Authority Key Identifier:
keyid:26:34:E9:F8:F7:C4:CD:D8:E7:60:A2:AB:B5:A3:53:00:69:39:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjTp-PfEzdjnYKKrtaNTAGk5-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8f1f54-9c57-4b0d-a078-877207e6958b/1/JjTp-PfEzdjnYKKrtaNTAGk5-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:3b:2b:33:76:c4:43:95:29:b1:92:8a:b7:04:fb:b1:78:
21:0a:40:bd:01:24:d4:45:07:99:93:66:d2:bd:fc:f8:1b:3d:
fa:02:5a:52:7c:3d:03:c2:47:be:dd:f2:30:74:af:e6:61:d1:
e4:e7:17:d0:52:08:42:b7:93:6e:7e:f6:71:d7:58:af:8e:c1:
57:44:e3:0f:2e:4b:4c:a3:74:9b:35:84:91:5d:15:cd:43:33:
70:30:b4:5e:fc:f4:9d:da:d4:42:25:81:e7:d8:a9:34:ab:94:
d4:68:5f:34:6f:8e:e3:2b:ea:17:e5:dc:cf:62:ca:77:a2:ca:
37:47:fb:d7:0f:e4:9f:a3:41:0b:5d:1e:9f:7e:62:a4:b9:05:
95:30:39:6f:95:87:8c:ad:63:67:58:af:8a:b2:ba:a4:7c:99:
b1:a3:1d:7d:82:6a:09:80:31:08:72:e6:13:8d:51:ca:70:b8:
97:01:f1:f9:c4:2d:f5:74:b3:dc:6d:37:dd:33:96:09:27:05:
eb:f4:ae:0d:cf:28:a7:03:60:ae:cf:16:cf:92:f8:e4:f9:0d:
b1:a1:71:41:6a:c2:68:b6:f8:bf:43:d8:32:56:c8:e2:ba:da:
4f:7b:8f:db:ee:32:eb:7a:69:f6:07:7e:fe:ad:f1:a7:70:63:
c9:c7:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:21:55 2026 by rpki-client