Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: tSDvb5HiZ8DlIZXziO6bwpNU66YgYoioDMIo0/b/ckA=
Subject key identifier: 87:47:AE:44:ED:02:FE:5D:2E:3B:7C:51:3C:72:B5:DA:8D:F2:6F:BA
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019E2994783C6B40B5D83F1912DBD08AE470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 01A9
Signing time: Fri 15 May 2026 03:00:56 +0000
Manifest this update: Fri 15 May 2026 03:00:56 +0000
Manifest next update: Sat 16 May 2026 03:00:56 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: phSjfb8rjMk9NiGqRwgLZokfbSXY/i9fqehFewvKyFY=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:78:3c:6b:40:b5:d8:3f:19:12:db:d0:8a:e4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: May 15 03:00:56 2026 GMT
Not After : May 16 03:00:56 2026 GMT
Subject: CN=8747ae44ed02fe5d2e3b7c513c72b5da8df26fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:6a:ae:81:56:49:59:3d:01:c6:49:23:bd:
60:c3:f0:ce:89:27:51:03:ec:3c:fb:74:4a:d2:27:
c8:ca:78:ac:97:cc:b0:98:ac:25:87:c9:92:5e:04:
18:92:59:b0:4c:32:f0:70:c3:ed:56:12:f0:4e:e7:
a7:0e:82:45:91:90:dd:1c:de:e5:b8:74:ff:e5:29:
70:52:bd:ab:e9:5d:ca:c7:65:64:d9:98:5c:ee:d2:
2e:26:80:e5:e1:27:11:dd:22:eb:d2:c7:af:a9:0f:
c0:e5:49:f6:c3:3e:62:fd:5f:e9:56:4b:21:2d:0a:
ed:f1:3f:00:39:f7:a3:93:7f:5b:fd:28:10:88:1d:
0e:bb:00:6d:2a:c3:9a:93:ab:79:18:1a:9f:56:c6:
21:5a:86:20:c2:e6:9b:b8:a1:52:56:8a:d1:b9:15:
c6:f7:9d:58:30:2b:ec:32:57:7f:02:31:34:ed:74:
90:59:82:f8:32:a4:9b:d2:6e:b9:8e:4a:40:0f:e8:
35:a5:f4:87:8f:56:83:0c:e8:a0:4e:d1:27:9d:80:
e0:c8:e9:c4:8f:af:88:94:36:7b:ba:34:aa:a4:36:
f7:7a:69:66:3c:53:be:46:3c:e5:fc:f8:7d:34:fe:
6f:8f:6e:9e:bb:bc:1c:b7:0f:c3:ee:90:87:b4:ad:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:AE:44:ED:02:FE:5D:2E:3B:7C:51:3C:72:B5:DA:8D:F2:6F:BA
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:39:91:45:67:f1:dc:4d:c4:e4:b1:54:d2:85:eb:d4:26:7f:
f1:8c:da:cd:bf:0d:91:3f:da:5e:06:f8:72:e1:45:a3:f9:51:
f5:eb:87:00:0a:65:91:d0:19:b8:f0:b7:b5:95:f4:49:b9:cd:
07:6d:17:1e:fa:92:bd:cf:24:3d:6b:4f:4b:21:16:db:56:0d:
9c:87:a8:2c:14:e5:a2:6b:b6:dd:57:5b:70:41:42:e9:e1:0e:
02:26:c9:80:9c:7e:93:e8:eb:6c:21:2e:4a:41:a9:e0:1d:e7:
58:fb:ed:39:e3:21:8b:ab:13:51:d5:f2:9c:4b:6f:c7:76:dc:
7d:44:db:66:05:3e:ab:3b:c2:81:63:a3:09:2e:47:cc:65:5d:
a1:00:0d:12:82:e9:f6:46:06:ab:95:e8:b9:2e:c3:f3:5e:45:
d4:b1:98:19:45:9f:36:fe:b7:a1:93:2a:0a:a7:16:3a:b2:ac:
94:be:92:4b:fd:ec:ff:16:7a:0c:52:51:db:52:22:13:a3:79:
42:dc:e5:65:b8:e7:6e:f2:d1:7b:c8:17:ca:a4:3e:f0:d8:0b:
d7:a3:03:e0:63:79:e5:45:9f:6a:c3:75:e2:2a:4f:57:de:31:
4d:d1:38:f4:ec:89:37:1d:78:6e:88:16:e6:a0:39:13:b9:e8:
20:be:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:48 2026 by rpki-client