Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
File: Jmscgrse0MbVtor0ikkZbgg8qUA.mft (raw, json)
Hash identifier: WAdePuuKaM8KQa35BSOpDCs73p2HVdupTP4NtYc45/A=
Subject key identifier: B3:3E:CB:4F:87:57:D2:08:D4:A7:C1:12:6C:71:DD:76:71:D1:F2:6B
Authority key identifier: 26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
Certificate issuer: /CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Certificate serial: 01A08A8C166F56509EFFC22CBFD1ECD37E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:31 +0000
Manifest this update: Thu 10 Sep 2026 09:00:31 +0000
Manifest next update: Fri 11 Sep 2026 09:00:31 +0000
Files and hashes: 1: 0zKA1qUhRdCM0LbCJjNC3o0XYvc.roa (hash: Z/MGgq3usUbBDj63sBfwekaCeZ5MTpb0EczCqCY/mHo=)
2: Jmscgrse0MbVtor0ikkZbgg8qUA.crl (hash: sIWO3QLpQ840my4nNj5m4eiP9/Xg94/ifh86Nvd7+bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:16:6f:56:50:9e:ff:c2:2c:bf:d1:ec:d3:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266b1c82bb1ed0c6d5b68af48a49196e083ca940
Validity
Not Before: Sep 10 09:00:31 2026 GMT
Not After : Sep 11 09:00:31 2026 GMT
Subject: CN=b33ecb4f8757d208d4a7c1126c71dd7671d1f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:b9:46:d0:5f:c8:b6:25:36:cd:79:4c:58:
9c:c1:33:b0:d7:49:f9:4a:3f:f1:11:23:0c:fd:a0:
98:64:ea:f8:7c:bb:8c:9a:7f:d4:15:38:34:b6:39:
ed:6f:7e:6c:dd:c6:f3:30:ba:f2:3c:0b:47:5a:6e:
7b:b8:cc:3c:45:10:db:f9:94:fd:26:e6:e1:a5:f5:
72:30:27:5e:ef:02:b7:b4:5c:46:27:3e:77:c7:9f:
e8:db:ea:99:7d:1c:11:d9:2d:58:77:69:93:0f:a3:
a0:2a:27:66:b7:46:53:fa:68:89:33:f5:4f:77:5d:
b2:2a:03:87:70:cd:38:c0:a3:43:ff:8d:2d:97:6d:
bf:57:96:41:4a:b3:64:a1:49:f7:eb:81:c8:67:7e:
21:2a:af:8d:5c:b9:2d:c9:52:58:40:a0:2f:5a:ad:
d8:09:bf:bc:0f:cf:74:57:49:5f:7f:90:a2:2c:ad:
2f:4b:c9:bd:91:55:5f:22:9d:6e:33:0e:36:71:18:
73:ef:5e:6b:3c:d3:92:83:17:62:02:09:69:03:d4:
95:d2:26:4c:6f:9c:20:c7:ac:44:5d:e7:ad:04:a1:
c0:f0:5f:22:23:b2:69:52:92:4f:a5:ae:72:c5:95:
e3:c2:da:e2:2f:7b:87:7f:41:53:ed:a8:95:84:81:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:CB:4F:87:57:D2:08:D4:A7:C1:12:6C:71:DD:76:71:D1:F2:6B
X509v3 Authority Key Identifier:
keyid:26:6B:1C:82:BB:1E:D0:C6:D5:B6:8A:F4:8A:49:19:6E:08:3C:A9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jmscgrse0MbVtor0ikkZbgg8qUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/Jmscgrse0MbVtor0ikkZbgg8qUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:32:f6:48:ba:65:db:45:02:25:74:c4:b4:d7:84:94:73:
8d:72:99:5b:28:7e:c9:7d:a4:d9:b3:f2:50:3a:2c:58:f7:94:
8d:3f:03:ed:0d:84:c2:7a:64:91:b4:a4:b7:c0:c6:8c:a4:3e:
7a:6a:7e:97:2d:29:26:55:35:01:a6:63:65:07:de:d0:fe:0c:
5c:ac:11:78:4a:30:82:de:29:98:cd:97:e1:7b:0e:2b:33:fe:
60:0d:d6:99:31:35:df:14:cb:e2:cc:5b:dc:e5:6a:b0:7d:98:
06:85:86:9f:a1:92:f6:29:df:75:eb:58:1a:e2:8e:94:92:a8:
c1:4b:24:b4:ba:82:c0:99:a1:83:7f:e7:5a:ee:d3:8b:cb:06:
8e:db:49:77:7a:fc:a5:3d:a2:60:8f:43:b8:c4:74:da:7d:21:
7b:b2:a9:1a:84:56:92:f6:e8:14:23:5a:96:d6:f2:12:b2:ab:
c5:81:4c:78:b0:df:59:27:a0:90:47:80:16:9d:a9:11:f0:db:
f8:ec:6d:89:ad:ee:87:d1:8e:12:12:f6:53:57:b6:6a:1b:af:
b0:68:09:c4:1c:90:08:6a:79:c7:eb:e7:d0:df:e7:bb:d8:8e:
8c:62:79:77:16:e9:41:61:e8:e2:91:67:0d:ad:71:28:38:f0:
35:dc:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:05:20 2026 by rpki-client