Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: 7GyTIzF8lmv2ev5Sby37UdKRjEhwA1ZaFeyYUBLyG5g=
Subject key identifier: C9:86:91:41:0D:F1:88:93:47:2E:4E:0B:50:68:25:A6:74:B9:84:60
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 01A17B8443A8CD4EBA0BCED62756E7DC7243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1657
Signing time: Tue 27 Oct 2026 04:00:27 +0000
Manifest this update: Tue 27 Oct 2026 04:00:27 +0000
Manifest next update: Wed 28 Oct 2026 04:00:27 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: J3HAvR4zZNoaA6EfYKnxmFKxKYV9m9vfBhuedwZhVn8=)
2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:43:a8:cd:4e:ba:0b:ce:d6:27:56:e7:dc:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Oct 27 04:00:27 2026 GMT
Not After : Oct 28 04:00:27 2026 GMT
Subject: CN=c98691410df18893472e4e0b506825a674b98460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:91:9c:7f:c6:ba:13:93:bd:64:c9:c4:c6:
78:d6:4c:04:34:a0:7e:97:e4:82:dd:86:1d:01:71:
26:e6:24:b4:96:0d:ee:86:7b:d7:76:8f:45:a6:c8:
9c:29:8b:ca:f2:1d:4e:ae:f2:2e:d9:04:f6:b1:a1:
b2:42:77:cd:77:00:03:25:04:54:39:76:78:51:4e:
f0:76:f1:d3:8e:2b:6b:de:bc:1f:e9:e6:ae:57:c2:
b1:48:d2:4e:59:d4:10:15:a3:05:65:95:d5:59:12:
dc:df:f2:e1:bb:71:ca:88:81:2d:e6:cd:59:32:e3:
1f:ff:e8:35:b6:d7:77:f3:d1:f8:4e:15:af:8c:11:
95:7b:a9:c0:cd:95:de:dd:ff:44:50:3b:0e:59:0d:
91:d4:4e:2e:8d:25:35:af:77:c3:ef:01:e8:92:02:
ec:b5:68:67:68:5e:07:43:67:1f:16:9a:e4:a0:25:
0a:dc:c4:f5:e9:74:c1:51:0d:b8:09:1e:9c:cc:fe:
22:ae:07:d2:90:e1:5e:2c:25:87:62:49:d4:4d:ee:
46:85:36:b0:a7:1e:02:52:be:e3:15:d3:25:c3:f8:
b8:60:e4:30:28:1d:3c:5b:bb:7c:24:b6:a4:c7:16:
4a:bd:1f:c0:83:58:00:78:35:7a:39:58:0c:89:36:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:91:41:0D:F1:88:93:47:2E:4E:0B:50:68:25:A6:74:B9:84:60
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:58:45:e8:06:98:a4:7c:64:a2:27:c3:21:09:ef:96:23:
12:5d:54:1c:11:25:38:60:24:e5:c5:a8:83:3a:00:05:21:a0:
32:ac:0a:6e:c2:5b:30:04:38:3a:9a:49:cf:9b:51:a5:fe:9b:
d7:59:62:8b:f9:39:6a:61:f0:31:98:39:57:3d:70:4c:73:7a:
83:4f:d6:a1:9c:27:49:78:2f:75:8b:32:53:30:7c:a3:47:71:
d6:7a:f8:65:68:ac:12:1b:76:e5:f3:d8:db:67:44:39:ab:f8:
92:39:57:6e:f9:4d:93:9d:b0:37:b4:57:19:6d:0c:d4:8b:75:
bf:49:b9:24:a7:27:7c:44:83:8c:11:d8:ca:2c:c9:b8:b7:46:
99:42:77:08:e7:67:fe:4b:28:18:56:cf:a5:b1:00:fa:ad:ae:
67:a7:9b:63:1e:28:0e:98:53:c1:a3:59:cf:16:af:f0:b2:2a:
6b:3b:0c:43:cb:f7:1f:12:fb:d6:f7:94:75:1d:c4:89:96:2b:
12:2d:bc:d3:9c:24:a4:fb:56:17:cc:26:0f:32:27:c6:f7:c9:
f5:20:42:7b:72:6b:38:cb:a8:ff:88:81:a0:c9:e2:10:7c:fd:
70:71:a0:6a:42:7a:36:5b:02:16:86:88:f7:75:61:d8:25:6b:
88:73:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:38 2026 by rpki-client