Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: Sum7yCf10dX613IwIj2+qo0vwZgigM6JpP3txS6X7MA=
Subject key identifier: F1:8C:A7:36:C1:A2:EE:7C:E5:B7:00:87:ED:53:0E:17:43:E5:6B:CF
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 01A1995846FCE2F913A6F5139CAA80087F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 15E2
Signing time: Sun 01 Nov 2026 23:01:01 +0000
Manifest this update: Sun 01 Nov 2026 23:01:01 +0000
Manifest next update: Mon 02 Nov 2026 23:01:01 +0000
Files and hashes: 1: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: bLiFLPbWKjGsHEHhiMw7llJJh1UBUurXN6rGBYm6yT8=)
2: RHgj94s99yLOm8jJoah9M5rvNqY.roa (hash: 52fyve7WO1cwkbeeuvWUD7YyeD7rPI2Crc9dE/2ZkFM=)
3: U21ti5u9tXvNdQFp3b5VZCzrIFE.roa (hash: fztCV91rHBkTL6GqWa8LhQ3FxdBM1myni6wPf7YIs8o=)
4: Udssf4fE6o3QNpke-lB6PuA0Uo0.roa (hash: 9+ibfBkyOgj0hAuo5PA4Hd1TB41jIqZV5+PkUc7DWA8=)
5: w9ftw_Gavjo8Af6ZR10zP1F-XZk.roa (hash: k8S+JttR7Cx81nDmHA27QOl3Yh5ps44szsLBno0rSVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:58:46:fc:e2:f9:13:a6:f5:13:9c:aa:80:08:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Nov 1 23:01:01 2026 GMT
Not After : Nov 2 23:01:01 2026 GMT
Subject: CN=f18ca736c1a2ee7ce5b70087ed530e1743e56bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:bd:f1:5e:b0:cb:e4:ac:63:12:58:1d:43:
87:b4:ab:12:36:29:9f:b3:0a:a9:3c:a2:65:42:35:
7b:c7:ef:a2:15:28:8a:39:be:75:1d:2d:92:8b:11:
c2:17:cb:2c:7f:63:cf:f6:fc:d1:1b:b5:50:a3:86:
93:44:85:67:4a:8b:8e:6c:83:15:d9:19:8f:d2:51:
09:b3:34:88:cd:1e:f6:71:84:34:e3:18:06:17:a8:
2a:46:c6:43:78:b6:7f:04:a8:82:5c:27:3b:35:0d:
08:6a:cf:dd:e7:57:60:71:2a:22:f1:50:b9:d0:13:
e6:9b:07:7a:34:91:20:60:6a:62:19:51:86:53:cc:
4a:29:e7:62:28:0f:7a:ce:e9:75:68:b6:e1:2e:f4:
af:18:c9:1c:cf:97:3a:9b:ed:9d:c4:c4:ff:fa:40:
fb:a0:bd:5a:35:d2:8a:c1:97:e9:08:33:9f:9d:cb:
e5:3c:b4:0f:e1:9c:88:af:c2:5f:36:e4:21:28:54:
14:5a:24:ae:ce:51:4f:2e:c8:49:12:ce:0a:38:36:
4e:08:3a:9e:ec:fc:c7:fc:82:f0:29:91:52:11:e9:
8d:7a:d0:38:cd:2f:53:55:a6:be:97:b5:b8:43:48:
97:cd:cc:d7:e2:3f:ba:a2:26:6b:2e:4f:78:b5:54:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:A7:36:C1:A2:EE:7C:E5:B7:00:87:ED:53:0E:17:43:E5:6B:CF
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2b:f5:da:34:ba:3b:8a:a1:7b:ca:7d:da:a8:fc:4f:c3:d5:
88:7d:73:6e:51:37:2f:98:d8:79:65:86:93:6c:c2:a7:14:15:
48:38:34:47:68:eb:da:9e:56:26:4e:d2:97:a0:90:85:70:fe:
cf:7e:1e:13:7b:88:51:72:50:78:82:17:f2:c8:ab:a0:2d:56:
5f:e5:94:7f:8e:b0:16:e8:1a:79:d5:3c:95:12:e5:dd:3e:5d:
06:9b:5f:05:b1:8e:05:94:3a:6b:25:a1:e7:64:21:c8:97:b6:
fb:bd:80:05:a7:36:ec:5a:d2:59:b6:51:9a:63:25:c3:d5:42:
89:34:b4:da:5f:1d:80:00:62:98:8a:c3:4a:76:04:ba:43:b7:
22:3e:7c:0a:f5:32:58:e8:a0:ec:b7:0c:7a:05:e2:31:0c:af:
7b:64:f1:a1:12:81:94:44:f4:59:7e:66:1f:90:d3:0a:05:0b:
a6:b9:e7:a0:07:a3:b5:83:4b:a3:59:f1:d0:d3:50:b7:a8:a8:
ce:17:31:a3:4d:12:8e:77:45:d5:d7:7e:00:d7:69:54:08:88:
16:9b:e1:06:42:39:3b:4d:2d:df:f5:f2:38:52:e6:1d:12:87:
84:33:a2:d8:27:36:95:69:3c:06:4a:ca:f0:58:0f:dc:20:2a:
e8:99:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:26:55 2026 by rpki-client