Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: ApnqLDAfye/mbrvjM0jrJSkhQ0igpnZTW5RlD1N7Uo4=
Subject key identifier: 24:67:9D:CA:76:F3:B9:D5:81:17:BB:AA:AA:2C:54:CB:66:50:52:FC
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01A082D29C26CF508D13A54524D268019601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1A45
Signing time: Tue 08 Sep 2026 21:00:35 +0000
Manifest this update: Tue 08 Sep 2026 21:00:35 +0000
Manifest next update: Wed 09 Sep 2026 21:00:35 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: slkSyQOjwNZnkAopByvND31KTvKGcZXYAM+zomxW06Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d2:9c:26:cf:50:8d:13:a5:45:24:d2:68:01:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Sep 8 21:00:35 2026 GMT
Not After : Sep 9 21:00:35 2026 GMT
Subject: CN=24679dca76f3b9d58117bbaaaa2c54cb665052fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:a0:f8:54:28:b6:ca:13:b7:0e:be:b9:ba:
62:ff:ba:cd:42:c0:64:b4:4d:e9:ea:c2:3c:f9:2b:
e5:53:64:68:4d:9e:d9:7c:67:97:c3:ae:5e:c8:55:
f4:45:09:52:0d:e2:4b:7d:56:3f:df:e4:a3:48:41:
f9:df:d9:7d:46:d5:36:05:cf:dc:77:1e:03:fe:57:
43:4d:07:81:a6:91:57:9c:f4:4f:2c:e2:16:f2:5c:
60:89:0e:27:2b:22:f9:0a:ef:74:a2:a8:85:99:c2:
a8:be:74:50:7b:52:8a:4b:15:a3:23:72:0c:79:61:
fe:3f:89:f5:a2:8a:c5:f7:eb:b3:3b:af:9f:e7:fc:
5c:5f:1c:ce:2b:92:65:92:66:c1:78:cb:ca:e0:95:
66:ba:fa:d5:54:47:3a:7b:6b:4d:84:ee:42:f7:ae:
d1:6e:e7:6b:2c:3e:dd:62:8b:21:e9:49:02:9e:bf:
57:eb:7d:cc:28:84:a4:84:8e:6a:b1:80:15:3e:94:
69:ee:77:6e:4d:96:be:9c:dc:f4:d3:de:dc:33:e3:
e6:52:de:ff:11:e9:37:94:ce:d5:7c:d7:de:3a:8b:
d3:fa:9b:34:f5:c8:c4:7d:f3:f0:85:34:81:b5:16:
9a:fa:85:d3:e9:da:c5:05:66:5f:46:d3:72:26:62:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:9D:CA:76:F3:B9:D5:81:17:BB:AA:AA:2C:54:CB:66:50:52:FC
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b0:93:c9:13:83:4d:29:e8:0c:b3:d9:1e:62:fd:08:51:27:
cd:de:ad:61:a0:fe:30:a9:5c:d9:5b:df:23:ff:c4:75:91:9d:
5b:3d:fd:86:bf:de:19:90:29:94:30:90:dd:be:e5:7c:68:b2:
d8:11:fb:0d:50:56:74:60:a9:ff:80:df:00:88:2e:f0:5c:3e:
83:fa:89:3b:b5:17:25:ed:b0:8a:a3:ca:30:dc:e9:7c:7a:1c:
cb:fd:27:59:c3:ba:59:c3:1e:f5:dc:f1:16:33:39:98:2a:5f:
b1:cb:75:02:d6:e1:f9:72:0d:d2:2c:26:7c:80:48:50:fb:c8:
da:11:aa:65:00:24:b1:e2:89:2e:df:ed:08:27:4c:5d:7d:85:
12:60:8a:45:7f:08:4b:52:a7:03:dd:a0:b8:27:c7:89:f8:c9:
e7:99:9f:c5:48:7e:f0:04:9c:6a:4e:1c:3a:ae:e1:14:4c:c7:
d2:d9:32:89:b5:2f:55:43:49:f6:a7:f1:2c:31:ea:3e:9e:1d:
ea:6a:b5:e1:4f:31:5b:e3:fa:95:40:30:0d:a4:97:8b:cd:7d:
ed:7c:c4:96:5d:fe:2e:fd:ae:ca:ef:20:b5:8d:c7:cf:8b:29:
4e:c4:e1:b2:11:99:af:2d:82:01:17:66:c3:50:55:a2:8e:bc:
b8:c5:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 23:58:44 2026 by rpki-client