Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
File: JflL0qvKpDyX5XhrLbNbcT--X-Q.mft (raw, json)
Hash identifier: dKmGXxBtU7itmTX2NwaWHqXNs/F419cJa+o7zTUKdNg=
Subject key identifier: 38:CA:2D:C1:43:92:90:3E:F8:77:F4:45:61:20:E5:B9:58:56:B6:20
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 01A067C9D914BED40F9C8279056C05DBEB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
Manifest number: AF
Signing time: Thu 03 Sep 2026 15:01:16 +0000
Manifest this update: Thu 03 Sep 2026 15:01:16 +0000
Manifest next update: Fri 04 Sep 2026 15:01:16 +0000
Files and hashes: 1: BcMMM0U66F_S0r1n65JxA8MExF0.roa (hash: H3WQFI+Saoc8E2B5BEOhesPi++dCrMFkBj7AIbeBUHI=)
2: JflL0qvKpDyX5XhrLbNbcT--X-Q.crl (hash: R9d1YR/upAUTRnX3bZb7bHtAhn/om2hxaU66yqiyrZg=)
3: VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa (hash: e6SVyLxPmWS3ohNAOmFyq9LDfmnszid2SAX7TuW2VEw=)
4: XIQjtwCAeuz5pHeyEJIwylepx78.roa (hash: /ZdrEI8StygXoq2z181JCF5ttjpJyDiccnOn6hndeRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:c9:d9:14:be:d4:0f:9c:82:79:05:6c:05:db:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Sep 3 15:01:16 2026 GMT
Not After : Sep 4 15:01:16 2026 GMT
Subject: CN=38ca2dc14392903ef877f4456120e5b95856b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:ae:d5:16:18:2e:7b:fc:47:6b:30:73:0f:
07:4d:ab:aa:b0:32:ae:be:c6:86:f5:97:f5:73:53:
e6:ff:5d:32:7b:4f:70:50:cb:38:59:70:33:a1:da:
ed:b1:67:f2:eb:58:3a:f0:6d:98:a9:6b:00:cf:7b:
61:f5:d7:a6:bb:aa:21:a9:6f:19:50:83:14:14:e9:
75:91:fe:ab:5f:df:b1:ee:74:be:f3:07:dc:d7:47:
cd:2b:9e:a5:67:af:7c:10:3e:73:43:3a:99:53:c4:
85:00:e1:86:41:da:c9:fe:94:57:a0:b6:d1:88:be:
eb:89:53:12:5e:01:e3:73:ef:5f:e3:36:4e:1e:00:
10:f1:b5:a5:0c:bc:52:25:a8:6d:63:76:7a:12:ab:
e1:c1:41:a8:73:4a:15:63:03:88:c9:ad:33:4e:4f:
b6:23:31:61:bd:06:c9:37:c7:3a:6b:cb:1a:8a:aa:
7c:94:c9:cc:05:44:40:ad:63:d5:e3:06:df:d0:db:
47:e9:4a:b0:5a:50:89:b9:4d:41:1c:7c:c2:16:a4:
64:f2:c3:fb:e9:69:63:be:c9:25:4d:68:b3:a3:15:
8a:1d:75:c3:75:97:69:b2:b1:14:e1:a4:6c:0b:30:
a4:c8:77:b2:f7:3e:9a:37:88:ef:72:50:f6:c1:e8:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:2D:C1:43:92:90:3E:F8:77:F4:45:61:20:E5:B9:58:56:B6:20
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:c6:e8:ed:d5:6c:c1:52:e0:f2:25:b3:5c:f2:c1:8f:f5:
e5:13:fb:9f:57:91:b1:2f:2c:08:29:50:5e:3e:be:1a:ce:2a:
31:56:81:b9:33:1a:1e:8c:92:74:87:bc:12:55:ac:f0:b9:44:
30:04:cb:c6:5a:9d:04:0e:72:e7:3e:5c:a7:ad:07:cc:b6:49:
7f:2f:6d:90:81:b7:bc:40:2e:5f:e0:fa:b1:5a:6e:a9:e9:07:
e2:3b:b7:98:9c:32:af:28:1e:03:ec:b8:55:19:8b:3a:8e:0f:
43:6d:5e:6b:ce:90:94:d4:d7:a0:4d:1c:8b:4d:ba:2e:8a:96:
da:67:88:f4:7c:cf:e6:4b:91:d2:c4:07:45:24:09:af:dd:c3:
44:a7:f3:fd:d9:a9:91:d6:8e:f6:5b:46:1c:b7:e0:22:2b:43:
3a:55:5c:0f:54:0c:65:88:05:01:d9:e9:39:96:5d:4a:07:6a:
03:87:09:0e:99:9b:0d:e6:cc:ea:6e:cb:b2:90:0d:26:dc:d4:
6c:11:bd:90:9d:d9:89:d0:69:b9:5f:92:73:80:b1:fb:68:be:
f3:ba:f0:ea:15:ed:36:33:44:63:be:20:77:2e:cb:ec:3e:e1:
ab:10:c9:b7:ae:31:87:17:b2:6b:db:a2:38:dd:de:9d:93:7f:
76:4b:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:47:27 2026 by rpki-client