Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier: UIbraxmalvutJcDqcYRApp5xzV1YFQLDK3nHjgroRVg=
Subject key identifier: 9C:F5:6D:77:30:C6:8E:99:D3:91:75:E8:7F:94:93:44:4F:E9:20:38
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial: 019D273B179D03806F2F7931508853AB2BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number: 035C
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: t7I7hMI1wf1jtnH3ZUHiUKTigxacfH2E74ftzf5tKzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:17:9d:03:80:6f:2f:79:31:50:88:53:ab:2b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=9cf56d7730c68e99d39175e87f9493444fe92038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:03:45:7f:3e:7a:ce:16:d4:bb:cb:52:1f:
0e:c5:99:2d:a6:ad:b9:e0:2f:fc:ca:34:43:d6:96:
47:99:5d:72:fe:42:e5:51:d4:11:2b:98:89:90:5f:
a2:0e:95:be:d1:7f:a5:13:74:02:38:06:7f:14:30:
87:60:19:b3:3f:d2:b5:ee:ee:35:4b:69:b6:75:82:
70:c3:7c:f5:d0:ae:62:e4:ad:15:fa:fa:af:db:be:
c6:fe:bc:aa:f1:ff:a5:70:90:f2:3e:be:82:be:f6:
99:4c:78:76:b0:0a:2b:50:e8:1a:54:e5:10:51:ba:
ed:18:7d:7d:c2:04:19:61:9c:17:80:e9:99:15:2b:
b1:45:75:e9:0d:5d:3d:d2:e3:eb:2e:18:88:64:5d:
33:b4:de:d0:2a:4d:02:31:2a:b8:45:5d:c2:ca:b1:
64:7d:be:7b:d7:3b:bb:15:02:2d:7b:4a:c9:d1:ac:
9f:f3:df:ba:d4:d4:80:4e:26:5d:8e:01:56:22:f7:
5c:56:6a:9d:72:46:40:d0:a0:91:b4:57:2a:22:c5:
a8:5b:d8:aa:8c:fd:86:13:c8:34:81:6b:b2:29:78:
51:43:6a:d3:ff:12:a4:06:ca:23:ad:3f:ba:ea:93:
f0:3f:cf:d3:ca:f9:30:b7:d9:2e:06:14:34:a0:cb:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:6D:77:30:C6:8E:99:D3:91:75:E8:7F:94:93:44:4F:E9:20:38
X509v3 Authority Key Identifier:
keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fa:9f:7e:f9:9d:2c:e4:c2:6c:b6:a0:d5:bd:3d:9a:65:b2:
bb:99:b3:84:fc:3a:bd:6f:70:e6:fd:e1:2e:38:e1:9e:44:ca:
48:af:df:d8:c7:a8:d6:d7:62:a3:ab:aa:06:41:3a:ab:8c:0b:
7d:f3:9e:97:f9:73:9d:46:cc:1b:3c:25:c1:37:3e:88:2e:8d:
e8:74:25:bd:c1:db:fe:78:54:f0:d9:bd:3d:8b:f6:73:20:ba:
9d:a6:5b:46:0f:ff:4a:29:02:dd:df:64:c2:4e:9f:7c:c0:5e:
ec:fe:73:be:ca:1f:61:2d:d2:b7:6b:e4:6d:32:13:a6:a3:bb:
b7:45:1f:c4:5d:ca:7d:18:df:5f:7a:07:a8:be:a8:38:65:21:
15:ce:91:f3:81:9c:0e:f7:eb:b4:14:fc:44:21:3e:a8:92:ce:
43:3a:6b:5c:93:3e:ca:e7:31:54:ea:75:40:3a:d0:f6:bf:8f:
10:2f:ce:d1:80:c9:bf:49:0c:0f:60:2d:a0:94:b3:06:ad:40:
59:51:b8:66:6e:25:5a:09:c1:c8:e6:b1:d0:a5:19:ec:94:dc:
85:10:f6:b0:bc:61:af:73:49:19:29:4e:cb:8c:9b:fc:b7:53:
d7:9c:d0:7f:d8:90:cc:89:f8:e8:a8:f4:e9:f4:80:2f:9f:41:
93:dd:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:43 2026 by rpki-client