Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
File: Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft (raw, json)
Hash identifier: pDcK9KLlaQNlR7b1Ad11QwF9F5ZNvRVuIIOpb5RQj0E=
Subject key identifier: D2:9E:12:01:F5:B1:4B:28:90:F8:84:14:B7:1A:CB:2C:4A:0E:B2:0C
Authority key identifier: 25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
Certificate issuer: /CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Certificate serial: 01A08F7C20B9783FB9A76BF93C7C922756EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
Manifest number: 011F
Signing time: Fri 11 Sep 2026 08:01:11 +0000
Manifest this update: Fri 11 Sep 2026 08:01:11 +0000
Manifest next update: Sat 12 Sep 2026 08:01:11 +0000
Files and hashes: 1: Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl (hash: D8a9z4oM3Pvgyd7zqMg73GmOVA/oiCnePUrGMTa1ZlU=)
2: wzD-Y1XRaC-02kl2ZMaS3E6fGFs.roa (hash: J6QWqMXaVC1M4duQaZv5ICVDFegW9Ncnya/aGNgLbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7c:20:b9:78:3f:b9:a7:6b:f9:3c:7c:92:27:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25afaa1efb29ffa56e6f5d420622dff0697fa627
Validity
Not Before: Sep 11 08:01:11 2026 GMT
Not After : Sep 12 08:01:11 2026 GMT
Subject: CN=d29e1201f5b14b2890f88414b71acb2c4a0eb20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a2:04:81:4d:ae:56:74:67:2a:65:b7:64:fb:
bb:44:8e:19:39:5b:84:b7:33:a2:5e:ad:2b:d6:a8:
df:72:d6:ab:96:19:7b:a0:d2:d5:0b:95:d5:1a:c0:
09:fc:2a:3f:df:f7:fa:e0:a0:b9:25:9e:a9:a6:54:
e4:f6:bd:3d:d1:42:bc:79:52:aa:c2:29:d5:c0:59:
2f:7d:ed:10:57:08:ad:60:f7:af:01:bf:c3:3e:27:
0a:ec:63:89:d6:1d:50:7e:5f:69:2d:9d:fb:8d:d2:
cd:78:c8:24:8f:83:06:eb:7b:62:52:5f:d2:7b:67:
ac:a8:99:ff:17:ff:98:d7:cf:16:e8:19:fd:e3:d1:
1b:ae:0e:f8:83:54:c3:41:33:07:92:dd:28:f6:ce:
e1:1d:0b:b7:32:3e:0d:09:93:a4:67:aa:de:ea:23:
3b:70:ba:52:37:80:b6:9a:0a:34:9a:d4:5e:c9:ba:
97:f5:d4:5c:82:0c:9a:c7:72:93:ee:26:d9:ba:9e:
e8:1b:97:53:21:6c:67:d5:6b:f0:40:b6:79:4a:80:
a6:ea:0f:ee:e3:23:fe:dd:a9:b3:42:75:d2:dd:a8:
e8:84:11:85:9d:5b:69:e9:16:bb:6c:5f:32:a0:76:
f7:29:92:36:66:d7:7b:1a:ed:51:4e:41:20:f6:c3:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:12:01:F5:B1:4B:28:90:F8:84:14:B7:1A:CB:2C:4A:0E:B2:0C
X509v3 Authority Key Identifier:
keyid:25:AF:AA:1E:FB:29:FF:A5:6E:6F:5D:42:06:22:DF:F0:69:7F:A6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja-qHvsp_6Vub11CBiLf8Gl_pic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/191451-1836-4bf8-ad1b-ba5ccc887047/1/Ja-qHvsp_6Vub11CBiLf8Gl_pic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:80:33:73:72:e0:ff:18:2f:66:82:29:b0:90:2e:ce:a2:
b4:5e:80:dd:ba:63:84:6d:71:47:10:3e:8c:de:6a:5c:cd:38:
47:34:8d:9a:f2:7d:10:ca:f4:6a:bb:0f:ed:33:49:5e:01:21:
77:e5:3f:4d:58:e4:b7:c9:4e:27:4c:fa:d4:28:97:3f:1a:54:
de:ae:4b:99:f5:20:37:24:0b:1d:9a:38:08:b3:cb:ad:ec:ef:
a3:f6:c0:f2:04:1c:6b:68:69:af:66:3d:6c:64:95:d3:06:e8:
93:29:fd:71:b9:95:7f:c6:77:36:b4:0e:42:bd:13:5d:1a:68:
86:47:58:cb:9d:b5:a1:7d:16:fc:a6:d8:7d:3b:f7:8a:c1:3e:
ab:7f:b3:03:62:6f:e5:c0:9c:ad:f4:99:16:70:45:3f:fb:47:
60:53:08:7e:78:ff:aa:34:eb:71:38:d5:2c:0e:a0:6b:64:bd:
be:d2:89:79:b0:a5:83:d0:30:84:20:3f:d7:8b:b5:06:a6:cd:
6a:d4:27:69:e3:a4:a4:90:8d:18:83:0c:3e:a0:e6:97:b8:ee:
db:7a:6f:fc:29:e6:5b:32:1e:90:b4:bf:f4:1e:98:8f:ac:79:
51:b9:36:a1:a3:aa:ac:2b:84:61:1f:de:67:d0:ad:97:5a:de:
f2:0d:00:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:39:01 2026 by rpki-client