Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 9aOm0EoBgwNAcccydjVpXkobytiumIDqpSrUFr1VOGU=
Subject key identifier: 61:7D:4B:09:E9:AD:70:D6:78:6F:11:1F:98:E0:C5:77:6F:25:D3:5C
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 01A08A55DCB2504154C22795ACFB1D5EE72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 1272
Signing time: Thu 10 Sep 2026 08:01:17 +0000
Manifest this update: Thu 10 Sep 2026 08:01:17 +0000
Manifest next update: Fri 11 Sep 2026 08:01:17 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: WVA8MxFgJfQPr11bJOSCNv1Bg1UQdnlpqJFSJuhjLRc=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:dc:b2:50:41:54:c2:27:95:ac:fb:1d:5e:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Sep 10 08:01:17 2026 GMT
Not After : Sep 11 08:01:17 2026 GMT
Subject: CN=617d4b09e9ad70d6786f111f98e0c5776f25d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:bf:30:46:cd:98:4c:52:ef:68:2e:d9:22:
87:1b:e2:8b:cd:be:12:e4:37:a0:69:35:a9:2b:b6:
1b:95:76:bb:25:37:36:6f:42:6f:4a:d1:fa:bd:1a:
0c:ef:f5:cc:08:4f:5f:c0:97:78:00:04:d1:9b:65:
3c:36:c1:e1:b2:ea:82:88:35:79:5e:ef:85:b7:24:
fd:46:b0:23:99:88:8e:4c:15:f7:53:95:33:a3:0f:
de:ee:06:49:ac:01:6f:67:81:cb:54:dd:a2:f6:75:
5e:93:58:b9:a0:23:d8:75:2e:cc:fd:c7:b0:4b:96:
30:1b:2e:27:b6:05:34:c8:76:28:dd:b6:c7:94:5a:
2d:92:90:92:f8:a2:00:3b:d6:3e:2a:a8:80:a6:45:
5e:3d:2c:37:de:d9:35:f9:50:fa:3f:01:41:d6:e2:
fd:5c:b8:af:74:62:c9:c4:a0:1d:d9:29:87:f5:35:
6c:13:3f:6f:63:84:18:68:d2:01:c3:c5:fc:0f:e9:
35:3a:28:28:be:05:1e:09:79:19:ac:97:6b:aa:6a:
32:f9:63:2b:3f:f4:52:7a:73:ae:f6:10:46:c4:1d:
02:bf:6a:15:3a:68:b1:9b:92:d4:42:04:92:f5:fb:
76:ab:8b:7d:4d:67:43:bc:a4:c5:8c:ab:1a:18:98:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:4B:09:E9:AD:70:D6:78:6F:11:1F:98:E0:C5:77:6F:25:D3:5C
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:63:28:00:0e:f4:47:9f:1b:fb:95:5c:39:81:9f:b1:6b:b5:
aa:0e:e8:f6:e9:2a:ea:d5:d4:3b:ec:65:49:c2:32:a7:24:79:
a8:1a:51:cc:46:dd:66:69:52:39:5c:87:da:7c:5f:83:55:c3:
c3:af:cf:47:9e:a7:8e:bf:f5:c4:9d:e3:a1:ad:39:86:98:cf:
8c:16:8e:fd:99:21:88:2c:79:84:bc:3c:86:28:b1:68:1a:31:
ff:15:67:65:bb:6b:11:58:bf:b4:e2:c8:43:e5:e5:e2:1c:6c:
08:4c:2f:3e:7d:11:ce:fc:60:ff:2d:14:88:45:e0:f9:d3:f3:
af:d7:df:53:8b:69:df:8f:51:38:63:80:bb:7c:0c:b0:ec:15:
75:50:62:e0:77:58:b5:b1:3f:f1:29:82:c8:b2:2b:5f:10:3a:
92:e8:23:97:6d:a2:1b:b9:b8:bb:4d:8c:23:24:91:03:7b:48:
51:5c:48:58:16:19:ab:45:7d:9b:56:a3:97:1b:4e:96:fb:51:
ca:2a:47:4d:4c:78:cf:c6:7c:88:4f:7d:48:07:b5:96:59:38:
b0:cb:28:b8:7b:40:3f:d4:65:f1:84:3e:1f:8a:d7:cd:71:d5:
a3:a3:ef:5b:e9:49:92:60:f7:91:11:eb:91:84:3b:ba:f9:86:
b4:6a:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:00:51 2026 by rpki-client