Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: Adkogi50HWngXGo91XuWnZaQ7rLkfEO7PmlCT7fo+0U=
Subject key identifier: C8:A9:EE:11:C5:28:2E:2F:16:0D:34:2D:31:74:2D:2D:53:E3:E6:24
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01A183AC208BE1508B335AD1DB3CF88E8A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 18:00:58 +0000
Manifest this update: Wed 28 Oct 2026 18:00:58 +0000
Manifest next update: Thu 29 Oct 2026 18:00:58 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: LidABImg37XyXUvzQ5mdcCaHWHQaZk+4kDKZ+SnJXvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:20:8b:e1:50:8b:33:5a:d1:db:3c:f8:8e:8a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Oct 28 18:00:58 2026 GMT
Not After : Oct 29 18:00:58 2026 GMT
Subject: CN=c8a9ee11c5282e2f160d342d31742d2d53e3e624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:75:02:86:ec:06:3b:3d:bd:95:e1:9c:59:
0f:78:61:89:64:68:0f:6b:f8:3b:8e:12:53:cf:9b:
12:39:5f:3c:de:2b:5d:f9:06:3e:69:4f:9f:f5:4a:
c9:58:91:a3:60:84:d2:e3:54:25:57:23:a2:b0:9e:
4b:d1:fa:95:7b:b0:a2:e0:dd:3f:65:21:88:d1:4f:
92:48:82:04:63:b8:55:c8:64:db:73:9b:d4:74:31:
b1:ff:40:99:d2:5d:73:9a:43:38:c5:69:b3:e2:31:
bf:c3:78:7f:e4:2e:15:15:75:8e:39:a0:8d:34:6d:
3e:20:91:d8:2b:ae:3e:86:68:16:ba:df:38:ef:b2:
3a:5c:b0:02:d6:8a:46:17:60:fa:44:48:1b:7c:11:
9b:c2:b1:61:00:a4:2e:48:d2:e4:91:d5:49:a7:af:
13:39:4d:55:ff:f5:57:eb:7d:7f:9d:c8:05:a6:39:
a9:d3:c9:d1:3d:8c:b2:68:25:44:2b:98:ff:1c:3f:
9f:fb:ba:c5:d3:ba:e1:d7:21:7d:31:45:09:bf:a7:
71:cc:dd:68:fd:bf:3e:9c:73:91:8d:72:09:48:35:
77:57:e9:4a:b5:4c:d4:f7:a1:42:e5:71:31:f5:1b:
c4:63:af:41:63:4e:1d:84:0d:e9:85:ad:e1:37:7d:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:EE:11:C5:28:2E:2F:16:0D:34:2D:31:74:2D:2D:53:E3:E6:24
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:99:40:96:ac:08:90:80:61:93:2e:4c:14:2c:25:99:65:3b:
86:2a:be:9c:dc:5d:f7:c8:4d:ba:15:e8:7c:60:06:44:2a:09:
69:3e:d6:05:99:b7:f9:16:68:64:5d:b0:f6:18:5f:a1:00:ad:
1c:d6:d5:44:39:9d:7f:b6:a3:90:65:09:79:93:ea:49:52:2f:
fe:5e:10:cd:2b:d9:36:3e:d3:9c:e2:37:a3:41:fb:4e:96:e1:
81:dc:20:ec:29:24:98:76:a8:76:8b:a7:c2:09:4e:cc:5a:92:
47:41:15:0d:38:94:19:99:4b:3d:65:2f:6a:f5:6d:5e:6a:5d:
f2:ac:a2:e9:d6:8d:20:73:15:68:4b:6f:b4:50:02:60:96:7b:
2e:9c:c9:8b:3a:2d:f5:ae:77:ed:7d:44:76:32:3c:20:4d:2c:
72:9c:74:9e:6e:6d:b6:2d:1f:98:3c:ff:43:34:98:19:42:9b:
b3:32:af:02:e8:4d:86:ae:8c:eb:3d:7d:e3:56:fa:5e:08:1c:
04:9c:85:c5:83:20:17:52:ca:20:8c:7c:f5:33:c5:2b:72:66:
84:b3:89:05:ca:b3:b1:44:36:9c:7f:75:a7:b0:11:3e:bb:7e:
cd:19:55:ec:18:8c:cb:b7:0d:13:b7:10:2c:b4:05:8d:6f:fe:
9d:fd:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:39 2026 by rpki-client