Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: pxyGU1hkkWdYhxvlZgORd1AWClcLbTBe26EJiqfJ6rg=
Subject key identifier: A5:1D:90:97:6C:63:7A:0F:7B:5E:14:D2:48:8B:22:42:DA:A5:80:AA
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 019D28F2A16B77B5EBF169A056ABFDA454BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 0BDF
Signing time: Thu 26 Mar 2026 07:01:22 +0000
Manifest this update: Thu 26 Mar 2026 07:01:22 +0000
Manifest next update: Fri 27 Mar 2026 07:01:22 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: ohwD5CfjQDKYy942JC5XBYAfJokBZ7AvZKxPnN4nvaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a1:6b:77:b5:eb:f1:69:a0:56:ab:fd:a4:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Mar 26 07:01:22 2026 GMT
Not After : Mar 27 07:01:22 2026 GMT
Subject: CN=a51d90976c637a0f7b5e14d2488b2242daa580aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:aa:06:72:ba:04:7c:93:a2:40:4f:0a:8f:
ca:57:c8:cf:5d:8c:7c:0d:6e:bd:32:18:aa:59:c5:
71:46:1f:ca:57:f9:9b:6c:0d:d8:29:d9:4b:c0:97:
db:d7:41:59:52:a3:80:a0:bd:b8:f6:7b:b8:dd:6a:
45:d7:7e:c7:b4:0a:c9:70:2b:54:cd:c8:60:b1:6a:
16:57:d7:20:9a:11:4d:c2:a3:81:c7:d4:e5:a9:1f:
14:8b:b0:1b:6c:9a:ee:c9:02:42:25:72:e4:58:f7:
a6:66:8d:34:79:9a:3b:c9:ab:98:c9:46:5e:fd:b3:
ba:2b:c5:47:a1:14:25:b3:dd:7e:80:e8:f6:b7:57:
a8:cb:b2:e7:de:8b:6c:d2:b7:c1:6f:8f:13:2c:7a:
76:f2:c4:56:20:8d:57:a0:7d:5d:00:59:98:03:5e:
dd:ec:97:e2:98:f1:5d:b9:ab:fe:60:74:2f:4b:ac:
60:66:03:3d:a0:e3:f9:81:31:dc:7c:f3:31:23:1e:
b7:49:67:c1:bf:9a:0b:63:7b:6a:c4:d4:0e:39:53:
7e:12:66:9a:d2:27:a4:b1:1c:dc:9e:15:4e:e3:b0:
44:e5:f7:96:09:0a:88:dd:0d:63:61:3a:d8:98:be:
b7:63:8e:02:ad:5a:15:de:3f:f8:c9:8f:73:b3:48:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:90:97:6C:63:7A:0F:7B:5E:14:D2:48:8B:22:42:DA:A5:80:AA
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:23:66:82:11:d1:b1:ca:5a:de:8a:d1:3f:cf:c6:30:8c:28:
12:3c:d5:00:07:ec:c2:75:c6:33:3e:22:2d:97:c6:fa:a7:34:
ba:e7:7c:12:51:53:54:07:44:70:11:04:9d:93:92:0a:0e:bd:
58:fe:4b:9f:36:a3:a8:16:aa:3c:a4:3e:b0:7c:35:d7:36:82:
58:10:be:ad:a2:30:44:46:c7:13:c1:f0:7f:81:43:69:ba:a0:
de:d2:d3:c7:91:63:e8:b5:cf:e7:87:f1:1f:9f:62:25:fb:52:
d2:34:21:2a:e8:38:87:be:aa:69:88:d0:2b:00:ec:73:ef:68:
5d:72:95:85:81:a3:e5:ed:a9:25:d8:52:79:c6:9f:a1:2c:db:
9c:37:25:fc:f6:9d:9a:e5:a0:2f:11:46:c7:8c:d2:ad:23:4a:
a7:53:b0:45:6b:1b:51:24:66:84:9a:7c:13:e0:bb:a6:88:83:
0d:2e:9f:22:35:17:d4:98:c5:aa:96:3f:36:dd:20:ed:4a:5b:
cd:83:20:42:62:2a:c2:c6:2f:c3:e5:8c:67:0d:f7:ad:33:2c:
48:2d:ad:4d:f8:66:ac:94:06:1f:54:81:a8:c0:c4:4f:91:98:
f9:94:45:46:c1:66:cb:bf:43:da:e3:26:2c:d8:47:f5:4a:0a:
a3:34:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:06 2026 by rpki-client