Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: ony1huWUwTsxyScZdybDp/oJoyYATxmd7DGHEZxwlYQ=
Subject key identifier: 5D:9E:7D:5A:1A:B5:FE:63:D7:87:B9:40:32:02:08:4E:CF:DB:C8:E5
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01A18C0A86AFD784438028320212106B5015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1AD5
Signing time: Fri 30 Oct 2026 09:01:02 +0000
Manifest this update: Fri 30 Oct 2026 09:01:02 +0000
Manifest next update: Sat 31 Oct 2026 09:01:02 +0000
Files and hashes: 1: 1-I5FqFOjKLrYYIJZZ-XuN8omXds.roa (hash: PAIPjGd1pVMf6ElqeD0qtwPAX/uK0ZcotcD7BQI5DL8=)
2: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
3: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: JcpOCSC45CmLkwurE7ZMgca0I1cdfqVW1XjR5FtOsVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:86:af:d7:84:43:80:28:32:02:12:10:6b:50:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Oct 30 09:01:02 2026 GMT
Not After : Oct 31 09:01:02 2026 GMT
Subject: CN=5d9e7d5a1ab5fe63d787b9403202084ecfdbc8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:60:f9:f6:42:89:4e:d4:02:7a:22:45:95:
fa:d5:42:59:6a:f2:de:8a:bc:c2:98:58:11:c8:cd:
1c:49:94:d4:6a:fd:93:dc:4a:4f:54:1e:eb:bd:2f:
d1:91:f4:1f:77:9d:68:09:b0:49:c7:6d:cc:65:12:
71:12:56:23:6b:ec:d1:a5:e3:b6:1c:8d:d6:f3:ba:
e0:48:7d:9a:28:b0:c3:9e:31:8a:83:c5:6e:2e:b1:
39:57:bd:b4:ce:ac:41:61:12:40:e2:38:36:5a:0e:
b4:f7:0c:0f:dc:5a:8e:09:73:3e:dd:27:67:2d:2b:
4f:02:aa:e5:78:16:d0:74:bb:89:03:37:d2:a6:87:
6e:a4:68:2c:f7:b2:01:d4:11:74:05:18:9b:e3:aa:
aa:a1:59:a6:5c:b1:bd:6a:b2:4a:af:74:0c:6a:c3:
27:db:49:91:5f:61:47:48:a3:8e:8b:e2:70:69:6d:
24:41:99:a5:99:37:dd:96:60:33:b3:71:9b:24:36:
64:89:1f:d4:48:4a:a1:8a:eb:1a:39:43:7d:99:95:
b4:77:9d:61:1c:7d:40:9f:92:78:3b:1c:6e:61:c8:
8f:e1:ce:c0:2c:ee:3b:6d:40:ec:22:00:e0:c6:5b:
9b:ad:c3:87:48:6b:a0:c7:ab:bd:15:ae:b3:c6:c0:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9E:7D:5A:1A:B5:FE:63:D7:87:B9:40:32:02:08:4E:CF:DB:C8:E5
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:f7:27:40:cd:81:4b:2b:55:c8:9b:8c:15:ad:b5:88:7f:
58:a7:d2:71:a4:fb:d3:44:1e:35:cc:e9:20:df:fd:33:3a:2a:
31:f8:78:c3:dc:b0:b6:82:78:43:ee:b2:84:b4:a6:9e:77:72:
b1:42:0d:e9:f0:eb:80:9b:39:e3:64:a5:7f:11:86:94:d3:47:
10:f9:d7:63:a3:1e:f3:e3:4b:20:d4:b8:d6:62:1d:5e:21:68:
f2:61:77:a9:85:58:37:99:a6:50:90:d3:19:2e:1c:9b:b6:c1:
5b:ab:2e:fe:47:53:ba:a1:17:a8:de:01:bc:b9:99:17:58:50:
a0:73:e0:82:08:24:66:88:24:1a:02:09:70:1f:a4:bd:58:84:
38:45:95:6b:63:81:a7:40:fb:e6:02:05:8b:a1:2c:42:2a:ae:
0d:cc:20:35:09:eb:4d:f4:d7:c1:2b:0f:6a:44:7e:12:f1:2d:
f7:24:77:36:1d:b6:d5:a8:b0:e0:0d:d8:46:17:d9:55:5e:5f:
3a:c8:90:78:f6:5f:fa:f9:56:93:91:79:ef:74:2b:aa:ba:56:
a7:02:31:41:77:ff:1d:e2:b4:f2:23:00:74:be:15:30:6c:0e:
84:da:04:4c:8a:a0:92:a9:16:fd:c8:23:6a:91:2c:b7:f5:d6:
e2:ef:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:02 2026 by rpki-client