Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: OmFGvDTwsFCcwOIzEAMhW1kgVrHO9n0lRSsi71SMwoE=
Subject key identifier: D1:9D:22:D2:CF:D1:30:F1:02:5D:27:B5:CE:46:9A:85:D8:50:61:2B
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 01A08D1FBFD3403DB8E5000D7D85BB77BA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 1720
Signing time: Thu 10 Sep 2026 21:01:03 +0000
Manifest this update: Thu 10 Sep 2026 21:01:03 +0000
Manifest next update: Fri 11 Sep 2026 21:01:03 +0000
Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: prco7GwNP44NY4UmWJmxEjNiBGG3U9EoeH8oud+Hy6c=)
2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:bf:d3:40:3d:b8:e5:00:0d:7d:85:bb:77:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Sep 10 21:01:03 2026 GMT
Not After : Sep 11 21:01:03 2026 GMT
Subject: CN=d19d22d2cfd130f1025d27b5ce469a85d850612b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:53:c3:3a:81:4a:97:9e:ed:a1:2f:7c:94:
1d:1d:4a:13:cd:fc:7c:cc:1c:20:72:05:99:39:f3:
b2:d4:49:7b:87:2c:9c:31:47:9c:d1:40:12:ba:34:
6b:54:dd:ef:3c:24:f0:76:3f:9e:91:7f:f6:ee:ee:
38:00:24:95:33:cb:c8:d8:ff:c5:23:e6:a5:6d:12:
66:6d:a9:b2:b8:95:3f:e3:44:90:4f:de:12:c5:1c:
71:f3:8c:f2:d8:29:08:3f:32:ad:64:30:42:29:b0:
e3:9b:ac:67:ea:3f:d0:bf:5c:6a:da:c5:56:a2:b4:
78:7f:20:2c:94:e6:2b:76:9d:25:b8:ba:86:6c:59:
d0:7a:c2:39:fc:01:6b:64:21:37:98:f5:66:fb:78:
2a:58:42:c4:e9:6f:99:d2:a5:29:ce:b0:6b:79:79:
03:06:b8:3c:f5:ac:7f:f9:a1:30:37:c7:79:6b:50:
3a:1e:fb:16:c7:f4:f7:ab:3d:e1:b1:87:d8:d9:9c:
9a:b3:ef:e9:14:1f:bb:a3:ed:c3:e0:b3:c3:48:89:
86:09:c0:79:e1:04:17:05:3a:96:11:a1:a1:0c:a4:
49:cf:6f:cb:98:3e:ed:50:b9:cc:10:fd:4c:32:64:
58:ed:e3:40:91:98:c4:73:a0:35:85:40:c0:be:80:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:22:D2:CF:D1:30:F1:02:5D:27:B5:CE:46:9A:85:D8:50:61:2B
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:75:3a:fa:fa:da:61:42:58:16:6e:3e:59:af:84:f3:5e:
18:75:e2:04:16:bc:f6:97:a6:a8:db:b8:39:3d:fa:13:5c:ea:
fa:a3:f5:bb:81:b9:6c:b1:ef:3e:79:24:b7:6a:29:5a:0f:e4:
c7:f8:79:95:77:8b:a8:17:92:b7:98:ab:2e:41:a6:01:53:4b:
a0:17:ef:44:1c:ba:59:87:92:74:20:ea:58:c4:49:2f:57:80:
51:50:bc:e9:ce:42:da:62:17:0a:22:fc:f1:69:95:c8:62:3e:
f2:77:2f:24:57:9c:1b:4f:4d:de:c0:e7:c7:1d:e7:20:c2:4f:
b3:26:ef:2e:42:db:12:21:e2:40:c7:e2:8f:b9:d6:40:c8:1f:
14:96:d0:93:57:e1:a6:1c:0e:be:90:28:c8:4e:7d:86:f9:c4:
e6:54:b6:6a:a9:46:07:05:b1:5e:2f:cb:51:d5:ba:8a:0f:ab:
3f:59:d2:87:30:28:33:7f:b5:d0:69:52:f7:e6:0b:e5:b2:46:
a7:ea:56:41:23:0d:82:f2:12:34:b5:8a:2c:70:b7:6e:0a:a7:
19:d7:1d:d3:07:b0:cf:9c:df:46:26:e5:46:f1:2f:bd:3e:15:
b1:b9:87:d3:4d:f2:5a:58:3b:33:5a:b7:81:1a:8c:77:bb:23:
cb:de:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:49 2026 by rpki-client