Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: mbNp7lx3YKQ573svXHmQAdBFXmYue7l13hRtpNKUt2M=
Subject key identifier: 7F:A9:8F:38:78:8C:89:C1:A6:72:49:4C:BA:E1:46:CA:03:1A:F7:87
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 019D273AE816D355C09D3E0C73AF0C9E7F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: 0307
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: He9hnomwGuHFgfI826p2ASF0skmuT3r0prfHpwwLvnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e8:16:d3:55:c0:9d:3e:0c:73:af:0c:9e:7f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=7fa98f38788c89c1a672494cbae146ca031af787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:f5:2c:d4:02:61:8b:d4:4a:a2:1f:91:d0:
38:e9:03:e5:94:8e:e7:2a:91:8f:bb:26:ce:f8:36:
62:2e:41:35:a4:b5:1b:41:dd:b6:87:f5:07:21:48:
dc:35:17:55:0e:47:a6:e9:2b:f8:39:cd:56:4f:66:
af:0a:ee:1e:35:85:a3:31:a6:36:5e:9d:f3:82:8c:
6d:b9:5c:8f:10:31:48:3f:bf:4a:fd:7c:d7:06:b8:
2e:32:80:81:b7:fe:8a:a7:94:b0:db:67:0a:66:3f:
fe:64:a1:81:2e:d8:6d:70:41:a2:34:f8:19:a3:68:
94:2c:22:4f:6e:9e:85:fb:63:52:fb:7f:14:62:95:
1d:fd:d5:a9:f6:37:56:a3:52:2a:3b:0c:6d:6d:e7:
64:55:dc:f6:82:02:60:1f:23:34:1f:0b:67:e7:50:
53:7f:66:90:05:be:c3:a4:2e:d0:0b:be:e9:58:5f:
e9:12:b1:df:f2:6c:35:fd:74:94:30:6e:c1:8b:f1:
2c:6c:42:1b:79:9f:39:89:72:31:14:77:ce:56:b1:
a0:c0:ab:73:20:94:7f:8c:2a:16:99:02:d6:3b:2e:
1e:d9:71:c7:98:ef:d8:53:0e:23:66:8d:48:0d:e9:
51:78:8b:70:e4:30:96:29:34:52:9e:4e:8d:4f:3e:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:8F:38:78:8C:89:C1:A6:72:49:4C:BA:E1:46:CA:03:1A:F7:87
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:92:fd:ce:17:14:5b:b8:2d:81:b2:5d:1d:6f:6f:14:87:
03:fc:72:2e:1f:e2:bf:86:02:0e:9b:1f:4f:66:fa:4f:ae:8b:
ed:4a:85:17:eb:ff:98:c4:17:53:3b:b8:3c:17:de:cb:06:ed:
23:b1:46:71:eb:e9:ea:c1:6a:80:86:1d:fe:00:85:29:58:a6:
e2:7c:2c:7c:bb:f2:5a:6a:88:1d:ae:5e:28:64:c2:df:c1:98:
00:81:db:ee:c2:f4:ac:e7:93:89:45:52:2c:7c:98:e6:0b:5f:
8e:75:db:fc:1f:6e:55:a1:c6:da:66:fe:fe:4d:98:1a:4d:21:
35:d2:c9:8f:b4:f5:56:63:46:8b:14:73:7c:15:c6:88:51:82:
ed:d0:23:68:20:3e:38:08:15:4b:4d:1d:22:2a:42:2c:71:6a:
2a:aa:f7:3e:10:2e:97:52:26:a9:00:7b:6a:a0:e8:09:cc:3a:
30:23:06:93:bf:4b:90:3a:ad:11:b9:2b:73:32:8c:d0:9d:02:
96:fd:0f:84:32:b3:29:78:90:cf:b1:32:82:9c:d8:f7:63:92:
b2:9a:a5:46:14:e7:9a:d6:82:76:f8:d0:35:89:38:4b:b9:e2:
5e:b2:ae:3a:2c:be:99:9d:35:72:74:90:49:4a:c6:0d:6a:03:
a0:7e:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:42 2026 by rpki-client