Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: 535MzVoZC4gWW6S6dGQUmbLDa89TkxfJKBuqU0aVXdA=
Subject key identifier: 66:03:D1:98:59:1F:A4:D6:F5:80:20:84:02:A8:A5:5C:9E:06:0A:61
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 01A08F44CF73B1CF8D378DE513358ACD8ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 0910
Signing time: Fri 11 Sep 2026 07:00:46 +0000
Manifest this update: Fri 11 Sep 2026 07:00:46 +0000
Manifest next update: Sat 12 Sep 2026 07:00:46 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: GMzNITsdOK7+g0Z9vKHBTV+XAwRTL2tzHKLQ2v+RA04=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:44:cf:73:b1:cf:8d:37:8d:e5:13:35:8a:cd:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Sep 11 07:00:46 2026 GMT
Not After : Sep 12 07:00:46 2026 GMT
Subject: CN=6603d198591fa4d6f580208402a8a55c9e060a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:e2:b1:ed:1c:07:9a:22:65:d4:47:6b:99:
83:53:9c:80:21:dc:e0:5c:db:0f:5c:e3:d7:8a:96:
7b:34:60:74:3d:07:41:57:fc:2b:9b:34:43:33:b0:
03:0d:05:69:1c:90:47:15:0e:ce:b3:2d:0f:9f:03:
bd:fe:e6:29:0b:19:48:06:a3:22:a0:6c:75:3a:cb:
a5:fc:55:e1:83:89:40:b4:86:ee:ea:23:ca:78:46:
9c:53:20:95:85:ba:a2:68:5b:e1:33:17:22:17:58:
84:9c:de:d8:a3:18:6e:26:00:71:d7:0b:0a:31:89:
3d:92:93:31:37:8c:7d:ba:47:9b:0c:22:79:87:23:
b7:63:c1:db:69:16:b5:1d:e5:71:2b:86:78:76:52:
a2:21:45:9b:04:8d:7d:7c:c6:5d:67:90:d3:ce:14:
a2:67:b2:5e:7c:53:5b:11:43:30:d1:a7:b5:ef:13:
bd:46:10:c2:4c:22:70:eb:06:a8:43:45:ac:40:59:
da:40:42:29:40:1f:8e:36:58:65:ba:0c:c1:bc:22:
ca:63:00:3d:3e:03:44:08:7c:fe:c1:7b:3a:ae:59:
1c:41:48:8a:55:6c:76:0a:16:7c:ad:5c:82:d8:3c:
a3:73:14:36:06:eb:90:df:f1:cb:7d:d4:11:1c:cd:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:03:D1:98:59:1F:A4:D6:F5:80:20:84:02:A8:A5:5C:9E:06:0A:61
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:88:79:49:d7:f0:df:c7:27:83:92:45:e8:94:18:9e:7f:
20:cc:a5:66:30:14:14:40:07:16:e1:9c:b6:72:33:0f:42:2f:
e0:e2:21:9f:56:be:b4:c0:92:62:6a:a2:08:61:f2:4b:69:3a:
43:bd:fc:c5:4e:ae:7e:85:1c:c8:fe:9c:74:6d:43:9c:75:b1:
ba:82:9e:e0:d7:ef:62:3e:13:f0:98:f2:dc:9f:64:94:5c:c6:
c0:70:b2:58:28:48:8b:17:61:de:46:81:62:0b:86:23:8a:9c:
09:a6:70:ef:f5:cb:2f:99:88:1d:f8:2c:37:45:26:bf:9f:3c:
1f:ba:6f:bd:fa:88:71:31:8b:75:35:e6:8f:bd:8b:6a:09:85:
9a:3b:7c:3e:24:23:23:2f:fc:f3:16:1a:6a:3e:c6:eb:44:73:
16:e3:20:31:0f:b2:7f:4b:b3:af:e4:58:87:a9:a2:e4:1d:f0:
6d:f0:e2:52:c2:25:23:bc:b9:b8:01:0d:c0:9f:f1:68:1f:6a:
ff:b9:ab:9c:a0:0f:fa:96:df:68:e4:26:2c:13:d4:1b:01:ea:
c7:9e:af:e5:70:eb:db:34:46:6c:d5:37:9b:2c:d1:6d:f6:13:
6d:b7:f9:2d:4e:6b:c2:e9:3e:81:fb:e5:a7:df:67:c7:17:08:
b7:51:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:27 2026 by rpki-client