Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: AO56kSPYCEX+xQeynlSh5J5PXEUK+/ClDD7DnrDsvLk=
Subject key identifier: 86:3D:46:4B:0E:3C:D4:E9:F1:1D:FD:5C:C8:18:15:21:95:33:97:27
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 01A18C4127FCBF5694029127B399ACDE1AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 136B
Signing time: Fri 30 Oct 2026 10:00:42 +0000
Manifest this update: Fri 30 Oct 2026 10:00:42 +0000
Manifest next update: Sat 31 Oct 2026 10:00:42 +0000
Files and hashes: 1: 68M1iA2v1hZrN-WYmwaUYqloW_k.roa (hash: Lu1vR1WuACYYOAE0lbWO8n33EaanCEqHclq+Bu+0jM4=)
2: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: e1Ego0PtMRmyzmoGlUbb6amlWXFVxA6Nsw6BTWGG1Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:27:fc:bf:56:94:02:91:27:b3:99:ac:de:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Oct 30 10:00:42 2026 GMT
Not After : Oct 31 10:00:42 2026 GMT
Subject: CN=863d464b0e3cd4e9f11dfd5cc818152195339727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:ac:5f:bd:b0:c7:7a:b0:a3:82:35:99:56:
cc:97:d6:82:7c:ff:48:87:ab:77:c3:e1:fb:b3:1c:
ae:7a:fe:cf:56:b8:29:1a:1a:f0:06:8a:7a:0f:62:
08:36:b8:eb:c6:70:e6:e3:16:4d:ac:44:89:4c:60:
a8:04:91:64:81:f9:7e:65:60:92:00:66:64:49:6d:
78:1e:6a:a1:a1:72:11:1d:dd:5d:31:fb:45:8c:4e:
c3:f8:08:70:58:e4:7a:82:a7:d7:8b:5e:0f:74:b7:
90:f3:35:89:bc:7d:0e:b7:3d:d6:b2:ff:2d:82:c0:
9c:3b:f6:a2:a4:94:24:23:3b:8d:79:38:5d:dd:ba:
fd:ed:29:f8:ff:69:02:23:7b:e7:07:c4:4f:68:48:
5c:91:2e:6b:91:08:31:df:f0:eb:ff:8b:49:44:87:
c5:93:d8:e3:55:fe:61:ab:23:49:9c:f9:7d:50:65:
8c:d5:8b:c6:b2:4c:b1:0b:8c:0a:b6:3d:4f:00:89:
53:2f:9c:fa:32:b1:ee:62:0c:ec:81:74:8e:5d:9b:
f7:69:ea:90:52:ee:45:04:99:ba:4f:13:68:50:11:
fe:cd:60:56:96:af:21:c2:27:a0:73:b9:7f:e8:61:
c2:3f:1a:a0:78:35:a3:cb:90:64:73:9a:79:aa:95:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3D:46:4B:0E:3C:D4:E9:F1:1D:FD:5C:C8:18:15:21:95:33:97:27
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:0d:91:c5:b9:37:65:0b:a9:ea:be:23:f1:d5:f5:ae:c7:
b3:6f:fc:5f:9c:f5:e3:ff:ef:30:aa:f4:75:db:9e:70:64:5f:
c9:94:61:fc:53:6d:14:05:53:41:22:2d:97:23:01:6f:2c:93:
b4:0b:96:42:f3:35:c8:cd:9a:2b:71:6f:27:2c:08:c8:3a:66:
9f:24:0a:c8:6b:0f:c6:82:68:f6:ff:db:a7:71:ee:c6:27:17:
a7:d6:42:a7:93:18:f2:9e:c8:72:bd:7d:9a:67:41:f4:da:87:
52:02:e8:b3:c4:ce:fe:dd:e0:a1:0f:31:ac:be:b7:c5:d3:05:
12:c7:ca:84:c2:86:22:37:f7:ec:34:70:ab:f9:ca:1b:70:f8:
d7:af:50:f2:34:de:f9:e6:c0:f8:2e:53:0e:1d:bb:92:56:3c:
cb:9f:23:df:45:ce:bf:8c:6a:dd:9e:40:db:9a:89:7d:ec:7a:
dc:20:99:f9:2f:d6:ad:35:25:f7:9f:ed:a9:23:a8:96:17:cc:
d4:92:bb:a0:76:01:50:7f:d9:dd:0c:70:ac:cd:75:2f:41:cc:
04:e4:09:c1:44:fd:16:6f:b1:05:ec:27:55:26:5a:34:91:45:
a0:c7:b3:2c:ac:fa:ff:27:1b:27:59:77:47:65:dd:71:65:b4:
5f:69:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:22:26 2026 by rpki-client