Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: /hTpryWNBaYjTNt4iuIcHGGVmjPXig9udi1diFV5qDw=
Subject key identifier: 21:26:EA:C3:3C:82:FA:C4:CE:49:E9:5D:84:29:A3:55:BF:E3:BD:4F
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 019D2B84E6D6FB1388F7CC6D8269432F6FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 19:00:23 +0000
Manifest this update: Thu 26 Mar 2026 19:00:23 +0000
Manifest next update: Fri 27 Mar 2026 19:00:23 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: 6vAia0iflvbi7rJ+kS1LYbQV0qx3+3U6SkpxPar91DM=)
2: b7PnGwkHoYONbOXWGIYl79niYLE.roa (hash: St4yEXp9JdHRtTcY6I3db8+uCdXOV22vIrFtZfg9uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:e6:d6:fb:13:88:f7:cc:6d:82:69:43:2f:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Mar 26 19:00:23 2026 GMT
Not After : Mar 27 19:00:23 2026 GMT
Subject: CN=2126eac33c82fac4ce49e95d8429a355bfe3bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:20:73:1d:d0:87:6f:b0:c6:24:dd:fb:1b:
53:55:b0:a0:92:96:54:80:90:44:ca:8f:a4:05:6a:
0b:57:65:45:98:cf:19:b0:07:b4:46:44:7c:93:c6:
ff:9c:3d:d0:e2:aa:f4:ed:bf:08:f8:f0:a4:3d:d1:
1e:ca:3a:4c:11:d3:04:77:80:66:7d:25:eb:5d:38:
be:f8:eb:4b:d6:7b:3a:f6:79:77:64:b5:33:65:52:
db:38:97:a8:7e:ea:3e:f4:10:39:91:c7:27:60:5f:
71:70:68:30:41:3f:c8:c7:cf:e9:6f:53:61:f9:30:
0f:2a:3c:c1:77:ce:5b:56:7f:8a:d3:40:99:cf:2c:
36:77:9d:92:30:88:93:99:30:a8:84:04:0d:35:a7:
85:7f:b2:3e:1b:df:88:db:c9:34:9d:14:b4:62:2e:
d6:97:63:82:e7:7b:12:a3:9a:a8:19:a1:be:2a:16:
17:ad:96:1b:da:7a:6f:62:da:89:5f:b1:8b:af:82:
b4:9a:80:fe:6c:33:23:6c:50:6e:ee:75:4d:d8:fc:
e1:a3:e4:55:e5:72:17:2f:ac:0f:1f:0e:b7:ed:19:
55:8a:da:bf:de:22:a6:60:79:03:20:a6:28:ec:54:
4e:31:72:81:45:f5:07:3e:f0:9b:42:57:e7:c4:52:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:EA:C3:3C:82:FA:C4:CE:49:E9:5D:84:29:A3:55:BF:E3:BD:4F
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:a2:79:ce:5f:04:02:1c:a4:05:32:7d:69:52:d8:7d:9e:
17:ef:19:a9:28:91:72:e4:c7:db:20:ff:c4:5d:c4:82:f8:cd:
f2:51:2c:75:4a:33:00:50:7d:4b:e3:e4:ea:ab:59:e2:89:f9:
48:e5:8d:9f:ac:54:57:67:ee:2e:b2:e6:07:88:64:22:24:ff:
11:cf:07:50:17:4d:d5:a2:b8:0b:ca:58:91:eb:9f:90:14:8c:
e2:03:24:b8:cd:31:1a:13:e2:4e:c7:cf:e7:15:97:65:9a:8c:
dc:00:91:c7:a3:71:9e:de:f1:d0:7d:f7:45:2d:34:88:f9:b8:
6c:c5:5f:bc:c8:75:0f:4f:88:a4:f0:74:2f:77:a9:cb:ec:20:
ec:7b:fd:e0:f4:5d:df:87:9e:15:5b:f2:0a:0c:aa:4d:e1:4a:
10:50:30:49:3b:f1:02:a4:b3:91:69:d9:b4:b7:06:3c:2d:e3:
88:6b:cb:7c:46:b5:a7:1f:12:a9:5d:18:f1:54:2d:76:17:2c:
0f:0d:7d:51:a6:44:cd:50:50:ef:9f:8d:d3:1e:72:6f:4b:4f:
ea:c4:f6:41:8a:1e:0e:96:83:58:d4:01:fd:34:98:fd:78:ba:
81:a3:87:af:53:1b:fc:79:ec:bc:e1:8e:1d:41:95:4d:82:08:
a7:76:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:55 2026 by rpki-client