Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: pTvGZsD+hdEZoSzu76Y0R+4VQg9qsaJgOtpKjME1xaI=
Subject key identifier: 7C:DB:BC:B5:D9:34:C3:37:A8:3B:1A:57:21:CF:01:24:94:14:9D:4C
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01A17515177B0B69836AF34E2062005E3C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0DDC
Signing time: Sun 25 Oct 2026 22:01:18 +0000
Manifest this update: Sun 25 Oct 2026 22:01:18 +0000
Manifest next update: Mon 26 Oct 2026 22:01:18 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: FCvN7Lo5B8SIkhn+AyptvG2qZWV/QiGQ7iNLHShHYDA=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:17:7b:0b:69:83:6a:f3:4e:20:62:00:5e:3c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Oct 25 22:01:18 2026 GMT
Not After : Oct 26 22:01:18 2026 GMT
Subject: CN=7cdbbcb5d934c337a83b1a5721cf012494149d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:f4:e5:b7:92:ac:df:0d:e6:d0:83:a2:05:
27:8b:21:df:ac:6d:81:26:b4:63:6a:9a:6c:a9:a7:
9b:17:6c:e3:09:5a:da:a6:16:3f:0c:9d:2b:0e:a4:
04:6a:bc:7d:a0:d5:ac:f9:f3:1f:39:80:92:6d:ba:
7d:f4:af:ef:50:44:aa:a9:a9:eb:db:a8:ba:b8:2b:
69:c3:66:1a:df:74:47:62:8f:03:e2:81:a4:67:2b:
f0:86:f5:02:f1:88:03:03:28:b2:08:01:29:81:a2:
72:ab:4f:cd:84:d5:57:ee:2c:0a:44:98:05:4b:f9:
8e:2c:00:7d:5d:9d:ef:1b:b0:8a:a4:cc:4f:7a:e4:
61:41:56:54:8a:74:5d:22:ab:ae:d0:ef:d0:11:fe:
b9:4e:09:62:41:e5:79:33:27:6e:15:73:d2:f7:a9:
c1:36:d5:b5:94:27:45:23:e6:ad:e8:73:2c:cd:e2:
03:9d:be:cb:a9:d5:bb:31:1b:89:18:f2:a7:55:11:
79:8e:37:83:9d:63:f6:bc:76:04:dd:4b:19:6c:b4:
53:df:96:cc:a1:f4:ce:b0:11:52:c3:9b:8d:92:2e:
48:91:2f:5d:df:36:c1:4d:da:34:6e:4b:f7:f4:05:
a9:8d:eb:d6:06:d7:b0:20:a4:a4:9a:f7:32:59:46:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:BC:B5:D9:34:C3:37:A8:3B:1A:57:21:CF:01:24:94:14:9D:4C
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:34:9b:f9:ac:23:18:aa:ca:5b:cd:07:4b:ca:b7:84:6f:
38:d6:9a:b5:73:85:a8:63:63:4a:ad:58:40:ec:f2:42:11:1e:
08:88:10:2a:e8:41:24:9b:92:77:86:9b:71:08:b5:e8:e6:c3:
27:82:ca:77:c8:3f:bd:2c:b7:ed:27:10:47:4f:ee:3b:fd:23:
9f:e6:4d:4d:26:60:5c:59:d4:42:29:a8:89:7d:35:fb:dc:8b:
67:91:6a:fb:17:7a:8f:2d:1d:70:90:8c:66:1e:b5:cb:32:d9:
1f:96:c8:ae:f1:40:a2:99:74:bf:26:9a:68:7d:1a:13:02:f3:
ce:72:39:04:ea:41:b2:f0:48:f7:54:5d:dc:64:17:99:30:27:
1c:81:93:a5:40:60:45:bd:92:0c:ca:af:40:8e:5c:d5:e0:2b:
b9:a5:aa:db:80:61:6a:88:56:74:e7:52:80:9a:ba:3b:d1:e1:
38:e7:98:6b:ca:13:d0:ba:09:63:d9:f5:04:64:1e:96:51:6b:
2f:90:0c:54:9d:c6:7e:58:97:46:72:cd:d4:d5:ed:ed:e5:d2:
e6:9b:5c:7b:8d:44:07:37:84:ac:92:4b:24:1d:33:67:a4:66:
c5:a3:a8:c9:c6:e6:be:5a:f8:ae:41:e9:72:fd:1c:56:3e:d2:
77:af:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:37:24 2026 by rpki-client