Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
File: jg0lcq37cjROrUxTtVe0Dspel6I.mft (raw, json)
Hash identifier: Vfk5iZHRDyLpavZaGqJxZ+8sXADYVq5KG3ndbmTgqi8=
Subject key identifier: C9:CF:D5:DC:95:2C:7C:D3:48:32:2B:15:58:8B:8D:4F:5F:10:E6:A3
Authority key identifier: 8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
Certificate issuer: /CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Certificate serial: 01A15C9E48C3DE7C8FE38FF2AF556A5E1023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
Manifest number: 019C
Signing time: Wed 21 Oct 2026 04:00:39 +0000
Manifest this update: Wed 21 Oct 2026 04:00:39 +0000
Manifest next update: Thu 22 Oct 2026 04:00:39 +0000
Files and hashes: 1: jg0lcq37cjROrUxTtVe0Dspel6I.crl (hash: omyDCTXKRgk+6/MjK18rzY4KjVOVW+KunMdgsOfw1rU=)
2: oGvecxChE9PvAr_dJh5s6G_15uM.roa (hash: CJ9Dwla0xxRWMrW9UQklY6shlGWQmLDV86+ixrs3Kxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:9e:48:c3:de:7c:8f:e3:8f:f2:af:55:6a:5e:10:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0d2572adfb72344ead4c53b557b40eca5e97a2
Validity
Not Before: Oct 21 04:00:39 2026 GMT
Not After : Oct 22 04:00:39 2026 GMT
Subject: CN=c9cfd5dc952c7cd348322b15588b8d4f5f10e6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:ad:a6:2a:b5:aa:32:39:a2:2c:48:6c:68:
a7:bf:53:34:98:f6:48:72:46:ef:3f:70:d1:ee:90:
1e:72:f7:dc:f9:96:d0:d9:7d:0a:e3:c5:d5:66:59:
cb:c9:47:66:fa:ac:cb:64:38:15:4a:e7:64:b9:8e:
52:37:4b:5f:e7:38:82:a3:77:b6:7d:89:54:a3:42:
ae:18:3a:f1:f7:ce:14:1c:8a:74:7b:3f:ac:04:58:
7f:45:de:59:1c:d2:00:da:8b:7a:71:65:20:e8:93:
73:ba:43:ee:3b:79:b9:49:89:71:f6:3f:a1:fc:9e:
a9:c1:20:78:be:15:94:d2:25:57:ba:ba:7c:4a:2d:
dc:a1:3c:aa:25:c1:19:85:14:26:14:ae:e4:0d:78:
df:0d:a2:74:77:4b:b0:4f:46:cf:6c:a0:5c:87:cb:
21:b7:e0:d0:b7:52:dc:61:d1:31:67:f1:82:e1:63:
2e:7f:9c:11:bf:8b:3d:0b:19:ac:12:46:65:b4:ea:
31:7b:79:f5:53:c0:03:10:fa:7f:93:20:70:c3:6e:
7b:5d:60:8a:97:93:28:79:bd:ed:aa:18:2f:ad:58:
ea:17:38:04:e4:4d:03:65:fc:fe:0d:4f:e1:08:c5:
93:25:1b:8e:50:b0:ae:0f:3a:2b:e7:5f:e2:8b:32:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:D5:DC:95:2C:7C:D3:48:32:2B:15:58:8B:8D:4F:5F:10:E6:A3
X509v3 Authority Key Identifier:
keyid:8E:0D:25:72:AD:FB:72:34:4E:AD:4C:53:B5:57:B4:0E:CA:5E:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg0lcq37cjROrUxTtVe0Dspel6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c20d01-e528-4489-a10c-66eb3e3dec95/1/jg0lcq37cjROrUxTtVe0Dspel6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:93:2b:34:db:15:68:fe:2d:48:58:79:e2:b8:20:3c:63:
91:17:7e:53:ff:e3:e0:f3:c1:4e:9f:6b:81:47:0d:d7:4b:d9:
41:89:07:4b:27:70:e1:a1:7f:75:e2:f7:6b:bf:19:44:35:0a:
5c:31:f0:55:d1:f3:71:ad:76:da:33:06:84:2e:fb:7e:6f:02:
ee:4c:a4:1c:7d:ca:e7:57:fe:f0:83:5e:e8:2b:09:ea:e5:62:
f5:10:23:58:20:4f:01:a6:28:35:7e:bc:9c:68:aa:a4:f8:c3:
a4:23:dd:c5:b3:76:c4:b9:fe:09:e8:c6:91:26:51:bc:b0:7d:
33:51:15:66:38:d0:dd:d6:53:5e:f1:ea:f3:aa:68:64:be:9e:
c9:5f:81:cd:f7:85:51:15:73:91:b6:33:d0:ce:b4:d4:12:5e:
7a:8f:97:61:ff:16:b6:35:9f:d8:9f:b1:f9:d7:b3:3e:db:06:
18:87:da:be:22:cf:e3:79:0d:c2:59:9f:e5:74:9c:ab:25:b4:
f4:7a:89:a7:ab:4b:e1:04:57:b6:cc:ee:d5:28:b6:19:d7:f5:
b6:46:99:f6:7a:77:14:05:db:b0:63:33:e0:b2:e6:56:6d:8e:
96:9e:04:f1:5f:dc:02:c5:95:2e:4f:27:d2:34:28:d0:5f:29:
50:f5:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:23:04 2026 by rpki-client