
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: WWtnkPzegYLXpCMZkvm/L/e/5wnZPg8Y3k0xetU7/KY=
Subject key identifier: 0A:22:28:56:4F:FB:62:9E:FA:DC:09:BD:30:48:3D:24:F9:F0:6A:74
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 01A03D84260A99ACB12AB496497B92D0CFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 0A90
Signing time: Wed 26 Aug 2026 10:01:05 +0000
Manifest this update: Wed 26 Aug 2026 10:01:05 +0000
Manifest next update: Thu 27 Aug 2026 10:01:05 +0000
Files and hashes: 1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: o944jIIc0l+ENuhGgSiOXqiV6jKMzys4uWSzO/sNSXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:84:26:0a:99:ac:b1:2a:b4:96:49:7b:92:d0:cf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Aug 26 10:01:05 2026 GMT
Not After : Aug 27 10:01:05 2026 GMT
Subject: CN=0a2228564ffb629efadc09bd30483d24f9f06a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:75:60:3a:de:76:4f:e4:ac:e5:6c:bb:06:dd:
0d:dc:a3:2b:7b:93:5e:af:7f:12:f5:61:c8:91:6f:
e0:58:76:3b:49:b1:49:b0:73:68:f3:45:ac:69:7b:
55:bb:58:ef:5c:a7:77:f5:bc:45:93:62:5e:f2:9b:
56:43:f1:58:e3:ea:d4:5c:1c:2c:79:f3:13:00:ca:
5c:39:bf:2e:0a:50:a0:91:77:0c:2b:26:ab:6c:79:
2d:3a:c2:63:86:d5:b8:ab:5c:85:62:75:0a:1b:d8:
c8:79:07:04:20:90:f2:c7:50:23:e0:81:78:09:75:
93:2e:e0:3f:e4:88:57:c5:c4:7f:03:cd:36:0c:80:
b5:8f:ba:d8:56:bf:69:c7:a5:b4:7c:91:2f:0a:b9:
52:8b:eb:5b:aa:7f:cc:39:99:d6:9f:a0:56:b7:ac:
7f:a6:41:c2:64:3d:59:6b:d2:d3:19:4e:00:a4:a2:
1f:6c:a5:64:81:39:7d:53:cd:09:c9:dc:e4:4f:85:
77:d3:ac:a9:e5:72:64:b9:ce:0b:2b:74:9a:85:78:
6f:6d:c5:15:51:a2:0e:11:ff:6e:3a:58:81:27:27:
f5:8a:7c:26:2e:c6:1a:30:2d:ee:19:c4:37:4a:24:
e3:54:c3:93:df:38:ae:46:2a:2c:ab:11:82:9a:82:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:28:56:4F:FB:62:9E:FA:DC:09:BD:30:48:3D:24:F9:F0:6A:74
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:dd:81:5a:cc:3f:9a:41:41:de:d6:cf:68:13:e0:90:e1:
24:65:a0:b6:83:d0:16:27:0a:5e:9e:9a:44:96:5d:aa:7d:48:
b5:06:a8:37:a1:b0:ad:3f:c1:ee:09:56:31:c1:73:25:3c:a9:
e2:8f:7c:d2:83:db:b3:7c:c8:a6:5d:7c:c5:ac:d4:c3:87:fe:
5e:13:9f:03:40:aa:25:70:58:32:94:de:bf:86:54:b3:84:7b:
ee:02:78:a1:31:cb:e3:53:da:2b:74:97:09:cf:b4:ca:95:2c:
d5:8b:c8:01:f3:6b:fc:dd:ae:d9:74:42:7b:d0:56:40:6b:b7:
17:a7:2d:7a:cb:ef:2c:bd:aa:57:40:6c:0d:cb:08:8e:1f:55:
03:cd:3a:f9:c6:ce:29:8d:1e:b9:ae:5b:11:98:57:73:6f:b5:
02:06:41:6a:c6:6a:07:74:9a:0b:a6:e5:62:42:db:66:a0:c5:
24:5e:49:55:08:b7:08:f0:30:a1:0f:1c:d4:9e:1b:8d:90:6a:
83:da:78:a6:73:6d:be:fe:ac:81:d1:e9:5d:79:1a:43:b1:99:
27:d0:94:90:24:a0:2b:dd:c9:7e:78:d8:3e:f4:b6:75:9c:15:
c0:bf:4b:07:bd:ca:4d:ec:da:ea:f8:9b:e0:49:f7:b0:5e:40:
28:49:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:03:45 2026 by rpki-client