Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: emsceUSqBmuaZnHPETsVlEGuaQmlDtZ894VHbUCE1B8=
Subject key identifier: 81:CD:55:E1:3E:E3:76:44:E4:D5:53:70:31:B0:FF:AD:CA:0C:15:9F
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 01A10625AE65E1A9CD5353DBD8C018826870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 09:01:34 +0000
Manifest this update: Sun 04 Oct 2026 09:01:34 +0000
Manifest next update: Mon 05 Oct 2026 09:01:34 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: uVooMbo91KoVPleRYq1/aXYLU/6Dga2tEaFjMSygn3s=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:ae:65:e1:a9:cd:53:53:db:d8:c0:18:82:68:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Oct 4 09:01:34 2026 GMT
Not After : Oct 5 09:01:34 2026 GMT
Subject: CN=81cd55e13ee37644e4d5537031b0ffadca0c159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:4f:bd:3c:5f:b2:a8:dd:19:30:ce:c5:dd:
c5:6d:6b:72:5a:0a:b0:34:e4:1f:64:27:30:21:ae:
f9:ea:b1:17:60:b1:f3:21:2a:58:3b:88:79:b0:b1:
b1:38:33:84:fc:63:52:b8:9f:5e:d0:07:8f:8a:71:
97:85:ae:a9:d5:66:f6:06:fe:94:01:9e:2a:eb:97:
41:90:34:dc:53:53:e4:f8:a8:1a:65:33:cb:bf:5f:
11:b4:e9:12:b2:34:73:44:d7:49:71:e3:e5:3b:f1:
83:19:aa:eb:43:04:0f:96:58:86:ac:e8:ea:d2:3d:
c9:53:8d:61:e8:96:fe:65:cb:30:d7:61:02:86:5c:
09:71:c2:47:7c:8c:8d:b5:4d:0c:20:c9:60:8f:1e:
fe:fe:d1:ba:d4:89:41:14:db:ff:bd:c9:38:c5:ce:
6a:66:9e:6c:6e:1a:ec:62:9f:f3:ba:e4:21:7b:2c:
9d:bc:e9:8c:77:2f:6d:b2:5d:b3:c0:da:c4:53:f9:
2c:05:10:20:26:60:4e:9a:69:23:49:ad:0d:e9:b0:
e5:21:d3:6d:8d:80:80:59:f4:91:b0:f1:41:c0:c2:
4e:66:0d:5c:58:6b:f2:8e:58:1f:b9:65:a9:4f:b0:
eb:5f:24:02:2a:8c:ce:aa:bd:65:2d:ee:1d:ab:e2:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:55:E1:3E:E3:76:44:E4:D5:53:70:31:B0:FF:AD:CA:0C:15:9F
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2a:b3:84:d0:a3:41:02:14:c4:93:56:59:89:b4:66:bb:2e:
9a:12:8c:eb:8c:07:f6:ea:0a:be:3c:46:77:7c:61:c0:70:67:
11:f5:23:6b:d2:c0:df:e1:93:b1:f8:06:2f:30:e4:89:67:1b:
cc:cf:bf:63:5f:43:ca:e0:fc:c2:b8:b1:c2:fe:bf:9e:25:b9:
55:6a:32:42:3c:d2:45:49:66:63:0a:43:8b:1f:93:de:92:27:
37:b1:63:7d:4e:a1:eb:c9:f9:24:2b:b6:40:bb:13:5b:2f:97:
7b:e0:e5:a6:60:77:cf:65:2e:9a:c3:5f:52:eb:f4:9e:7a:05:
59:b2:7c:07:d5:71:29:3e:17:09:59:43:bd:d4:bc:bc:72:e8:
bb:54:84:80:e1:35:6f:d5:47:55:e5:68:fd:41:14:be:2a:f4:
8b:ae:c7:28:39:f5:93:76:52:69:07:a4:3a:aa:39:91:72:53:
7a:37:fc:25:7a:f5:fa:02:2e:5b:e8:2c:ff:d9:11:eb:f4:e7:
26:df:78:fe:47:52:70:eb:c2:6f:18:4d:25:68:6a:52:74:19:
df:14:66:d3:32:b1:dc:40:5d:d4:a1:71:95:2e:dd:58:a0:a0:
82:0d:a9:41:3b:3a:d8:da:f4:74:71:c5:3f:7f:84:d3:8d:24:
3b:a4:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:00:05 2026 by rpki-client