Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
File: JcD6eLaa0vVeql_nVQHcRcnpE5U.mft (raw, json)
Hash identifier: nOL82XIPRkCCirzyjG9w2+kS6HNPq3u43Fnw19lVvqI=
Subject key identifier: 3E:A2:2A:85:59:C9:25:76:D2:00:ED:4F:2A:0A:A8:4E:E3:9D:84:24
Authority key identifier: 25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
Certificate issuer: /CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Certificate serial: 01A0509D666AD494A03F4A9ECD9BC898030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
Manifest number: A3
Signing time: Sun 30 Aug 2026 03:01:27 +0000
Manifest this update: Sun 30 Aug 2026 03:01:27 +0000
Manifest next update: Mon 31 Aug 2026 03:01:27 +0000
Files and hashes: 1: J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa (hash: WWFjE+lIB3z6WE11pSejgMWzVwphSyxuCF61My1RNok=)
2: JcD6eLaa0vVeql_nVQHcRcnpE5U.crl (hash: 9n3Jrzjdsm7V0hRoJD6uCMZ/rwXFwmB+f9Ivvt9bNOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:9d:66:6a:d4:94:a0:3f:4a:9e:cd:9b:c8:98:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Validity
Not Before: Aug 30 03:01:27 2026 GMT
Not After : Aug 31 03:01:27 2026 GMT
Subject: CN=3ea22a8559c92576d200ed4f2a0aa84ee39d8424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:a7:3d:c5:30:bf:99:62:32:3f:2e:22:1c:
8e:97:79:db:ae:ca:10:3c:d4:af:fe:8a:9e:7d:42:
58:f1:81:7c:59:86:0d:18:31:af:18:37:2a:56:1a:
1b:d9:37:06:ba:08:4d:61:06:fd:38:25:28:e6:9b:
5b:98:a7:60:e9:2e:dc:95:5f:f5:f1:73:ae:1f:6e:
0f:58:3a:e4:87:e9:08:ea:7d:31:d3:84:cb:76:62:
fb:a4:4b:45:a0:ab:89:c4:58:b6:b6:27:b4:31:1b:
46:0f:5e:ac:b5:0e:5a:06:bb:51:36:43:c3:99:b5:
c7:11:24:06:ce:75:4a:d0:1f:29:14:c7:49:bd:48:
c5:b3:01:8a:4a:a5:13:b2:ce:d4:ec:cd:50:3f:1a:
d9:b1:0a:29:c1:09:3b:03:32:46:33:91:e0:12:bd:
3e:df:79:ea:2e:12:c1:f3:5c:a9:13:cd:1f:87:24:
26:9f:6f:d4:7f:67:76:f5:39:66:87:2d:67:65:98:
f3:ba:c9:77:1b:7f:48:31:38:55:c0:6c:37:df:34:
8b:54:15:fe:ad:f2:db:fe:f1:dd:96:44:fe:cb:24:
78:fa:48:bb:cd:ba:58:67:27:b4:bc:51:00:e7:1e:
a2:4d:ab:51:9b:93:34:d2:cb:5e:88:d2:74:cb:35:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:2A:85:59:C9:25:76:D2:00:ED:4F:2A:0A:A8:4E:E3:9D:84:24
X509v3 Authority Key Identifier:
keyid:25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:24:a6:c0:42:74:16:21:7a:e2:d0:84:6e:bf:b9:4a:a2:
1b:de:50:07:ef:1c:bb:54:ab:ff:9c:99:a1:0e:3d:6d:af:20:
93:63:51:d1:a5:cf:09:84:f3:33:b0:7c:e0:76:4c:d2:2c:07:
07:87:c4:59:cf:57:62:cf:81:57:ff:5a:7f:4b:11:7d:8d:a6:
7b:ab:64:60:4f:fa:5e:4d:7c:1d:93:ff:1e:52:72:ca:29:fc:
16:26:25:6e:2f:89:52:3f:45:d5:d4:d3:c8:d6:1d:bb:1c:ca:
b8:64:67:90:7b:f7:cd:b4:17:25:35:d7:5c:bb:bb:59:d9:9a:
f0:64:cc:be:ae:7f:21:32:90:08:b4:da:db:bc:a5:17:9c:32:
5f:4e:1e:51:76:32:bb:78:31:bb:3a:2b:90:3d:c7:18:48:9c:
83:25:7c:c5:c0:0c:c8:e9:65:c1:5f:8d:48:5e:bd:cf:92:d8:
cb:81:37:a2:bb:e6:fa:36:7f:8d:b9:9e:ba:31:9e:a6:55:91:
f0:36:0b:d7:6f:58:16:95:07:93:fb:08:01:87:15:e3:e3:c3:
a0:83:1f:ad:5e:ad:17:54:ac:d9:5e:51:50:eb:ef:d5:f1:64:
5c:af:45:02:d7:e9:ed:fc:c2:5d:c9:75:82:92:25:5f:fe:d0:
fe:2a:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 05:28:42 2026 by rpki-client