Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: XiEpRxJWURMpA8lT9uINhBkKUyjUtPiYl/0QMhOBnxU=
Subject key identifier: 0D:66:0B:D6:66:50:42:B4:D0:E3:CB:E7:6E:1F:6A:15:3A:17:62:FA
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 01A175B96CBED6C8604BFE33844B003FA159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1654
Signing time: Mon 26 Oct 2026 01:00:48 +0000
Manifest this update: Mon 26 Oct 2026 01:00:48 +0000
Manifest next update: Tue 27 Oct 2026 01:00:48 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: u412sNagkgAAhs+AFTakmlZqRq7JoFQI5p083kPd8gM=)
2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:6c:be:d6:c8:60:4b:fe:33:84:4b:00:3f:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Oct 26 01:00:48 2026 GMT
Not After : Oct 27 01:00:48 2026 GMT
Subject: CN=0d660bd6665042b4d0e3cbe76e1f6a153a1762fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:96:14:f1:60:91:5c:fe:80:3a:d6:f6:3b:
00:1a:9f:be:47:c7:09:08:49:6c:30:34:55:ce:ed:
20:0c:13:29:f0:32:86:5e:06:f7:2e:25:16:ce:b3:
e2:50:78:2f:6c:72:22:4b:32:23:79:a8:28:7b:15:
db:30:52:d8:d3:da:1e:89:9c:68:50:06:fa:77:40:
ba:72:5a:40:a3:be:2f:c5:e7:dd:59:26:68:ff:45:
2a:2a:c3:43:a2:de:18:cc:79:16:ee:9d:3a:53:09:
b7:75:6b:9d:ab:dd:d9:5d:d1:c9:04:dd:83:7e:2c:
c8:a9:73:26:a0:d3:80:ca:0b:c5:c2:e6:07:f2:2d:
6f:63:4a:29:d7:21:b2:11:97:81:7e:ac:de:98:11:
db:71:8e:96:ca:af:23:61:a4:52:18:a0:ac:72:86:
f8:e8:d0:93:19:4a:0a:07:5d:21:06:f0:cd:2f:a0:
27:4d:4c:f6:ec:26:65:65:0d:0d:63:df:ac:d9:a4:
28:3b:c0:da:c8:ec:79:4c:af:c9:fd:83:ee:e3:e4:
ed:c1:b0:0e:be:fe:da:7f:de:98:e8:29:ac:87:d7:
15:c8:0f:d7:06:68:1a:99:78:e7:28:2a:af:e9:04:
40:eb:f9:cd:02:c5:0a:28:12:eb:d9:7e:f3:bc:63:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:66:0B:D6:66:50:42:B4:D0:E3:CB:E7:6E:1F:6A:15:3A:17:62:FA
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:1c:bd:a6:59:84:46:6e:ff:71:bc:4a:87:c1:c8:5f:33:
a7:15:8c:83:51:a8:fb:6a:ff:0a:df:72:bb:8c:64:9f:23:b9:
cc:84:12:f6:34:e1:1a:dc:21:cb:a2:2f:02:cf:ed:71:5f:cc:
f6:b3:db:98:14:a7:91:15:1a:5d:e5:00:7c:1c:61:5e:2c:8b:
50:0c:93:b6:d3:61:ba:b5:9c:d5:84:bc:18:e7:07:1f:29:0f:
c4:1e:89:1a:ad:d3:3e:0e:b4:09:cd:cc:15:03:49:53:44:c8:
d2:61:af:6c:96:60:53:e5:72:84:92:24:3e:17:54:30:c8:72:
bc:45:5f:c2:91:35:d5:90:f5:63:b0:f1:c3:2f:9b:02:cd:13:
ed:37:58:99:7d:77:ab:52:77:5b:39:44:16:59:8b:88:f3:4e:
0e:bc:b6:be:d8:9d:6d:47:77:6f:5e:4b:e6:14:9e:00:da:a4:
47:13:9d:9a:9c:18:12:d4:fd:17:28:0e:cb:4f:ae:80:5a:2c:
3b:39:48:0b:e3:04:c8:c5:d8:dc:32:0a:8e:16:bb:d7:e6:0b:
d9:05:55:bb:e3:7a:89:c1:e2:29:52:8a:d3:5f:fb:6f:8f:80:
51:1a:7c:62:b9:a3:db:8d:05:02:49:ca:e4:03:61:f5:7a:25:
66:8a:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:14:04 2026 by rpki-client