Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: 0uHtQnFBDhCcJeW9VoXR3QI7NTxdd0sdAhUQ7u+zmeM=
Subject key identifier: E4:3B:1F:40:FF:FA:72:BC:20:74:D6:18:8A:23:DA:5A:E3:2E:A6:C7
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019D27A926BB1CF2F9A42FEED57FFEDE6199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: ZzgDNxfzXVoD5QnT1YE5pPo42CCl0eJX+Jztvd08C/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:26:bb:1c:f2:f9:a4:2f:ee:d5:7f:fe:de:61:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=e43b1f40fffa72bc2074d6188a23da5ae32ea6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:dc:4a:4a:2f:d3:70:11:b5:56:c9:19:ba:
59:ba:a1:16:28:6b:5f:75:bd:b5:d2:ce:79:c3:47:
3b:17:c3:d2:95:44:ed:9d:39:f3:54:ac:84:e3:02:
0c:d6:f6:a7:5b:af:13:6b:ed:5c:9a:ae:32:c8:89:
34:b8:91:cc:53:88:80:56:40:22:5e:fe:a5:b4:b4:
25:35:52:cf:cc:1a:f5:09:4d:aa:26:86:13:d3:5d:
19:51:db:ac:ba:9a:7a:5a:40:81:37:c7:a5:70:52:
69:4b:99:a1:72:30:14:71:bf:66:69:61:72:5b:2b:
2c:57:37:54:4c:7b:9f:7a:80:74:3a:5b:88:4c:20:
d8:3c:85:45:e5:11:53:9f:a9:7c:68:8f:1b:16:60:
35:97:f5:5c:fa:90:6d:b8:36:e7:ce:a0:c6:c2:78:
cb:c3:4d:ec:93:8b:fc:85:51:60:d2:38:5f:b2:e2:
9a:4b:52:b5:cb:4d:cc:29:30:82:48:37:b9:b3:34:
ec:a0:2a:b6:4b:f9:c7:69:ec:7e:bf:7c:69:39:b8:
01:cd:91:7a:81:f0:6b:5c:6e:93:32:bf:4a:a2:08:
5e:29:24:2d:7f:90:af:63:86:19:b2:27:1f:38:04:
c8:85:dd:8c:f0:c9:e1:b3:bb:30:66:e1:48:77:0e:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:1F:40:FF:FA:72:BC:20:74:D6:18:8A:23:DA:5A:E3:2E:A6:C7
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:8e:ae:4b:0f:85:61:b9:17:2d:e9:c6:8b:73:2c:d1:47:
aa:d6:0d:a6:a0:f3:19:86:1b:c8:50:22:df:fd:05:74:26:e1:
3b:26:0c:a8:71:1c:f3:bb:5a:85:d4:20:ae:00:0e:82:c2:04:
54:5d:01:ca:22:9d:ec:a3:a2:ca:5b:85:2f:86:9a:ef:a7:6e:
5b:38:d9:b9:08:2a:f2:21:bc:1f:a1:f0:7e:14:ce:f3:f4:1e:
a3:90:c2:ec:54:8b:d5:2e:b1:b3:30:b2:f4:48:64:5d:a6:df:
bf:39:1d:04:74:2b:bc:66:c2:13:f6:64:19:cc:d6:72:63:f9:
83:c9:9a:0a:64:0e:b7:43:ec:90:2c:94:88:ee:82:fd:62:d9:
91:e7:68:59:1f:b0:b9:78:1c:3f:06:d2:9e:92:07:ce:f5:44:
2b:6c:51:6f:8f:c2:bc:d0:ce:5d:39:c2:c3:c2:bf:2d:c4:1d:
9d:ae:1c:12:dc:8a:ec:39:8e:8f:7e:32:f5:d4:e2:f6:8b:79:
67:f7:32:84:0b:e6:ba:14:bc:19:7a:17:9a:9e:57:0e:16:4a:
14:13:e1:5a:36:ef:de:cc:9e:30:1f:c1:fd:4b:86:46:de:f3:
02:ee:64:5f:6e:62:39:c4:19:9d:62:f3:bd:56:45:b5:49:ce:
b1:0f:b0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:43 2026 by rpki-client