Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: R5AHNN3sMmQC6bzK3kIP2L6pfZALUj3kwJVVbEzJHh8=
Subject key identifier: 60:0A:7C:AA:62:88:7B:C7:22:19:1F:25:D7:F8:F8:8D:A5:0A:F5:C9
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 01A17582AE1D33C0A1DF45ECCF5E503B983B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 00:01:00 +0000
Manifest this update: Mon 26 Oct 2026 00:01:00 +0000
Manifest next update: Tue 27 Oct 2026 00:01:00 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: dJIIqjYKakdN6P/LHXtRymOdQmOMQJSTAn+B+XAwxQw=)
2: m0Ovx0Sqw4Mvmnjc_rT54ARItq0.roa (hash: nkxhqGEnqwsqr1mf5UgG9VF9xVU0Wk8zI/Hwu2iNPWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:ae:1d:33:c0:a1:df:45:ec:cf:5e:50:3b:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Oct 26 00:01:00 2026 GMT
Not After : Oct 27 00:01:00 2026 GMT
Subject: CN=600a7caa62887bc722191f25d7f8f88da50af5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:05:48:5e:57:51:bc:6f:72:3d:07:8d:70:
c1:e2:e1:ae:28:a6:f3:fe:af:b4:f6:de:ad:65:23:
da:4f:8d:6f:d3:d5:09:20:0d:91:35:c3:16:81:d2:
b5:fd:b2:c7:e7:95:3e:8b:03:2f:39:ff:fa:a8:16:
43:24:a9:f0:58:46:f6:e7:8c:b1:91:1e:93:8b:37:
5f:b2:87:ac:40:70:18:28:89:26:84:23:77:e2:38:
b9:68:c1:7d:ba:44:58:2a:7c:f9:fe:78:a2:f7:88:
01:68:15:fe:11:79:0d:58:bf:8c:28:43:5f:75:1c:
f4:e2:77:2d:b7:22:c1:b6:c6:3f:78:32:13:c9:53:
7e:f7:62:8a:03:9c:bb:e6:05:ec:6c:8c:f2:19:2d:
6d:56:5c:58:f6:91:93:e8:5e:cf:12:86:36:c8:57:
9d:2b:3d:b1:83:f3:85:9c:e4:cd:cc:6e:16:37:91:
06:29:16:49:54:a2:bf:bb:17:be:c7:aa:dd:62:e8:
12:8a:2d:34:73:30:cb:79:2c:1c:20:e9:97:fa:78:
a4:f0:ba:0d:f0:79:c7:a8:cb:b2:3c:db:5b:6f:72:
9d:10:e5:17:6f:4c:8b:61:f7:bd:4c:42:66:35:66:
62:00:69:f6:6a:a4:2d:5d:c7:7c:0f:73:55:84:bc:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0A:7C:AA:62:88:7B:C7:22:19:1F:25:D7:F8:F8:8D:A5:0A:F5:C9
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:47:79:db:42:f5:2e:17:0c:b1:eb:0f:b4:f1:83:12:53:28:
dd:9b:e2:af:22:f0:8a:2f:2f:52:df:bd:f1:96:ec:cc:f8:b3:
0b:8b:37:c0:70:00:79:45:0f:13:ed:ad:be:77:27:80:16:e5:
de:56:18:65:e7:b5:cd:d0:82:89:2a:2b:a9:0a:b2:01:28:df:
9d:a4:f0:94:ec:cf:ef:cc:9f:13:e6:ad:8c:aa:cd:84:ae:15:
cf:9f:6d:ca:79:a4:35:bf:c0:b1:f8:6b:a1:29:a2:ae:ac:b2:
28:80:6d:c0:fe:3f:a0:a8:9d:22:6d:66:1e:e4:0b:88:91:79:
cf:85:93:ea:ff:d1:9c:e0:91:cb:bb:4e:b2:cd:91:59:91:ae:
73:68:13:b8:69:fa:63:45:f5:84:a7:d7:24:e7:62:d2:5d:50:
bb:65:8b:fe:a7:85:bd:ef:64:3a:f5:e7:ae:a0:ab:44:ca:08:
f7:a2:79:59:1e:48:f5:30:5e:14:47:de:23:40:d6:08:33:9b:
76:3f:52:c8:d0:69:1b:2d:10:c3:cb:c7:ec:bb:84:ad:cc:47:
73:33:97:46:e8:c5:50:ea:33:ac:ad:57:b9:34:6b:be:fb:c6:
83:67:e7:18:0f:2e:dd:88:7d:7a:55:fd:6c:3f:c9:47:4a:3a:
65:99:cd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:12 2026 by rpki-client