Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
File: jg0lcq37cjROrUxTtVe0Dspel6I.mft (raw, json)
Hash identifier: E0VXDdomUyfqF7ozA/QfE2Mx4pRBAhcSE1/Pyfobe+o=
Subject key identifier: 26:7F:94:17:7B:EB:C7:77:5C:A7:10:74:37:F7:A9:79:41:99:BE:65
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Certificate issuer: /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial: 01A158C20F5535DEB437A1A5ABD544EF1672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
Manifest number: 019A
Signing time: Tue 20 Oct 2026 10:01:15 +0000
Manifest this update: Tue 20 Oct 2026 10:01:15 +0000
Manifest next update: Wed 21 Oct 2026 10:01:15 +0000
Files and hashes: 1: jg0lcq37cjROrUxTtVe0Dspel6I.crl (hash: F7GzzL9yICYnnz6QZjGAH7npywbqN5cvVz6dHq0ovvg=)
2: oGvecxChE9PvAr_dJh5s6G_15uM.roa (hash: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:c2:0f:55:35:de:b4:37:a1:a5:ab:d5:44:ef:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Validity
Not Before: Oct 20 10:01:15 2026 GMT
Not After : Oct 21 10:01:15 2026 GMT
Subject: CN=267f94177bebc7775ca7107437f7a9794199be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:f6:2b:8f:60:65:bd:32:83:6d:61:4f:f1:
b4:a8:9f:23:ba:ff:4f:4b:8f:19:f6:e4:61:1a:02:
8c:ea:fa:6d:2a:94:b0:ab:64:6d:b5:1c:0f:2e:78:
68:f4:d2:05:8d:4c:1d:54:a6:34:8a:c3:c3:9d:5a:
ce:7b:d9:43:80:1b:8b:94:f3:00:8b:8b:0d:ae:90:
5d:7c:57:e8:bc:43:e3:0f:9d:1e:c4:0a:ad:d3:aa:
e7:2d:96:c2:07:40:e7:55:c8:1d:1d:ad:12:b0:0a:
5a:51:4f:d5:fa:f4:fb:db:d4:de:9d:1f:f7:ed:42:
a7:02:61:cb:cb:e8:4c:bd:0e:9d:eb:08:cc:02:98:
03:d0:3f:5e:62:a0:73:6c:9d:9f:0b:b3:08:f7:db:
e9:56:f7:aa:54:fe:ca:66:06:b1:7a:21:4b:a2:65:
e4:86:86:49:0a:b6:6b:55:1f:50:1f:91:19:f1:aa:
49:d8:36:49:91:5b:0d:4c:b4:d3:fa:9c:c6:b2:f0:
41:28:64:4a:aa:41:2f:78:9f:ca:9d:dc:61:2e:22:
bc:4f:d8:ac:24:34:f5:e1:15:54:f0:8d:e1:95:86:
b1:9c:95:c0:c2:dc:de:63:c7:8a:8a:ef:27:ad:09:
7e:8e:54:71:b0:6d:51:22:27:88:08:53:dc:d2:4a:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:94:17:7B:EB:C7:77:5C:A7:10:74:37:F7:A9:79:41:99:BE:65
X509v3 Authority Key Identifier:
keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3c:bb:56:f5:07:83:34:fc:ba:04:ab:80:7c:7d:f5:75:71:
14:05:6c:cb:4b:b4:74:64:c5:d4:66:2a:8e:bd:b1:6f:70:a3:
6c:71:07:e8:7c:75:88:e2:1a:c4:76:8b:a6:f3:d2:7f:6a:60:
9d:a5:54:c9:14:7d:b1:38:11:45:53:9c:b6:c5:5e:99:5d:0e:
4f:07:b7:d7:e6:4a:1b:c5:b4:c3:41:0d:c2:77:95:f1:c4:18:
cd:78:11:87:b1:ec:fd:08:9e:0b:98:02:fd:72:75:92:ef:ef:
c7:91:95:bd:fb:b9:e1:f6:5c:bf:96:00:c5:c9:7a:a9:89:3c:
f2:3b:3c:c0:c3:b6:4f:ad:b7:3b:12:bf:27:ed:74:94:64:57:
6b:d6:7a:e8:de:f0:a7:a7:ec:f6:e0:3f:2b:ce:56:c9:2f:a2:
5c:40:c2:bc:e5:8e:f9:22:0e:59:b8:2a:0d:82:91:24:b9:3d:
0b:e1:72:62:5e:76:a8:a4:9c:18:a4:2c:06:0e:91:dd:3f:0d:
48:c4:28:ca:2d:3a:04:aa:27:e2:7c:d6:da:45:0e:77:8d:64:
52:e0:2c:18:e6:ac:3d:97:e2:4f:f3:f3:17:9e:3d:e3:eb:98:
ca:be:40:b9:e3:23:5e:8c:0f:7f:2c:1b:45:16:9d:3b:1f:5e:
6d:37:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:29:26 2026 by rpki-client