Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: +hRTis8LFOkwK33y3e3iCNC3+HYQivYYQSke/d66IS0=
Subject key identifier: D3:6D:29:BF:2A:64:5E:5E:24:15:A9:0C:4C:F6:51:88:2F:44:FA:84
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 01A17EF43A12D783B14FA2D690C43371FFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 0363
Signing time: Tue 27 Oct 2026 20:01:37 +0000
Manifest this update: Tue 27 Oct 2026 20:01:37 +0000
Manifest next update: Wed 28 Oct 2026 20:01:37 +0000
Files and hashes: 1: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: xD2wOCYTDHCQTtwrCCi5kbZtGZgQ6+c28UXwyKQ04ls=)
2: cBLrRuc_QFmi2U_2CCzwN-A0dxc.asa (hash: 5Ey35yS4pWRnFXiX5P1NF3EizWA8z5Hs9goy/FTCwkE=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:3a:12:d7:83:b1:4f:a2:d6:90:c4:33:71:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Oct 27 20:01:37 2026 GMT
Not After : Oct 28 20:01:37 2026 GMT
Subject: CN=d36d29bf2a645e5e2415a90c4cf651882f44fa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:1f:e8:1a:6d:92:93:1d:c9:74:66:8f:bb:
32:77:08:29:9d:33:d6:5c:0d:c5:a4:23:02:8f:ec:
cc:e4:93:15:f8:b7:c5:37:17:e4:24:4c:03:28:6c:
09:82:f9:c5:90:21:4e:d6:3b:0f:bd:66:97:52:b0:
9a:20:0c:15:2f:31:f1:fd:10:22:63:86:93:86:bd:
49:a7:c9:d5:25:b4:43:68:bd:dd:7c:d5:03:aa:68:
6e:d5:80:c0:6b:91:ff:4f:c4:32:31:1a:cb:cc:33:
f2:48:0a:a7:91:32:ab:de:76:fd:1f:a2:00:21:e3:
f8:75:da:66:d8:ea:58:00:23:4f:55:2f:4f:d6:79:
f3:95:66:fe:56:65:d8:cd:d8:16:ae:b9:92:e8:c7:
eb:bb:d6:83:64:67:08:74:1e:92:da:c8:ba:2e:f4:
e5:66:ad:2c:35:b0:6f:a9:f0:4b:33:20:a5:8e:f0:
6a:50:84:8f:f1:38:68:ac:71:d8:b2:d4:23:54:49:
a5:50:0c:38:db:b8:b0:fc:d0:d5:cd:db:44:51:ae:
e7:90:32:75:40:31:b4:98:d7:7c:b0:a3:9c:c6:8b:
04:fe:86:0d:7a:45:3a:74:a5:67:58:61:e7:42:34:
ad:f0:58:fe:2d:c8:2e:82:e8:15:aa:ef:bf:46:9f:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:29:BF:2A:64:5E:5E:24:15:A9:0C:4C:F6:51:88:2F:44:FA:84
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e9:e9:4f:0a:26:4f:f5:04:74:4c:e8:6f:d3:9f:03:99:0f:
94:c4:6b:59:b4:8f:b2:17:e5:86:31:cc:6e:88:2f:4a:a3:30:
3b:b3:62:2b:53:47:38:0e:e0:c9:ab:9d:d4:72:9d:0c:64:28:
61:d5:15:17:63:b6:8b:f0:b9:4b:25:9e:77:46:d7:ce:01:1d:
7f:35:5c:c5:67:be:31:d7:53:14:19:f3:07:5e:f0:e6:54:50:
0a:98:d9:77:fa:a0:87:7f:d4:1f:39:c0:43:4f:de:82:ba:ff:
f8:d6:67:e1:6e:67:67:b0:32:67:ec:41:c1:a6:33:fa:d1:e7:
58:39:19:25:69:c4:37:ea:b1:69:96:bc:ed:99:9f:b2:a8:e3:
61:b7:c4:34:81:04:7a:c9:49:ca:fb:10:0b:01:cc:06:80:fb:
b7:47:39:ff:ac:0e:10:9a:1d:cf:39:5c:24:35:33:7e:37:67:
c2:8d:75:ae:f9:e6:56:57:92:ce:a1:1c:b6:f9:e9:37:a9:fc:
19:15:14:07:f2:6f:96:33:c4:69:b4:82:9e:02:f3:d3:ff:9a:
95:7e:84:3d:05:2f:63:9e:0f:f8:dc:6d:1f:36:c6:af:a7:10:
98:3e:ba:a6:d2:ca:8d:31:ae:66:93:59:df:43:ce:99:17:b8:
a8:0c:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:21 2026 by rpki-client