Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: Mv+0lKlYTXe9pCgAMaduPMh2ySsRaHWz6+CaC8xYUoY=
Subject key identifier: 92:6E:B1:A4:3A:68:82:FA:F8:62:10:12:C6:93:29:8C:56:61:02:7F
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01A174A73BB24BB818BC3BC8197C1CA1DD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1921
Signing time: Sun 25 Oct 2026 20:01:19 +0000
Manifest this update: Sun 25 Oct 2026 20:01:19 +0000
Manifest next update: Mon 26 Oct 2026 20:01:19 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: SJWoxZti54xy2crZyYA8T+oAXl0Bk/017Eu/wcACdMs=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a7:3b:b2:4b:b8:18:bc:3b:c8:19:7c:1c:a1:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Oct 25 20:01:19 2026 GMT
Not After : Oct 26 20:01:19 2026 GMT
Subject: CN=926eb1a43a6882faf8621012c693298c5661027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:bd:43:29:c0:ad:51:3e:86:b5:f7:28:ac:
f9:f9:19:c0:ab:71:da:1a:cf:6c:87:26:97:9d:53:
27:c3:4a:3f:f0:ba:5c:04:0b:ef:5a:d3:98:b6:46:
04:17:fa:82:8c:52:1e:a6:e7:20:97:93:5c:3f:2d:
9f:5b:b9:fc:44:4b:f8:6d:dd:0d:31:ee:03:66:5e:
5a:be:1e:4e:a9:01:56:d5:a1:ce:b4:c9:5a:c1:93:
65:6f:ff:bb:ca:a2:31:9e:6c:0e:af:92:38:29:e3:
3a:4d:fe:86:b9:86:0e:18:44:81:9a:ac:c2:d8:99:
80:a3:8e:de:4e:9e:39:e5:ac:89:6f:c6:a9:75:f6:
b8:99:66:4e:04:b5:16:40:f1:8c:e0:38:3b:db:87:
8e:8a:a7:5b:ce:d2:3f:f3:13:2c:b0:85:7d:a2:34:
53:00:af:19:24:9d:ad:1a:f8:09:d1:3e:16:93:ce:
b9:65:98:1d:e9:5d:c7:bb:d8:46:34:34:14:72:84:
de:91:9e:43:ee:33:3d:9f:0a:c6:07:5c:5b:a7:0e:
e4:18:69:4a:7a:b0:61:17:66:aa:a4:81:67:ae:40:
ac:0c:1d:16:e6:8a:1a:3d:c5:50:85:90:cf:bc:1d:
51:1e:2f:a0:8d:c1:b4:7a:46:33:fe:0f:a3:5b:bf:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6E:B1:A4:3A:68:82:FA:F8:62:10:12:C6:93:29:8C:56:61:02:7F
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:76:7c:c9:b6:60:0b:1d:0f:48:5e:ef:7b:d6:2d:e1:f5:71:
67:2b:03:9a:cb:6c:ec:e1:ef:99:c3:5c:e4:03:9d:1b:90:cb:
88:a5:31:4b:39:46:c7:df:88:d3:1e:9c:21:4f:a8:fd:e5:fb:
0e:b5:77:6e:00:dd:b6:5e:ca:f5:10:15:75:20:01:ff:c5:37:
b9:e3:b5:f7:28:e4:bf:f9:ec:8c:a3:a8:46:ab:44:e0:07:4b:
31:71:e7:53:2a:0b:4c:d8:80:01:55:ea:cf:e7:77:f3:aa:e8:
0c:3f:0c:2b:42:1a:83:c7:60:66:7b:7b:7b:ff:e6:bc:b0:96:
fe:88:cd:a5:7c:d5:d6:f0:55:69:53:94:72:c7:e0:e3:3f:00:
56:10:bc:92:82:57:71:5c:50:82:c7:dd:45:5e:b6:6b:0b:e3:
cc:34:ae:08:52:01:7f:85:e4:ff:b7:0d:ed:08:4e:6a:a2:56:
82:13:c6:9a:a7:6e:15:5b:21:33:0e:2e:3b:df:b1:5d:fd:6c:
0f:c7:69:ca:fc:19:31:e9:85:80:d5:94:f5:05:21:7a:b7:d6:
26:2f:85:cb:e8:91:ad:ee:51:ba:22:d4:2b:e6:3d:00:86:55:
cb:3f:a8:2d:13:35:11:35:23:6f:7e:3e:93:eb:6c:9c:56:9f:
5e:e7:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:49:19 2026 by rpki-client