Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: Mv1jMQF21pcUqp/SE20hlZt1ICB7hhhG+TWboiN/PME=
Subject key identifier: CD:D4:F6:02:D6:53:D3:0B:98:D7:98:7B:6A:08:64:FA:6C:A0:08:EA
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 01A1A74AFFC6BBEDD5D00A9267F4D815489D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1A03
Signing time: Wed 04 Nov 2026 16:01:12 +0000
Manifest this update: Wed 04 Nov 2026 16:01:12 +0000
Manifest next update: Thu 05 Nov 2026 16:01:12 +0000
Files and hashes: 1: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: pXy09rvaQuuokmlVWsXAC1jvkMyl1Lv1vEcFdexkUi4=)
2: YdEKnNui8kZkJHSxbtIPmvbJjr8.roa (hash: 0ClyNA/E0qLCFvTgVmstwCaGn8TFoS5MPxpcfIn67MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4a:ff:c6:bb:ed:d5:d0:0a:92:67:f4:d8:15:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Nov 4 16:01:12 2026 GMT
Not After : Nov 5 16:01:12 2026 GMT
Subject: CN=cdd4f602d653d30b98d7987b6a0864fa6ca008ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:a5:c4:bc:91:bb:37:98:d2:1e:13:b8:fc:
a0:d9:97:4d:bb:6b:33:fc:81:ae:1a:a7:f2:e9:d0:
50:15:c9:2e:7f:33:ab:db:c1:10:5a:79:49:88:96:
8e:30:54:55:e2:70:77:aa:6d:f0:66:08:96:be:01:
c2:c3:22:6e:7a:dd:9a:59:e0:1d:62:ab:e7:4f:6d:
fa:9d:27:11:3b:69:c4:37:6c:73:ab:5c:8b:0e:33:
f1:b7:fa:ac:6f:62:cf:ef:20:a6:77:5a:02:f0:32:
d9:3c:3f:83:54:26:cf:ae:0e:24:ab:7a:8e:56:80:
52:81:72:16:3b:41:58:1f:75:41:5e:fa:b0:5d:aa:
e4:95:c7:33:18:e8:b3:6e:61:a4:ad:b5:7a:7d:f3:
03:01:56:87:0b:31:fa:f3:31:e9:02:07:cc:e3:31:
ae:01:b1:e4:f9:36:be:3a:6d:cc:ee:ed:6f:39:24:
7a:b2:b7:6f:81:eb:fe:cd:f5:31:61:12:d9:4b:2b:
ae:15:52:16:41:e7:71:dd:fe:af:08:77:c7:b1:c5:
a3:72:04:af:e1:ae:17:5b:ae:92:9f:96:9d:3f:e2:
c6:40:0c:87:26:f9:02:92:84:b9:07:d3:f5:a2:f8:
42:6e:dd:89:df:b0:30:b5:03:08:4b:81:f1:cd:8b:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D4:F6:02:D6:53:D3:0B:98:D7:98:7B:6A:08:64:FA:6C:A0:08:EA
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:49:85:2a:69:fa:02:c7:9f:0f:a0:c8:ec:5d:6c:6c:30:e9:
dc:a8:5c:63:af:94:ac:f2:14:16:20:d2:0e:d2:80:0c:b3:1d:
76:02:34:e4:53:dc:bd:69:e7:d6:99:8a:48:00:f1:5a:67:75:
40:5c:83:77:b2:41:df:9a:9d:43:e5:75:a8:18:ee:75:db:cc:
5c:61:18:36:ae:83:d4:b8:77:b5:1c:be:08:67:67:2b:dd:f6:
04:3d:05:a6:58:dd:7d:61:6a:fb:47:da:7d:7d:e2:e4:fa:b7:
23:21:8d:6f:0e:2d:a8:a7:8f:33:28:af:a7:b7:6d:10:20:40:
7b:c9:c8:84:c4:c4:39:9f:89:c8:1c:7c:44:20:c4:62:ff:2a:
13:65:dc:3c:1f:a8:92:71:d2:e3:83:b7:c6:03:8c:11:67:8f:
a0:4c:ec:87:9f:07:65:e4:ee:97:d4:11:70:5b:5a:d1:67:2a:
cf:66:e2:62:4a:93:e7:34:de:5b:b6:6a:28:19:ef:5b:1e:e4:
a1:a8:1b:64:fc:af:71:da:a8:7e:00:dc:fe:1e:ff:19:c9:6b:
a2:0b:d8:f5:2e:0e:0d:e7:75:02:a8:fd:de:24:2f:8b:07:94:
01:6a:a7:98:68:d1:ab:b4:54:46:20:9c:10:da:8d:19:67:d6:
fe:88:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:43:33 2026 by rpki-client