Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: cnbK/C3TfuwtlLpdO3t+TjF48VHM5FvokXN1CuHMxdY=
Subject key identifier: E9:5E:45:35:35:60:CA:D7:AF:E5:47:7D:41:F7:B4:5C:26:F0:AF:02
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019D25F17BF85F82EF60FDAE4333A6C93C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 13E2
Signing time: Wed 25 Mar 2026 17:01:15 +0000
Manifest this update: Wed 25 Mar 2026 17:01:15 +0000
Manifest next update: Thu 26 Mar 2026 17:01:15 +0000
Files and hashes: 1: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (hash: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: MbXHSPCnVS7VJ+bW0WattdMYRv2tE4dTfRxABJFo0pU=)
3: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (hash: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7b:f8:5f:82:ef:60:fd:ae:43:33:a6:c9:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Mar 25 17:01:15 2026 GMT
Not After : Mar 26 17:01:15 2026 GMT
Subject: CN=e95e45353560cad7afe5477d41f7b45c26f0af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:28:df:82:cb:de:9d:4d:63:3c:79:96:ba:aa:
fe:6a:27:8f:22:86:d8:c5:8d:ec:c3:b8:ae:5b:d0:
53:3d:ca:17:91:ea:a0:ef:9f:50:16:4c:8d:71:0e:
d5:41:45:d7:3f:83:9d:93:eb:a5:6d:dd:cc:fd:26:
8c:4f:29:0c:10:9b:64:d7:f0:0f:4e:7d:ec:e8:f0:
97:ed:55:3f:cc:a1:61:54:5a:7e:29:36:74:8a:5e:
73:13:d7:53:07:54:a9:51:ef:31:72:50:c6:74:46:
da:9b:78:e9:9a:76:69:fd:c5:df:de:f3:d0:1f:0a:
52:27:e8:c2:5e:22:70:b1:0c:95:42:ef:5d:a7:66:
f0:a3:f7:ed:a9:f9:b5:9c:da:3b:c4:2c:c4:67:63:
ad:78:74:62:07:eb:61:33:e8:6a:29:e7:23:bf:8f:
53:54:d3:73:c0:82:49:41:e1:ed:00:9a:ed:08:7e:
9d:94:aa:01:2d:3e:99:2d:11:6c:d3:c1:34:18:32:
82:99:75:05:13:41:18:1f:5e:4c:a7:b2:8b:7a:74:
25:59:9b:d0:f3:9b:f4:6e:0d:c1:6a:b6:19:6c:fb:
4c:67:31:ce:31:13:cc:80:5f:81:26:d0:e6:43:d3:
d0:13:c6:35:5e:76:c0:d4:d8:0b:05:4d:24:31:d5:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5E:45:35:35:60:CA:D7:AF:E5:47:7D:41:F7:B4:5C:26:F0:AF:02
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:15:df:cf:42:ee:e5:0e:ae:11:5d:09:eb:6a:9e:32:a1:
7f:7c:14:ca:c3:d3:f3:b8:b9:1c:81:ba:0a:7a:d2:de:f9:6b:
97:9b:75:e3:58:f4:37:e6:09:f0:20:f0:ea:50:dd:56:d1:05:
e5:18:6c:5b:d4:e6:63:ab:ac:5b:5d:5b:75:22:46:a0:eb:7b:
ea:a0:37:62:05:d7:95:6a:53:8c:ca:b3:15:37:4e:0e:77:ef:
3c:5b:ea:da:3e:e3:29:f2:fb:0f:9c:c3:81:2c:71:7a:7f:eb:
23:94:1a:d4:05:a1:f7:64:13:a1:15:ee:02:52:0a:98:8d:f5:
a6:1f:04:91:e6:c2:68:91:27:69:57:3e:52:c7:b0:82:1e:68:
c8:a7:d8:73:32:b3:43:72:82:3b:b1:bf:87:c2:a5:c6:0f:81:
f2:9c:e8:69:89:4c:05:31:a8:60:de:df:a2:e2:8b:7e:99:36:
f6:c9:10:c2:65:f1:68:75:41:c1:eb:ef:e7:58:b1:2e:a5:8f:
e2:07:8d:5f:ed:55:5f:73:e8:2a:4b:8f:5f:23:f0:0a:be:64:
be:2c:fe:3a:fc:43:1a:25:1e:38:26:b7:62:6b:4e:30:e9:ed:
4f:7c:00:d4:ff:5e:2d:04:7b:50:54:56:dd:f9:98:b0:33:49:
90:e3:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:48 2026 by rpki-client