Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: tdRE5fPVAnXO544ef1jBeKXyktz0wrBDyt2YzGQSjs0=
Subject key identifier: 4D:27:AF:C1:C1:30:DC:70:11:F8:A3:86:86:24:2E:BC:67:41:03:FC
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019D265EF690D0C39AA939941666182CAFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: E9IB3sYZ-oc7-YPITpGQaihn-so.roa (hash: 5jPfUKrdbwudGJGlNuuaExPB1D+OPBNCB1dk0F5dGxU=)
2: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: V/5WhHEOK7PTaKzhT9yHPNcF9JfqiD8x46yo437OyIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f6:90:d0:c3:9a:a9:39:94:16:66:18:2c:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=4d27afc1c130dc7011f8a38686242ebc674103fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:ba:ae:54:1b:37:9a:ad:84:e6:95:10:35:
c8:45:02:68:7b:0c:fc:be:99:7a:69:af:a0:82:b1:
69:0f:85:8c:4c:cf:ab:19:9b:9c:45:e8:5b:5d:74:
34:c6:ea:20:7d:82:9b:87:a9:05:37:5d:53:2f:b4:
f7:da:46:f5:61:2c:4f:2b:5c:ab:78:2d:c0:5e:80:
38:72:7b:91:a1:0c:7e:8d:cf:54:ae:12:84:2c:c7:
df:83:05:93:c6:31:a0:cb:4f:50:0a:98:09:96:db:
83:b1:e3:b4:04:33:d1:51:9c:f9:56:f0:56:87:40:
26:92:50:a2:30:c6:84:e1:1d:44:0b:6b:e3:8d:e9:
d2:50:12:c7:1e:a9:72:c7:ff:17:49:b8:e4:9c:a3:
6d:30:5a:62:0f:7b:cc:c8:98:17:94:31:db:05:01:
48:86:5d:42:39:93:b7:57:f6:67:ac:c5:91:50:d8:
7a:30:8c:e1:f0:25:8d:5a:50:b8:18:90:8e:99:b3:
d0:67:72:f4:c4:c4:4e:90:6e:8d:c8:45:f1:34:b2:
16:a5:87:cf:e8:91:a1:f5:54:cd:50:4c:79:9f:d6:
e4:24:45:39:7d:db:5c:cc:52:79:80:1e:80:c2:1f:
84:6f:b7:60:66:bd:eb:3a:3c:c2:85:37:06:1d:4b:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:AF:C1:C1:30:DC:70:11:F8:A3:86:86:24:2E:BC:67:41:03:FC
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:19:13:05:66:2a:23:14:cb:0f:c1:d5:d1:ce:80:e9:c8:38:
7c:f3:73:a0:5a:0f:5d:e7:d8:94:c6:9a:34:9e:9e:1e:cb:1b:
8c:06:f2:88:78:8c:65:df:c1:39:dd:09:92:0e:46:7a:b0:5c:
2e:63:d8:ad:e1:2f:06:02:b4:98:cc:67:af:e9:56:0d:db:54:
d5:7a:e0:4b:2d:0f:0d:d3:9f:89:11:b8:aa:51:43:21:33:68:
fd:cf:24:81:5b:cb:f7:bf:33:67:5a:7e:f2:35:13:ad:ea:3d:
c3:d5:c5:ce:52:8a:31:e9:86:a8:1c:ce:df:e5:19:10:cf:c0:
40:c7:04:d8:c7:ff:b6:c5:50:50:6a:6a:b0:5d:1b:f2:ce:c2:
12:62:cf:07:37:4c:7b:b7:71:a5:4a:ae:b4:c5:be:7f:7a:4e:
60:4d:ec:76:51:1d:9e:05:7d:e3:76:b2:d0:45:ca:51:5a:0a:
47:87:45:fe:ca:db:04:99:7e:b2:2e:d7:72:d4:95:64:dc:70:
5b:9f:b1:07:71:c8:13:ca:3b:0e:c0:d2:63:e4:02:4e:18:f1:
83:73:af:40:7a:ad:f3:9b:42:5c:90:22:3a:c7:79:5e:64:fc:
7c:66:12:84:b8:c5:ad:a4:02:be:52:8f:bb:e2:0c:dc:f6:da:
13:20:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:53 2026 by rpki-client