Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
File: JjycXuMYJkcwl2-vxykVM-vasK4.mft (raw, json)
Hash identifier: I8/W2PqiQQUpCWV4YBdiCmGy3tCo6DvPYYNvAegSpTc=
Subject key identifier: 7C:95:62:04:28:89:D0:9F:0C:F8:E3:C7:3B:1D:FB:93:C6:4C:C3:36
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 01A15553F44E0A8A4CEC2E4DE891A59B7424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
Manifest number: 012A
Signing time: Mon 19 Oct 2026 18:02:07 +0000
Manifest this update: Mon 19 Oct 2026 18:02:07 +0000
Manifest next update: Tue 20 Oct 2026 18:02:07 +0000
Files and hashes: 1: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (hash: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=)
2: JjycXuMYJkcwl2-vxykVM-vasK4.crl (hash: D97Ouzo7Z6jjovhzFv6k6pkgH+DzGRxziSlGx2a0o9c=)
3: sijAZFXqLEAsSi2rQmlGly-OpqE.roa (hash: nt4ShhsIrV0zPjcFLpG+lSg9q9cr8DdHdWhyP7LPzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:f4:4e:0a:8a:4c:ec:2e:4d:e8:91:a5:9b:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Oct 19 18:02:07 2026 GMT
Not After : Oct 20 18:02:07 2026 GMT
Subject: CN=7c9562042889d09f0cf8e3c73b1dfb93c64cc336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:1a:2b:3d:6f:f0:be:d6:75:a3:59:5c:1a:
fd:c7:b3:f2:99:ad:fb:51:75:2a:50:b4:89:6a:b7:
20:85:e8:bd:e3:40:37:f9:46:7a:b4:ab:1b:04:f5:
16:a7:df:67:89:59:65:68:e3:94:31:7d:68:ce:8c:
e1:25:fc:60:f3:01:be:68:e0:9e:19:55:a4:d1:1f:
07:ac:c6:e6:90:49:e7:ab:ac:73:4a:53:47:ec:2b:
e4:f3:1a:94:9e:1f:3b:b3:26:b8:17:aa:ee:35:38:
36:f7:da:dd:44:de:f7:d8:e9:f3:d7:c6:04:8e:d4:
83:db:be:cf:d1:ed:e6:72:9b:05:fc:9a:39:25:e5:
73:59:a7:d2:e6:b9:18:55:c7:d5:1e:d9:35:a6:a1:
9e:24:96:f8:46:5e:19:a9:92:73:80:09:b0:45:d2:
a4:cc:66:b0:45:83:42:62:b7:ab:f0:94:5b:98:29:
cf:b5:6b:76:4d:60:05:3b:95:0f:32:72:d4:2d:63:
59:5e:ea:43:d5:db:57:61:fa:55:92:e4:13:a1:f5:
e5:26:4d:1d:aa:4a:d5:eb:e7:b8:6b:ef:23:a4:0d:
93:8d:28:fe:f8:30:f8:c6:83:cc:fc:12:90:c7:fd:
3f:70:89:57:a3:85:bc:c4:49:6b:f0:bc:6e:13:a3:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:62:04:28:89:D0:9F:0C:F8:E3:C7:3B:1D:FB:93:C6:4C:C3:36
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b2:3f:20:e3:f2:67:c7:01:35:d3:e8:44:3c:26:17:86:fd:
c2:f0:e9:cc:43:13:66:65:cd:af:a5:c5:f6:90:09:fc:9f:17:
17:8e:34:ef:0e:4a:70:c6:aa:0a:d2:ff:1c:ac:60:d9:41:dd:
e5:db:db:70:bb:d8:f5:31:4e:4c:6f:ae:5c:29:9c:e5:21:ba:
12:ae:47:c1:c6:e6:28:78:ab:65:ea:62:c7:e2:1f:92:db:6e:
e8:c7:af:28:39:92:80:cc:0f:ac:a2:b5:bd:59:38:a0:71:ed:
1b:63:c6:28:1f:2b:83:37:20:f2:98:76:92:d8:04:b3:0a:99:
a7:12:88:ff:62:eb:0f:0b:66:ea:0c:ac:bf:54:67:00:d4:16:
8a:8a:38:fe:e0:72:6c:a7:c8:af:b1:a4:97:18:d3:15:bd:e0:
e0:da:e9:b0:5b:90:b1:a3:65:2f:5c:e9:de:12:80:83:48:c6:
5a:c5:22:d7:68:c5:5c:07:fa:78:25:ab:28:c8:18:63:f9:d1:
a8:3c:6f:0c:30:88:d9:43:e0:67:d1:a9:79:b6:60:f1:0e:19:
c4:cd:82:96:3c:10:cf:fc:85:38:44:01:67:94:24:2c:9a:c6:
d1:60:c2:f4:af:8d:fa:6d:cb:55:e4:96:01:34:70:e7:88:18:
64:af:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:50:15 2026 by rpki-client