Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: mPxaOvlLu3V/dn65Igii5EM6wvfq6iHNHnapViVrdVs=
Subject key identifier: DA:BC:0D:54:32:EA:70:86:B6:BC:E3:74:3E:FA:08:A9:DA:68:EB:E4
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 01A0D011D3B356BE57904001A953037DD8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0A27
Signing time: Wed 23 Sep 2026 21:00:24 +0000
Manifest this update: Wed 23 Sep 2026 21:00:24 +0000
Manifest next update: Thu 24 Sep 2026 21:00:24 +0000
Files and hashes: 1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: QLUV2Z/5a0dKKW6FZoU1kg4OzJLaUAIp1utAP1KcPiE=)
2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:d3:b3:56:be:57:90:40:01:a9:53:03:7d:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Sep 23 21:00:24 2026 GMT
Not After : Sep 24 21:00:24 2026 GMT
Subject: CN=dabc0d5432ea7086b6bce3743efa08a9da68ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:53:c3:92:54:b4:18:b9:ac:0a:9d:83:ed:
c6:99:86:bc:09:79:6c:47:a5:fb:da:f8:b0:25:b6:
36:67:f7:46:51:d1:2e:06:c6:db:df:b7:19:c6:1f:
f2:bf:d6:35:23:c2:bc:2d:ff:ef:fc:5e:3f:2f:91:
68:f8:e3:e7:18:6d:21:6c:3d:d4:68:0e:34:ed:95:
df:00:c2:9c:5c:75:a5:6c:02:79:21:36:31:c6:95:
27:4b:f7:5b:76:5c:66:97:71:34:53:df:4e:b1:7a:
b7:01:f0:61:5f:90:4a:b7:b8:a8:5e:7e:01:0d:eb:
c7:3a:4f:c7:c8:96:eb:12:36:7c:66:06:4e:0d:02:
82:f7:28:51:a6:bb:e7:11:fb:88:ec:2c:8f:b7:c4:
d1:34:e7:46:29:01:00:83:43:42:38:56:d3:1d:89:
dd:d9:8c:ab:2d:08:60:93:bc:d4:e7:1b:ce:cf:d0:
cc:9c:38:1d:18:f7:c7:b1:ac:3e:2b:fe:0e:ca:80:
b3:55:b5:ef:4a:f2:63:62:21:0b:23:a4:d4:15:a2:
bc:85:64:c6:b7:41:45:12:6c:32:3f:29:34:7c:7c:
59:c5:d6:8c:d7:f1:76:38:f4:ea:ec:c1:02:84:c0:
49:d7:0c:01:d3:21:8b:6f:53:d9:11:90:4d:d3:92:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:0D:54:32:EA:70:86:B6:BC:E3:74:3E:FA:08:A9:DA:68:EB:E4
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e7:61:46:4a:6a:47:67:ed:7d:21:05:d2:0c:52:fd:9f:8a:
0d:e9:28:ad:7f:3b:39:68:17:f6:5d:92:8a:fe:2f:ee:3f:a6:
18:e6:3b:40:d0:25:9c:98:9d:70:af:6c:f8:01:43:1e:b8:a3:
ff:10:40:9b:6f:ed:b4:24:86:0d:5f:74:99:98:05:d7:71:9a:
ed:55:f0:b5:95:3c:80:61:55:1d:96:71:cd:92:f9:2b:71:de:
58:14:ca:cc:8b:af:b8:82:ee:3b:26:7b:63:b1:3d:85:8b:55:
54:65:60:e4:35:95:12:50:5c:87:e7:fb:13:14:84:19:17:1d:
8d:75:22:30:8a:89:77:2d:b5:66:c7:eb:ce:58:15:97:a1:65:
79:ef:cb:c9:bd:78:36:bb:29:8c:f4:2d:71:71:01:31:9f:ed:
95:47:73:20:cb:46:36:56:87:1d:33:82:d5:fb:d9:f1:4c:bc:
d1:62:23:bb:e1:45:f1:ff:ec:6e:e3:86:75:f9:78:e8:18:59:
7e:5c:2e:0f:d1:1e:99:23:8d:ca:a3:44:fd:bb:3d:40:e2:a5:
b4:7a:2d:d9:71:53:90:34:f4:a4:01:47:7b:12:83:f3:c5:84:
82:3c:98:be:09:9b:e4:36:1f:31:0d:f1:5e:c0:27:90:a0:51:
24:85:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:18:24 2026 by rpki-client