Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: Asu861ipoDolNKcKJ2lw0A8A8K4wgMQFlLifD+k3PsQ=
Subject key identifier: 5D:2F:00:98:A3:FA:64:7B:06:60:49:94:E9:BB:0A:41:57:BC:AA:71
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 01A15AB08DDC53DBCEC2C54BA22F733CF6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 0498
Signing time: Tue 20 Oct 2026 19:01:22 +0000
Manifest this update: Tue 20 Oct 2026 19:01:22 +0000
Manifest next update: Wed 21 Oct 2026 19:01:22 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: /kEBE1mqpTeJuSHVaYiBYwRyTDfAakgDuswQEMnGQ3s=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:8d:dc:53:db:ce:c2:c5:4b:a2:2f:73:3c:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Oct 20 19:01:22 2026 GMT
Not After : Oct 21 19:01:22 2026 GMT
Subject: CN=5d2f0098a3fa647b06604994e9bb0a4157bcaa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:bf:c9:52:4e:33:88:97:69:92:06:8e:09:
b7:4c:be:3e:0b:5b:b3:9b:aa:28:8d:35:8b:0b:51:
c6:7a:15:21:2c:e3:dc:41:c4:2e:6f:74:aa:ea:44:
da:d1:4e:13:fb:dc:de:b4:8b:e7:23:58:f7:6e:ba:
bf:ad:e2:86:0a:62:76:6e:3c:fa:24:77:30:f4:8c:
78:21:ec:e7:15:40:ff:b8:6e:e3:6b:e3:51:bc:f9:
8b:39:2e:c6:45:15:e5:ec:ed:1f:32:d9:d9:f5:65:
e3:1d:2e:78:64:1e:44:fa:58:48:6c:b1:1a:96:9c:
63:0a:55:3b:b6:91:5b:de:ed:51:94:b7:94:f2:b9:
7e:7d:8f:e4:18:6d:ec:5c:34:91:e1:00:36:41:06:
0a:fe:6a:04:7f:af:9c:0d:76:8d:90:01:2e:0b:d9:
65:ed:53:1e:5f:97:6e:10:a4:25:36:13:31:db:b9:
55:5e:be:03:78:b3:df:4f:44:9d:e6:fd:ed:a4:ba:
f6:44:cb:a1:36:01:b6:ab:b0:e7:1c:a5:65:a4:b2:
8d:37:11:d2:ae:6b:39:b5:af:7d:ed:85:bd:8a:03:
3d:2c:2e:59:fc:85:f0:28:13:e7:ed:3d:25:e4:04:
80:05:28:65:d7:84:64:90:bd:7a:df:ce:5b:e7:53:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:00:98:A3:FA:64:7B:06:60:49:94:E9:BB:0A:41:57:BC:AA:71
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2e:dc:99:66:17:36:dd:d4:e3:af:1f:86:c5:37:75:cd:94:
2b:1e:9b:a7:8f:e5:ca:d8:5f:55:04:20:bb:78:be:5f:31:bd:
c3:5c:19:78:80:5e:1f:32:c9:cf:d8:00:43:79:81:98:f0:c0:
c8:ad:f5:d9:60:c5:97:de:ff:67:e9:5b:a5:00:ed:66:22:ad:
34:51:89:23:e9:f6:97:8e:82:b4:5e:c5:f7:9f:1f:2c:eb:0b:
6c:53:98:70:aa:75:fc:70:0a:9a:c8:87:8d:d6:5b:f4:a5:40:
9b:46:f5:29:12:71:16:8c:a2:28:08:9c:53:c6:60:b8:c9:88:
72:3a:bb:c6:7e:b7:1f:81:fb:dd:33:c5:3a:ed:30:48:86:3c:
21:2f:d3:31:a3:fc:59:ed:fd:49:1e:a6:02:60:91:16:48:60:
d2:05:21:72:d0:6d:41:d9:e8:22:80:be:9a:59:96:15:c5:04:
d6:05:c8:10:3f:e2:1c:fb:67:06:fc:fc:1f:0d:9b:a8:27:2c:
bc:03:3f:21:aa:c8:0b:e6:c8:cb:f9:66:d0:f8:7f:8f:c0:1d:
4f:2c:f3:49:d1:24:77:fa:df:fd:96:86:32:93:77:51:30:1d:
d8:96:5c:f2:7f:72:5f:e8:01:22:a2:b4:11:65:81:db:87:a3:
4a:c1:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:11:52 2026 by rpki-client