
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: uAXZcngjPDifd90BVFwWQs/ShNLRwkoOe04ykAZ+KuY=
Subject key identifier: FE:56:41:C1:62:6F:72:56:C7:DD:87:04:85:18:0A:D6:10:13:CF:BA
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 01A17B4D973ADF674A8C114E1CDADE350436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 167F
Signing time: Tue 27 Oct 2026 03:00:44 +0000
Manifest this update: Tue 27 Oct 2026 03:00:44 +0000
Manifest next update: Wed 28 Oct 2026 03:00:44 +0000
Files and hashes: 1: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: 3T285iCpLJFUH04oxFZD7mB/52pCNQ+tnfy49r2dqEY=)
2: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (hash: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:97:3a:df:67:4a:8c:11:4e:1c:da:de:35:04:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Oct 27 03:00:44 2026 GMT
Not After : Oct 28 03:00:44 2026 GMT
Subject: CN=fe5641c1626f7256c7dd870485180ad61013cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:cf:a7:c4:91:02:75:4a:e9:c5:00:b9:a8:
30:12:bd:19:3e:ca:99:e5:ea:d2:0d:d6:6c:61:34:
73:6a:2c:e7:30:35:b8:72:9f:a4:c3:e5:f0:8b:48:
76:6e:b1:29:95:cf:df:01:a5:79:22:20:08:06:c4:
74:d5:c3:59:ec:ce:da:7d:c0:25:6a:7d:c1:17:4d:
a6:7c:8f:2c:1f:5e:9e:ae:52:e5:88:2f:3b:f5:bc:
60:47:8c:57:b7:0e:46:4c:85:62:a7:9d:fb:99:17:
ff:6d:7e:78:11:2b:74:0e:50:56:90:68:70:3a:b4:
26:df:0e:eb:99:0a:d0:a2:f4:69:eb:0b:6f:a5:a3:
07:02:06:c7:85:de:ef:06:ac:4e:55:9d:c6:38:87:
fe:41:73:b9:a4:47:43:65:ae:27:85:6c:69:a0:02:
1d:3b:a3:dc:a3:d8:ab:ec:65:a5:57:b0:c5:f0:9b:
57:73:03:e1:1b:01:8a:f6:4d:1d:29:33:4f:2e:82:
b1:c9:6f:d8:a3:9b:19:2b:5e:0b:9c:45:2d:bc:9f:
40:aa:bd:4c:60:b3:ae:88:ba:8f:9c:33:7d:49:a9:
16:83:4d:80:2f:80:c1:71:9d:7b:fc:22:60:d8:a0:
af:95:33:67:8c:40:62:67:36:20:29:61:5b:f4:55:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:41:C1:62:6F:72:56:C7:DD:87:04:85:18:0A:D6:10:13:CF:BA
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:15:d3:f9:01:d5:91:a2:f1:fb:fa:36:03:e0:b9:6e:04:
97:9a:3c:72:ee:5b:26:a6:ce:dd:6a:da:11:e0:36:d9:4a:78:
a1:7d:ef:61:8d:76:f0:8e:7d:64:e8:2a:e8:17:89:4a:f1:2f:
1b:68:7a:7d:d8:b7:08:bc:3b:51:09:4e:4c:1d:8c:a0:77:e0:
86:40:e7:d2:83:68:ef:cd:8f:88:9f:1a:49:ca:bb:b4:31:08:
7c:4c:16:c6:45:df:16:b2:9f:7d:58:dc:ac:78:8d:96:ee:d6:
44:16:b8:b8:77:9f:80:3a:2e:54:d1:b5:22:18:6c:f0:82:b5:
b5:85:cb:f5:4d:e4:23:02:a3:79:e9:b4:7f:83:a6:97:4c:03:
4c:d5:72:1a:dd:d8:d6:13:ad:d2:65:7d:9b:3d:bb:d7:c9:55:
8c:9f:a4:da:4d:28:28:1e:e3:72:0f:87:2e:15:99:3e:94:3d:
c8:7a:cf:51:93:68:86:e0:6f:30:51:9f:41:d0:20:85:e8:b8:
94:ba:90:28:71:7b:fa:54:74:05:7a:9e:31:4d:9b:f7:17:c5:
92:f5:58:ed:35:1d:c8:e1:68:6d:0b:5d:af:95:f4:60:ee:3a:
e6:47:9b:94:4b:8d:76:aa:37:64:33:ea:e6:d7:e5:db:58:c5:
72:de:36:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TZc632dKjBFOHNreNQQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx
NDhkZjEwHhcNMjYxMDI3MDMwMDQ0WhcNMjYxMDI4MDMwMDQ0WjAzMTEwLwYDVQQD
EyhmZTU2NDFjMTYyNmY3MjU2YzdkZDg3MDQ4NTE4MGFkNjEwMTNjZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k/Pp8SRAnVK6cUAuagwEr0ZPsqZ
5erSDdZsYTRzaiznMDW4cp+kw+Xwi0h2brEplc/fAaV5IiAIBsR01cNZ7M7afcAl
an3BF02mfI8sH16erlLliC879bxgR4xXtw5GTIVip537mRf/bX54ESt0DlBWkGhw
OrQm3w7rmQrQovRp6wtvpaMHAgbHhd7vBqxOVZ3GOIf+QXO5pEdDZa4nhWxpoAId
O6Pco9ir7GWlV7DF8JtXcwPhGwGK9k0dKTNPLoKxyW/Yo5sZK14LnEUtvJ9Aqr1M
YLOuiLqPnDN9SakWg02AL4DBcZ17/CJg2KCvlTNnjEBiZzYgKWFb9FWUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5WQcFib3JWx92HBIUYCtYQE8+6MB8GA1UdIwQY
MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt
YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl
LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvIV0/kB
1ZGi8fv6NgPguW4El5o8cu5bJqbO3WraEeA22Up4oX3vYY128I59ZOgq6BeJSvEv
G2h6fdi3CLw7UQlOTB2MoHfghkDn0oNo782PiJ8aScq7tDEIfEwWxkXfFrKffVjc
rHiNlu7WRBa4uHefgDouVNG1Ihhs8IK1tYXL9U3kIwKjeem0f4Oml0wDTNVyGt3Y
1hOt0mV9mz2718lVjJ+k2k0oKB7jcg+HLhWZPpQ9yHrPUZNohuBvMFGfQdAghei4
lLqQKHF7+lR0BXqeMU2b9xfFkvVY7TUdyOFobQtdr5X0YO465keblEuNdqo3ZDPq
5tfl21jFct429Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:24 2026 by rpki-client