Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: RQQWBF6t61J8d8y5iLnR6pU+7v6XBPN0Vx7zUzMN7LE=
Subject key identifier: FA:EF:BC:FD:F5:78:9E:78:F2:76:3E:09:6A:54:3F:67:A4:B2:EC:0A
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 01A155C12EE362F48DE05ADAA640FCA4598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 0959
Signing time: Mon 19 Oct 2026 20:01:26 +0000
Manifest this update: Mon 19 Oct 2026 20:01:26 +0000
Manifest next update: Tue 20 Oct 2026 20:01:26 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: Hj+khgNqSq+dgqyh2kBe+WGk4hLILaJ+rKjUoWbw1CY=)
2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:2e:e3:62:f4:8d:e0:5a:da:a6:40:fc:a4:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Oct 19 20:01:26 2026 GMT
Not After : Oct 20 20:01:26 2026 GMT
Subject: CN=faefbcfdf5789e78f2763e096a543f67a4b2ec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:f5:30:14:41:0e:c9:3f:7e:06:a2:d2:f9:
7f:b0:4f:48:04:30:62:74:f7:17:e9:4b:2b:5d:a9:
0a:4f:c7:17:17:bd:a7:68:8d:43:bd:b3:4c:1d:f2:
ef:ae:c7:0f:7e:1a:6b:77:cf:ed:fd:0f:f8:99:ed:
ae:dd:25:63:5c:55:12:6e:57:e9:35:19:9f:b4:fd:
0b:fd:9e:51:b8:80:5b:33:47:8e:04:e2:ba:9c:e6:
79:39:2a:ef:1f:83:89:b1:88:72:57:54:fc:25:cb:
98:c4:bf:92:5e:3c:93:33:db:1c:74:09:e4:e2:f7:
2a:c4:4c:f2:41:e8:e4:06:a2:24:41:32:03:98:78:
2c:08:5f:b3:a2:40:d8:dc:10:0d:dc:b5:20:6f:f1:
9e:5d:61:18:b3:61:65:16:e6:60:44:e7:0e:a9:93:
88:25:0b:a1:58:8d:13:89:7b:20:2c:7c:cf:54:dc:
bc:71:54:d4:56:0e:44:1f:98:d9:6f:e3:49:46:27:
14:46:6f:da:de:da:85:04:7d:32:a0:46:35:93:63:
41:b4:c9:ff:13:14:2b:f2:8d:53:0a:e0:f9:2e:64:
53:bd:6b:29:ad:02:1a:cf:97:9c:d1:ba:32:43:b3:
e1:cd:3a:4c:c0:69:25:f5:99:47:2c:e6:ef:4f:67:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:BC:FD:F5:78:9E:78:F2:76:3E:09:6A:54:3F:67:A4:B2:EC:0A
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:e0:67:4b:16:fb:c4:d1:89:5e:cc:0d:ae:69:3e:ca:ab:
c0:61:f7:04:a6:ed:c9:b6:7a:cb:f9:7a:76:a1:c7:1c:b7:96:
1f:ee:bf:91:ab:f2:e9:96:14:c2:66:19:f1:be:77:3e:a5:be:
53:31:33:ea:c9:26:81:f9:30:93:e0:7f:bc:12:f7:0a:56:37:
fb:ab:79:2b:c6:ae:aa:ef:a9:48:9c:15:1e:56:c7:4e:2d:fb:
40:8a:0e:e1:8a:ef:a7:dd:8e:c2:c8:e4:da:7d:91:92:7a:e7:
7f:16:fd:25:1f:02:d4:cb:69:1d:f9:ad:da:0b:51:4b:20:08:
dd:de:c9:6f:2c:42:b0:3a:13:f0:7b:f2:37:66:7b:5d:ae:19:
b5:be:70:77:f1:59:98:82:34:5a:c4:0c:61:73:ff:14:da:98:
57:9a:94:a9:09:37:11:b9:db:45:1d:e8:66:ab:6f:02:b8:7c:
d5:60:8a:da:69:2c:75:63:af:1d:ed:39:b3:c4:b8:b1:21:c6:
b4:eb:84:80:5e:64:c9:b3:5a:53:56:8b:ef:f8:f1:dc:e1:84:
94:a9:bd:6c:48:f7:c8:f6:a7:5d:11:7c:5f:8f:2b:4e:95:8f:
ea:8f:f1:9f:92:15:3e:4c:43:0a:51:8c:9e:12:d4:3d:20:b5:
6c:5e:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:48:00 2026 by rpki-client