Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 20IIfywzQgp9C8ZKMNciTP0vmEp8Bp5NJpm6NVWW0p4=
Subject key identifier: 94:D8:E9:A1:42:C4:C6:33:9E:39:AC:F0:CB:A1:ED:3A:A7:19:84:DA
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01A18299BE9098F071ABDE33ABCDCC081D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1ACF
Signing time: Wed 28 Oct 2026 13:01:16 +0000
Manifest this update: Wed 28 Oct 2026 13:01:16 +0000
Manifest next update: Thu 29 Oct 2026 13:01:16 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: MprhhmEVFPCpvfCFo53zJO+S4VncVxbSNELUAonCm44=)
4: iL7Gvu2zeDBUcLc-c_313Fq9KSM.roa (hash: a8LKeJ6D+clCx+yOU1jNHm1zr8sXhuQhH0AFiRBKDZg=)
5: smLWrNVdnQXtj7nGE7oSMC17OSY.roa (hash: 2gna9VdCLwGyL73TZbhQeXefvHaphCa0KxWv5nHt9zk=)
6: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
7: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
8: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
9: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:be:90:98:f0:71:ab:de:33:ab:cd:cc:08:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Oct 28 13:01:16 2026 GMT
Not After : Oct 29 13:01:16 2026 GMT
Subject: CN=94d8e9a142c4c6339e39acf0cba1ed3aa71984da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:91:f8:9c:96:7c:e6:00:85:f4:76:3d:11:
06:74:c5:dc:00:e7:6b:6d:cd:09:bd:09:85:9c:97:
48:35:ab:e1:e5:95:aa:37:be:ef:34:ab:a1:8d:ce:
e9:89:90:ea:d7:fc:47:1f:c2:27:bb:29:99:4f:76:
a6:79:17:42:6f:8e:cc:bb:e4:a4:0d:88:41:dc:4c:
17:26:18:a9:e5:74:b7:ed:5f:d2:63:11:6c:2c:1d:
b7:ae:c6:6d:82:d7:0c:25:90:e1:fe:e1:13:12:d7:
33:59:cb:b5:cb:ff:79:a8:7d:ef:80:b3:f9:40:20:
9c:94:9d:e1:53:9d:1a:7e:78:02:92:df:b5:df:65:
ba:10:1c:89:59:0d:4e:d0:b2:06:c2:e9:56:c9:63:
b4:56:4a:55:e9:01:9b:c9:82:8e:05:39:c9:b5:f1:
ce:e3:5e:41:3a:31:55:69:5c:14:20:5d:d1:68:85:
04:09:da:fa:0d:ca:7f:90:ae:5e:05:88:7d:72:c5:
e6:b3:62:07:b7:c7:25:73:4b:5b:96:da:9b:71:70:
32:0f:bf:7e:36:40:b9:f6:09:cb:e7:2e:4f:f9:2e:
ec:88:92:91:b9:bc:59:4f:24:0e:73:a0:10:57:f1:
48:51:16:b0:88:06:6e:51:6c:a5:32:9e:79:22:4d:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:E9:A1:42:C4:C6:33:9E:39:AC:F0:CB:A1:ED:3A:A7:19:84:DA
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a2:7e:ba:af:41:47:a7:01:0a:47:40:41:a6:90:1a:56:1a:
1d:1d:65:17:97:f6:1e:98:e6:9d:0f:34:18:06:89:f9:23:2b:
c7:cd:7c:cb:82:60:d1:c4:59:41:e1:4e:99:54:1a:b0:b1:8c:
a0:7d:ee:72:5f:e3:70:0a:55:82:79:e3:44:11:6d:3e:fb:f2:
6f:ca:e4:29:52:15:e3:74:d7:0a:57:cb:43:ee:54:20:54:5a:
85:91:aa:27:cb:c9:9a:6d:bd:4d:bd:22:5f:7d:05:0b:70:e2:
6e:69:8f:8a:7c:32:37:1d:c3:78:6b:3b:a6:66:68:23:70:3d:
e3:1a:6f:23:8b:d8:78:29:6e:7e:6c:23:45:30:90:94:19:81:
20:6f:de:97:38:b7:4e:03:65:3a:81:a0:b4:74:61:34:88:4b:
29:19:3b:b3:25:ff:e3:17:a8:dc:33:45:f1:78:95:a5:05:38:
94:45:17:8d:98:89:e9:6d:25:81:33:a7:56:c3:22:70:62:8f:
a5:d7:a9:1b:5f:93:97:1f:63:6d:cf:1a:03:2a:7e:1b:01:3d:
be:cc:fc:ae:73:3d:e2:42:f0:ac:f3:2f:5a:17:11:f8:80:4f:
6f:79:c1:fd:1e:ab:ef:5c:09:f2:77:a5:17:95:e6:e0:7a:51:
05:bf:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:31:29 2026 by rpki-client