Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: 0UjRtoAaxsn7lBRzp3XPmR+KLmOMLIm6osyXtyHcYv0=
Subject key identifier: 91:B1:8B:14:4A:1A:8E:16:18:5E:09:9D:71:07:E0:D3:85:7F:38:6A
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 01A08C7BB47CC605CA000C0FC7C669BB4E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1A51
Signing time: Thu 10 Sep 2026 18:01:52 +0000
Manifest this update: Thu 10 Sep 2026 18:01:52 +0000
Manifest next update: Fri 11 Sep 2026 18:01:52 +0000
Files and hashes: 1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: /tB645fuFnFX+6tFkEE+ZdlB/aBeOMaiZrpQYgsFZ1s=)
2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:b4:7c:c6:05:ca:00:0c:0f:c7:c6:69:bb:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Sep 10 18:01:52 2026 GMT
Not After : Sep 11 18:01:52 2026 GMT
Subject: CN=91b18b144a1a8e16185e099d7107e0d3857f386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:0a:c9:f3:78:96:dc:76:66:19:41:f3:1d:
04:67:ac:92:d5:bd:e7:f9:43:47:d4:06:fd:01:ff:
d4:19:2d:ce:95:2e:b7:67:43:88:af:51:99:b8:10:
40:63:18:7e:37:b2:79:14:f6:cc:83:85:e0:86:53:
fc:c5:cd:21:01:af:0c:75:ca:9a:d9:e4:b1:a6:6f:
08:09:c1:24:a5:ff:06:c9:1e:d4:87:5a:f3:13:ae:
69:5f:c5:36:ca:7d:54:ea:0e:c5:ce:0b:24:25:e9:
c8:5a:b0:94:5d:66:22:86:29:29:ce:e5:99:b1:cc:
2a:86:be:6f:9b:30:c5:da:46:d8:73:bd:40:71:ef:
b7:36:9f:12:e3:5d:c9:d0:0c:c5:18:42:59:28:45:
54:7b:e4:90:9a:1e:80:74:dd:d8:c0:35:72:71:3c:
07:7f:fd:26:14:0d:f3:79:78:e7:f8:c3:21:ce:22:
80:44:56:35:65:3d:cc:fc:82:8b:a2:2c:00:0b:3c:
88:8d:6d:c7:d5:10:cc:72:07:32:8f:0c:d4:cf:9f:
17:47:88:8a:84:23:ed:59:9a:21:6e:71:33:11:97:
5a:0c:40:fa:3b:cf:36:53:61:ea:46:cb:84:17:ef:
4d:80:e8:fe:f1:27:0e:83:16:9f:f4:1d:42:cb:44:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B1:8B:14:4A:1A:8E:16:18:5E:09:9D:71:07:E0:D3:85:7F:38:6A
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:90:7a:12:16:45:af:fb:94:4a:8c:9a:7f:56:d9:d8:90:94:
a2:fc:30:b3:d1:6a:63:78:4c:35:a1:10:d1:e4:79:3f:60:50:
6a:9a:5a:e3:49:d1:a4:e7:7a:5e:e7:c1:82:b0:07:88:81:29:
93:c2:76:b2:bf:4a:fd:72:b2:f9:be:cc:ef:34:26:19:6a:6d:
5e:19:5e:c6:ba:b7:f6:7f:8e:1b:c2:47:61:c1:af:78:e2:d0:
65:18:70:49:27:5d:c6:0c:43:a3:28:0c:ec:5a:b0:b9:e4:0d:
06:14:56:f2:af:3d:f1:c6:44:3a:da:e9:bf:09:25:00:3b:2e:
a2:10:4a:91:a5:6d:a1:ce:7e:9e:76:23:f9:b6:75:e7:51:8e:
7d:4f:db:ec:55:f6:99:d4:1e:e2:87:82:f4:31:a3:3c:2e:79:
3b:e1:61:93:bb:21:eb:15:de:14:01:2c:75:f0:78:55:35:cb:
5a:4f:c8:d4:3c:cb:10:7b:f5:3d:31:cb:97:39:d2:41:24:ba:
f5:7c:0a:89:2b:75:4c:f5:71:2c:89:c8:18:45:74:32:62:58:
2c:84:b2:ef:c5:af:b6:3c:ab:ee:61:a2:fb:07:19:ca:02:ee:
a5:e9:25:fa:a3:16:26:e8:2c:76:be:eb:e1:af:fd:68:3c:91:
21:a7:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:24 2026 by rpki-client