Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: mHmRahSBdg8vCS1jcuHbsT0x1IrqFW8JL4/LenUYMpA=
Subject key identifier: 66:FA:71:9C:84:83:0D:A8:BE:12:68:C8:50:4B:9D:27:21:FE:48:8E
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019D281653E31A1E5A2E14EDBC5B65FF6303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0716
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: yFM20ewIjIDTYv+bJgg6xEcfv8UV3+jMxhLvhHcfqGI=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:53:e3:1a:1e:5a:2e:14:ed:bc:5b:65:ff:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=66fa719c84830da8be1268c8504b9d2721fe488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:14:86:a6:c0:5e:08:88:0e:74:5e:f7:8f:
ce:92:21:b7:b0:fd:db:7b:65:24:2b:a4:84:b6:e9:
86:4e:51:a8:1d:20:e5:e7:ec:43:33:dd:ac:5f:b4:
9a:e9:21:89:f8:19:a3:ad:a8:93:d5:73:55:4d:dd:
86:fa:74:d4:d3:08:a1:a7:0b:4a:6c:2b:c1:43:2d:
d8:2a:81:65:44:53:45:4f:b3:69:70:09:47:61:bd:
b1:f7:ac:8f:00:98:93:02:dd:cd:bc:7e:49:73:9d:
b4:cc:14:ec:8b:8a:60:42:5e:51:9f:bf:fe:84:5c:
e1:f2:2f:b8:ac:09:df:f2:28:bd:ae:05:e2:d4:d1:
2f:a5:57:18:4a:10:c9:18:33:0f:d4:c8:c9:3e:e5:
ed:83:1e:9d:af:e2:1c:b4:5f:a3:af:1e:11:24:4c:
6f:d2:2b:42:ec:89:6d:52:fd:e2:06:62:48:66:4d:
2f:4e:55:85:67:8e:ef:93:c6:47:15:81:ca:10:16:
1f:0c:d2:0b:78:8f:c4:fc:b7:89:ba:aa:99:5f:3c:
44:7b:03:31:1d:f5:32:80:a1:3d:6b:7b:b4:26:98:
b5:ea:57:9b:eb:bb:04:3b:84:c4:83:f2:fc:62:bf:
3f:1b:40:c5:d2:2b:9d:1a:93:34:e7:be:4a:c7:79:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:71:9C:84:83:0D:A8:BE:12:68:C8:50:4B:9D:27:21:FE:48:8E
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1e:21:3c:c5:73:ca:a3:9b:33:88:2f:bb:1b:50:ba:87:37:
98:52:60:6e:77:b0:43:e7:e4:21:6e:e6:b6:cf:b4:e5:62:0a:
14:77:e4:6b:e8:d4:91:26:4d:66:05:d4:2a:d3:a9:22:bb:30:
e5:e8:76:96:dc:06:06:5d:9e:44:53:65:d0:36:58:52:c7:7e:
bb:56:54:01:76:55:bc:b3:93:79:af:10:28:cd:03:a0:54:28:
41:ed:58:b0:bf:ad:ce:c8:1b:8a:9e:c7:31:3e:37:26:94:70:
f6:d0:a3:f3:2c:d1:77:23:fe:58:c1:26:dd:90:a1:f8:17:df:
ec:93:35:8d:4b:b7:d2:f9:81:2d:9e:03:5d:c8:32:38:57:ba:
15:fe:74:d7:cf:19:dd:d7:12:b2:62:de:d7:37:82:ea:c8:57:
04:b0:97:a4:e6:14:24:be:83:63:08:3f:65:c3:15:03:6b:df:
4a:29:0d:cd:52:22:17:e6:9a:40:d2:0d:99:8b:8c:63:e0:70:
c7:79:50:4e:0d:b7:42:f8:e0:bb:17:9b:14:f5:47:3b:ae:ba:
35:e9:4c:46:44:4b:77:9c:bd:fd:c3:d2:1a:51:c3:77:cf:f6:
ae:6e:30:26:54:9e:2c:65:54:67:e8:9a:2d:e0:bf:1d:72:d4:
a4:9d:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:01 2026 by rpki-client