Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: KHkK5ee+xbkH3JYnpQfLy/CV5A7kSQfIZBmGxsmNXME=
Subject key identifier: 9E:98:75:3B:E1:55:6C:1D:2E:75:C6:AF:E0:A0:2F:78:C7:B3:66:41
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01A08B3111E5AF95A5C5A83DF1AFC0B81CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1A50
Signing time: Thu 10 Sep 2026 12:00:43 +0000
Manifest this update: Thu 10 Sep 2026 12:00:43 +0000
Manifest next update: Fri 11 Sep 2026 12:00:43 +0000
Files and hashes: 1: 1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa (hash: PAIPjGd1pVMf6ElqeD0qtwPAX/uK0ZcotcD7BQI5DL8=)
2: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
3: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: 9hvSidwQ4r0SDzrly3a7xINE28NpbxjygZzK95euXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:11:e5:af:95:a5:c5:a8:3d:f1:af:c0:b8:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Sep 10 12:00:43 2026 GMT
Not After : Sep 11 12:00:43 2026 GMT
Subject: CN=9e98753be1556c1d2e75c6afe0a02f78c7b36641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:79:3d:30:46:cd:06:b4:9f:c3:86:9b:46:
3b:6e:f3:3c:7e:2a:7a:89:71:77:8b:37:7d:24:08:
f5:59:82:5d:30:cd:cc:c4:92:55:5d:ae:02:fa:53:
53:6c:fd:1e:39:cc:26:43:f8:0c:19:c6:2d:12:ae:
4e:fe:30:ff:70:23:b9:57:c9:ae:84:a0:80:43:31:
38:1b:5d:97:f9:1f:1d:22:2d:b7:9c:24:75:9f:0f:
25:03:bd:de:28:f4:7b:c1:8d:f5:45:29:4e:52:7c:
48:67:c2:45:33:05:af:77:86:05:ab:ba:51:0a:33:
0c:a7:58:c3:d6:b0:1b:28:ce:ea:78:a4:27:f2:21:
61:45:4f:8c:50:75:4f:37:8e:06:f8:98:97:ab:d0:
da:92:98:8e:48:4f:7e:77:2f:1f:f7:19:2d:ba:ee:
2f:d9:15:36:91:50:22:76:69:2b:3e:e6:e7:3b:de:
c7:38:b3:76:bc:76:f4:30:1e:40:0a:1c:a9:56:f3:
64:ce:c5:12:ec:59:6e:e0:41:d9:10:eb:91:9b:e1:
cf:49:fc:85:a9:02:56:e9:80:c8:0b:ef:11:30:80:
4f:45:93:2d:e4:20:0f:da:8c:95:7d:d6:de:71:01:
5d:f4:ad:95:b8:80:06:2f:39:c5:66:4d:df:91:75:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:75:3B:E1:55:6C:1D:2E:75:C6:AF:E0:A0:2F:78:C7:B3:66:41
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:82:6b:af:2b:97:35:8c:0b:e8:ec:28:e4:26:77:3a:d5:2c:
16:e6:36:f2:b3:75:4d:37:15:c8:59:d9:fe:35:2c:3e:4a:c6:
13:02:dd:8b:a4:09:26:a2:03:80:c9:43:57:e3:bb:10:bd:3a:
45:66:c3:c6:24:26:b7:84:75:24:98:1b:30:d3:ce:73:f5:4f:
09:44:b2:ab:90:44:bc:2b:42:17:b9:a6:cd:e6:3e:8b:5e:4b:
95:f0:d2:22:68:d6:6f:58:c9:9c:f3:59:82:2c:80:e3:12:32:
a5:cf:eb:b7:02:d6:8c:4a:53:01:91:bd:79:4b:63:af:5e:b6:
c4:e0:2b:5a:75:ae:d2:d0:5d:1a:26:e8:0c:7d:b0:8e:ac:c8:
75:b8:9e:78:01:93:78:4c:36:a2:7e:21:04:24:32:f3:0b:60:
3d:1c:92:12:ac:9f:7a:b6:93:4a:61:a4:f6:27:37:cc:c4:d4:
c5:44:10:4a:24:c8:79:19:a2:93:c3:9d:1d:c0:c1:18:34:32:
4e:ec:67:d5:d3:8b:7b:94:68:31:f2:8b:6c:a0:f0:a6:3f:97:
a4:15:76:0d:b4:2b:cc:62:bf:98:4d:3e:83:ba:38:90:2c:d3:
be:c1:1c:78:f3:a5:62:93:66:0a:8a:8c:70:ae:a6:b1:4c:b4:
13:cb:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:08 2026 by rpki-client