Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: tU1XN83vbnXZwpuZCVqGJDRZy8mn/gq0j0nUF/rar2w=
Subject key identifier: B6:4C:24:2C:6F:96:80:53:5A:85:0D:40:CF:95:1D:28:36:4F:D1:8F
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019D273A954FE03AD08EA52EDC7E8AF30A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 17CE
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: 6YokTvvlMEL1cd1q4JI5bx1g9rvzf1ysKhKxLEHg0XQ=)
2: XzeIaRbu0fSJVgranQAMBnDnOYk.roa (hash: dqxt73O8AnvVTC/pUjNqknVJAUikBp+bFUF6OzADUcg=)
3: aZei7dPraMpoyMe9a8A85iz9U9k.roa (hash: KtkMVG0TF4vgfuc7Eg25bY2/F+3g8sFzTM72NzjE2qo=)
4: nYOMmq9r2jYKxOZ_vMZVsG2YoIY.roa (hash: 73YqhTgSFV2KW1q+D3iw3fdx9BOAWsHiW6Qx96ipVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:4f:e0:3a:d0:8e:a5:2e:dc:7e:8a:f3:0a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=b64c242c6f9680535a850d40cf951d28364fd18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:49:9b:a1:74:63:82:f4:54:ea:f3:3f:36:
2b:fc:a1:c1:91:35:00:87:bb:a8:60:79:57:dc:e9:
89:59:15:ed:fe:5b:20:b6:7b:97:d5:32:dc:f3:05:
56:4c:75:7c:23:4a:f0:3e:c2:91:6b:3a:a9:a4:eb:
3f:61:36:01:a0:77:c9:5e:0e:6a:da:ce:b6:fa:2f:
d7:e9:90:8d:f6:f6:91:d3:03:3a:b7:bf:57:b6:a6:
30:64:b7:1c:61:87:62:4d:cc:09:fe:ba:67:c8:8b:
f9:80:01:75:43:ed:0d:2f:8b:bf:69:fd:51:25:1c:
42:4b:3e:6a:91:f7:f7:4e:cf:9d:28:08:37:ee:73:
b5:5d:fe:06:92:e2:37:74:c5:e3:b9:b5:6a:49:de:
fb:ac:6b:96:2c:9b:1f:b6:23:d1:a2:b3:6e:66:4d:
c2:4a:4e:11:74:4b:f8:a3:79:60:d9:18:fa:3a:6b:
24:c2:5f:14:41:2e:a5:f9:99:b5:70:18:86:2b:40:
34:71:95:18:78:1b:39:6f:c9:6b:36:4b:fa:56:cc:
0a:79:b3:16:c6:09:c3:58:db:d8:98:7c:6a:65:7f:
ba:82:94:26:b1:56:29:e6:9d:d2:1b:a5:09:1f:9d:
21:ab:40:6c:0f:70:e4:61:92:89:1a:b0:46:85:3f:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:24:2C:6F:96:80:53:5A:85:0D:40:CF:95:1D:28:36:4F:D1:8F
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:50:29:53:41:5e:ad:d0:92:36:5e:2c:e8:1c:18:27:e3:
a5:f0:16:e1:69:a3:1c:de:92:7b:c4:51:39:42:54:9a:a6:a9:
5a:57:28:f5:44:71:a5:72:ee:7a:63:4e:64:53:94:3f:87:aa:
be:77:ed:cf:e8:ca:e6:83:d3:65:02:ce:d1:aa:92:7c:eb:e1:
4d:8b:f5:8c:4f:fb:2e:d4:b9:26:90:cf:8c:37:2d:60:90:d4:
63:6a:d7:41:7c:80:ff:bc:7a:cb:63:09:0f:25:49:aa:d8:f3:
f3:28:31:52:c4:ce:8d:49:22:e7:d0:ea:c4:51:7b:c6:87:1b:
2b:3b:f7:4a:92:fb:0a:e8:0b:5f:6f:8b:ab:12:79:64:78:08:
7d:a4:17:28:2f:dc:e8:07:4c:c1:b8:7b:c5:df:9c:94:99:2d:
c0:a6:6c:e3:a0:eb:d3:47:7c:47:9f:9e:0b:cd:35:97:26:ed:
74:e2:40:39:2c:b7:b7:51:8c:ac:81:e5:fb:01:b9:d4:d0:25:
ec:ed:48:1b:5e:b7:74:67:fa:72:2e:53:6f:72:25:bd:52:38:
5e:18:c5:53:6a:5e:ea:7c:89:a7:61:63:d0:9e:74:10:61:f7:
5a:33:38:90:8a:4f:7d:5a:39:53:e5:6d:81:7f:46:ec:24:fc:
40:15:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:49 2026 by rpki-client