Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: R7sSu4uHs9b7FBFPvDzQOT1qb/U87aKmhtjWuY+n9vw=
Subject key identifier: 33:B0:EA:F7:53:54:E7:45:86:E8:5F:A3:B9:85:0B:ED:F0:45:59:B0
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 01A17E17BABDB04A49184F9B7405AD10634A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 15A7
Signing time: Tue 27 Oct 2026 16:00:46 +0000
Manifest this update: Tue 27 Oct 2026 16:00:46 +0000
Manifest next update: Wed 28 Oct 2026 16:00:46 +0000
Files and hashes: 1: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: lEp2XCMo+rHd9vQJewtxcA/njhlRSjhTDaeFJKnREf8=)
2: fxml6X6RQAn0rnCF7UcyPPHDlSM.roa (hash: a27AW/vQtgWKJVubyWNJsfqn7BeJp/kgORFP8iI7QAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:ba:bd:b0:4a:49:18:4f:9b:74:05:ad:10:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Oct 27 16:00:46 2026 GMT
Not After : Oct 28 16:00:46 2026 GMT
Subject: CN=33b0eaf75354e74586e85fa3b9850bedf04559b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:f2:23:f0:3e:aa:57:26:4e:c8:ec:3e:78:
ed:15:90:1b:11:a2:4c:64:98:f6:2f:86:b7:8d:9c:
f5:c6:1b:ad:ae:5f:41:fc:25:1c:bc:91:bd:96:cb:
24:ad:9d:85:c8:4e:fa:35:16:e4:11:31:15:a3:13:
f9:f7:24:a7:68:45:89:10:51:17:3f:c5:a4:44:bc:
eb:92:f4:05:9a:77:59:23:ed:95:0b:73:85:83:c1:
42:9e:2a:0b:82:43:6e:c4:48:20:64:69:13:42:18:
fd:c5:ba:2f:8e:bf:cd:3d:a9:ab:9d:ac:7e:fe:67:
04:d5:e5:21:96:45:9d:70:ef:20:75:e9:1a:0c:90:
17:fd:bd:7c:98:d1:16:47:b7:c5:65:30:eb:30:9a:
b6:c6:a7:6a:3c:a3:e5:13:ba:cd:a9:5e:73:d4:f0:
21:53:d6:6c:41:06:b2:3f:14:57:5c:7c:5e:af:03:
c1:f1:15:89:82:92:6e:b5:57:c4:f1:4d:b4:46:1d:
24:30:61:d3:44:96:5b:62:b8:06:41:f9:12:09:02:
89:a7:cb:ad:52:06:49:1e:08:a6:ba:95:1d:16:36:
86:1a:1d:82:c7:a1:51:8d:f3:38:2b:51:89:d5:e6:
15:2e:31:af:0e:d8:57:96:8e:cc:f5:62:2e:1e:6e:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:EA:F7:53:54:E7:45:86:E8:5F:A3:B9:85:0B:ED:F0:45:59:B0
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:08:c2:a3:a4:a5:7e:f8:77:84:b6:33:2e:6a:5a:b3:8a:38:
dd:ce:64:f1:0f:9e:0d:e5:7f:92:1c:14:5a:4b:11:67:86:b7:
13:33:34:e7:b4:e3:43:40:a1:7d:87:6d:a3:63:e0:39:af:aa:
be:73:89:57:e7:f6:eb:91:ca:17:36:38:01:d7:fe:01:e9:65:
86:53:a9:0d:dc:23:02:6e:9a:16:87:1a:02:9b:21:e0:39:bd:
79:23:5a:ec:a6:03:28:58:dd:c7:7f:8e:e4:73:15:12:ab:4d:
16:d7:fb:c6:54:19:e7:61:1c:ee:cb:54:ec:38:56:6c:07:8e:
4c:f7:b0:7d:fd:c3:4d:24:75:3e:d1:a1:02:50:77:0d:2a:89:
d8:9c:ba:2a:8c:ad:16:6b:43:f1:ec:e9:d1:0b:8f:45:61:74:
7f:73:33:45:fb:4e:92:3a:5a:b3:36:da:2f:8e:c0:e9:25:eb:
4f:60:78:58:b7:4d:51:77:ec:4f:8e:4c:f1:02:fb:ce:5c:1f:
61:60:3c:22:b9:5d:f7:e5:fd:6d:e1:4d:88:d4:10:d8:7a:4c:
31:e7:00:32:0b:ba:9e:b1:5c:bc:97:af:d4:71:31:a5:85:e8:
3a:8e:04:73:14:a3:b5:02:af:66:9d:35:f9:e7:47:66:bb:a5:
7d:6e:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:44:01 2026 by rpki-client